336.735462] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 336.743515] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 336.751569] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 336.759629] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 336.768394] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 336.768434] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 336.768456] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 336.791187] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.798694] Interruptibility = 00000000 ActivityState = 00000000 [ 336.804993] *** Host State *** [ 336.808244] RIP = 0xffffffff8120b2b4 RSP = 0xffff8801c3737350 [ 336.814292] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.820775] FSBase=00007f783d032700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 336.828617] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 336.834577] CR0=0000000080050033 CR3=00000001c2a8b000 CR4=00000000001426e0 [ 336.841680] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86e01380 [ 336.848428] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 336.854561] *** Control State *** [ 336.858077] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 336.864786] EntryControls=0000d1ff ExitControls=0023efff [ 336.870334] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.877299] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 336.884017] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 336.890665] reason=80000021 qualification=0000000000000000 03:33:36 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 336.897054] IDTVectoring: info=00000000 errcode=00000000 [ 336.902548] TSC Offset = 0xffffff4a28be37f9 [ 336.906931] EPT pointer = 0x00000001b9fbf01e [ 336.962760] *** Guest State *** [ 336.966144] CR0: actual=0x0000000000000031, shadow=0x0000000060000031, gh_mask=fffffffffffffff7 [ 336.975146] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 336.984031] CR3 = 0x0000000000002000 [ 336.987816] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 336.994361] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 337.000914] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 337.006954] RFLAGS=0x00008002 DR7 = 0x0000000000000400 [ 337.013009] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 337.019734] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 337.027788] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 337.035838] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 337.043910] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 337.051944] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 337.060024] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 337.068055] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 337.076098] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 337.084267] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 337.092322] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 337.100342] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 337.106809] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.114309] Interruptibility = 00000000 ActivityState = 00000000 [ 337.120596] *** Host State *** [ 337.123847] RIP = 0xffffffff8120b2b4 RSP = 0xffff8801cbf2f350 [ 337.129881] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.136334] FSBase=00007f783d011700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 337.144217] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 337.150165] CR0=0000000080050033 CR3=00000001c2a8b000 CR4=00000000001426e0 [ 337.157243] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86e01380 03:33:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x1f, {{0xa, 0x4e20, 0x800, @loopback, 0x9}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x7, @ipv4={[], [], @multicast1}, 0x200}}, {{0xa, 0x4e24, 0x7, @mcast1, 0x1}}, {{0xa, 0x4e20, 0x1, @mcast1, 0x800}}]}, 0x210) setfsuid(r2) read(r1, &(0x7f0000000300)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:37 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200), 0x8) r2 = syz_open_pts(r1, 0x0) dup2(r2, r1) 03:33:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='\x00'}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x4002, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000300)=r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') write$P9_RREMOVE(r3, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) [ 337.163954] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 337.164648] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 337.170060] *** Control State *** [ 337.170076] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 337.170085] EntryControls=0000d1ff ExitControls=0023efff [ 337.170102] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.200701] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 337.207437] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 337.214055] reason=80000021 qualification=0000000000000000 [ 337.220428] IDTVectoring: info=00000000 errcode=00000000 [ 337.225914] TSC Offset = 0xffffff4a28be37f9 [ 337.230305] EPT pointer = 0x00000001b9fbf01e 03:33:37 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200), 0x8) r2 = syz_open_pts(r1, 0x0) dup2(r2, r1) 03:33:37 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/99) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x341000, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000540)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x1, 0x0) unlink(&(0x7f0000000440)='./file0\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000200)=""/1) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r3) r4 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="7e010000000000000401adc2040000000300000000000000b17b9664df0e626cfebcf2d10c994f54ee476300a69bf9399e4762b28bddbe7997"], 0x18) read(r4, &(0x7f00000002c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r4) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000004c0)={0x79ea, 0x0, 0x1000, 0x1ed}) 03:33:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) setsockopt$inet6_buf(r0, 0x29, 0x7d, &(0x7f00000002c0)="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", 0x1000) pwrite64(r0, &(0x7f0000000040)="2d675015c6c0fbf565ada014c547524318df9f10212a84cb6a1b7c83b19c6edb9ddc21bb473c4450748f0c694ddd7ed56c3744906369af69d040b53647a9e86a9923525068e03114baada8d66f1ce8f1857cacf6fffe23e9fe39c1a7ad048b8f0ab7d5f8e63c6656b21d25d11310bb41d6acac0bbbf162829e1f994bf27e61e302c55e8d912de6e4d788fc30753eb8b69d0deceef42b77928a79f63bbdeeb327575dae61208e88cb36229c2dfee33a630c6d8855e20897492715fafc4202c9f5d0c39e1f4e9d51f57b53e8e47874a6a71f01be628cecc51a12df404cd81f2b442f02f12ea0657dac21a2937a7ac29b171a69c50d9184f225", 0xf8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x74}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:33:37 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:37 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r3, r1) 03:33:37 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x0, 0x70}, 0x2c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x10) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x3, 0xfffffffffffff36a, 0x10000, 0xffffffffffffffc1, 0x5, 0x6, 0x4}) 03:33:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000090d000/0x1000)=nil, &(0x7f0000909000/0x2000)=nil, 0x1000, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) close(r0) 03:33:37 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101c00, 0x108) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x6) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000003c0), 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/206, 0xce) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000004c0)=0xeffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)="6d6fb993353075192adc756e74737461747300") 03:33:37 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000000080)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0x10001, 0x0, 0xffffffffffffff00}, &(0x7f0000000280)=0x18) chroot(&(0x7f0000000000)='./file0\x00') [ 337.540425] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:37 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x1004e20, 0x8001, @mcast2}}}, 0xfffffdd2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003600)='/dev/vga_arbiter\x00', 0x22000, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000003640)={0x3, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @rand_addr=0x100}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) 03:33:37 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 337.685221] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 337.712868] REISERFS (device loop4): using ordered data mode [ 337.718819] reiserfs: using flush barriers 03:33:37 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 337.750068] REISERFS warning (device loop4): sh-460 journal_init: journal header magic 0 (device loop4) does not match to magic found in super block 4c1f8184 03:33:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) clock_settime(0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000100)) r4 = inotify_init1(0x80800) fcntl$getownex(r4, 0x24, &(0x7f000045fff8)) [ 337.814442] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 337.843466] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 337.877022] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 337.951184] overlayfs: missing 'workdir' 03:33:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @tick=0x6, 0x0, {0x0, 0xff}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0xffffffffffffffff, 0x0, [0x40000071]}) 03:33:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80880, 0x0) timerfd_gettime(r2, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000000580), 0x1000) 03:33:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x15, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000004000611044000000000000001200000000000b1525904e952c9500000000000200"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r1, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x4, {"45b24e6544adb2794ff1fb8805880124"}, 0x6, 0xee7a, 0x6}, @in={0x2, 0x4e22, @remote}}}, 0x118) creat(&(0x7f0000000280)='./file0\x00', 0x11) 03:33:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) 03:33:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:38 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r3, r1) 03:33:38 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3a924bd5f796e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3caefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec00000000000000", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5450, &(0x7f00000001c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:33:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x250002, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0xffffffff, 0x2, 0x100000000, 0x10001, 0x100}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 03:33:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() geteuid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$BLKZEROOUT(r0, 0x40081271, &(0x7f0000000040)) 03:33:38 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000001900)="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", 0xdff, 0x1}]) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x1) read(r0, &(0x7f0000000080)=""/4096, 0x1000) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x5) [ 338.315943] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 338.352026] overlayfs: missing 'lowerdir' 03:33:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x7ff, 0x80000000}, {0x1, 0x6a}, 0x8000, 0x6, 0x8}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket(0x10, 0x3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) ioctl$sock_ifreq(r2, 0x10000000089f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x70d000}) 03:33:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x200000]}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) 03:33:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000140)={@remote, @multicast2}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8000) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x5, 0x1, 0x10000, 0x100000000, 0x3, 0x6}}, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 338.443183] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 338.447932] loop4: partition table partially beyond EOD, truncated [ 338.465454] loop4: p1 size 2110250554 extends beyond EOD, truncated [ 338.529395] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 338.534165] loop4: partition table partially beyond EOD, truncated [ 338.542188] QAT: Invalid ioctl [ 338.567477] QAT: Invalid ioctl 03:33:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x8) r1 = socket$inet(0x2, 0x1, 0x0) open_by_handle_at(r0, &(0x7f00000004c0)={0xb0, 0x3ff, "5b4c876f2dd3939a414bf8c39f5353ec10a405b7c9e3142617a93fbfba3740e1bd44866832bdda4ca3058e790e5758ea1ff2d0e2bb12317b7ebfb5501b48f1e3fcda1534c19e73bca76d7e27816ee64d2109d568964e2ed21d98922b7f61d3f1da0b77d4d49c6a149a8200c41e95f13109573e825c538c271f19ee899cf1039987311e53356b38a170bce70ed2c6b14a753b1e302d0c6a6a39e4dfa3b3d1a17778156cf992b9b1ec"}, 0x400) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000100), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', 'bond_slave_0\x00', 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xf0, 0xf0, 0x140, [@cgroup0={'cgroup\x00', 0x8}, @nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) [ 338.581827] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 338.590769] loop4: p1 size 2110250554 extends beyond EOD, truncated [ 338.605381] loop4: p1 could not be added: 12 [ 338.612076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.823952] xt_nfacct: accounting object `syz0' does not exists [ 338.870987] xt_nfacct: accounting object `syz0' does not exists 03:33:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000000013002d54036205001a000000000000000000000000d707ffffff000b02000000000000000100000000000000381a"], 0x38}}, 0x0) r1 = dup(r0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) sendmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000000)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)="a5066b385575754030a81b21e46cdf00ad61b93e4e2738b4a7f993164e90412272", 0x21}, {&(0x7f0000000100)}, {&(0x7f0000000240)="5573ac230e6aa3c4147a3e73bbc78d79f36f12f9628a926d02e04534ee0768f5fdc17889eadd47fd2bc41bf52c08d74996d10fd823eb528fd25fa7eaaea305c1b5f266a7f5d688950e3fb734a871bbf8503a70af5428b6ad7a5d66efb3d46492152e107563c3d6e7f21a541a230dfa07ccf921ebdcb66f0b194775241b42f30f33faee2bbb0b1c48ee96d102f99b60c9c91b49f518525626a38a4469fdc7857c174a574df5ea531a5422deeed077242a77287f29abec792bcb002599a5de1779569d695ee2e9ffadeef29dc2dca8140ddcb3c7bd391486256290a92e07ce8ca3d99fd2a9ef4a75c9fefbe1d4246e17a8503f26cd6a3899e47445a0dcf9f62823491612922289ae1819ff61f27bd6e59f334ce583c13a8877778c3c76358311509cc9a9999f8e2b256b5466b651863f63ce33e592214b63893a38277a00a695fbadb850e1ad8c96485ffb10de3ae88a449d62de0ffbd6c7d45392563baed8a9d90770b53a26dacee87759494dad0d9bdb24f126b404129e78d6fc89cec8806afae746323a950c1a960db58cd54b79448e9edd38cc4d3367b2a3da3e2e66916acbda9a21403b41637bbfb6acbbda670654518721308c551fb6313958feb9553d6b9b05c93f57b88cb22b3c2b3ca104104c047fb86c6e22cf198d9b8b54366453669fa4bb6d74bfaa4c004c99709cfb9a717425d3ad546850e38a6ec38538bafdb5aaa9604c0c3b774bbf64e50df92da9f7c6c17f412ed0be84f1fb46161571bc7ad9362bd04fd5905633d8a06352aadf8242ad385a08cf874ccb71bf9e0bc6fc8094774f07778d2b63379bf166c827de4aa2a74b662f3eceb9bb3195e883ef48e0b84a86ed799f9bdb4e920512023b529d48196917c5b948d0c8bd8e38551603989d9c7b10924b0fc93df1f2b5d69fca01cbf61f5525e79bedf6b4a03b79513bf98105852ea2d5c876f15b0ee7a0228abb054b497569f2eeddd826a55f903efa1b8262fd85f4623c11d186537b0cb35c0a65bcf0a6f5c7c3a5f9a061477e94144447f3aa74778a6bbeb05e9e85ef972e1d82e899d4bfcae54dd745b596382278b2bccb73c998a882a406685d93fd5de574dd2ad20c398666434ce4fd8beb11a6ff953020622b2e7eac778ebe23bf297e992da0f364e5d6fbf3e7dc07a731df4eb821145727a57e998548ac46e40c236f4cbfbb44ba4010729fa9d778ea5cf04b2760b5396defde57e7b91c2310bf698e7b2c9ecd4828021613678b083b95148cee67f1b209a6f0dfb3242e73dfbf947ad1cc832f9c5cf6d44a01646bf25b6c9b78b91bd7cde2bc30fbe80793da230396d85c601480056aa91b094896bcbf49fb912bbb85705038da66372273536d2b1a1e0da817019792db120d5a551bfc77ae435197f785b2105ed05b8676acc0c223b2217fbff7a7de3d0f98ee8d05175a6208b7a329d5152346a503830090fe3e76ca39ddfcff1eb75eb3de5e6716e93bc8807aa7692ac4c538918077209e90fc5dab7e4e9c8f84fa480b4803e2f58812901e3de90d68239022fb3f804da3a3cc50c2ddf5c2ac8ff66223f40b327e9f0ad819f6200751f5b85c32048fe4721806e811e9e0f6673ead6248e2ff3338827ce368b2586f1d1db95849ec08ef5ae57496ce9c9f4cbbd82d3daa24e4cd7fa6bb140e481b8aa72a885a0ce6f3ca341a39b63d1f0582070bb075eb2c7def16ca6be34f23e24e8e1fa045f8ad0f5a99f811e643ab95d24b299808a323c55ac86a70c4b7bb88b9aa4da65c1904ff102cbbc778793970ed1c6c4efd5485fbc1effefbbca5b8a6ae62cc6f552f6aa7d62d27a1166853001993c704001ecba9e290cef85af82d3762f1625ac8303a31da74ca45452e3d6a4d5ff2886a3232e1bf9f33a440a59e29c21319f0b9f869e688d28cb62f1207d6bdcd3309ddf940f51785c51c7e0c8e51be5a54119b698b519f2fdb847fb543c82c40d75cfca816011bcf83be057e420a422296bc5adad6a123f26200151009a6bc54f319ac4026f3b02139332db8e3f3c6f23a71b385576ac9d9a21508d4c98dd5cbb89d2804e35edd2725666117f2587372e562982e084f8eaf7f59e710edf12a779035b4ad84b54aefad84004e355e9e783c084c2dd296a4195de442903aea2515a022f05d7d70f26b98563f3295113dcfd99d49e65c18d6e4f295d41805cc26b3cc768b5e770164967722334123d97169cba26b38403ffc4fbce81667a14439f9833e6dd68a8f4dd7eb788996c635ef00705058c5b8a88e7f61575661255e206af256ff51e7f7eb9f2ceebee7b630acd3f079afe17d418515c43be6b8e98b50dc12b3c579c7f367886aa405f95cadf3f10610ee7c1f37a0abcce16a84cdde99c71ddec8a2ddb996ab05f21f53f9160ee0e41614ecc0739753ed8af50bada59f55e89d95a7908ae968e47a2ffef4d0dfcb8314cf2c94c7d1f52d0e784af7e9c0b12048ab7b2e3b88102b62c199685c0e4830e97fa0b573102f6444539ced811a77a679b371129f164bd471f28babc5924f9dfa2ed75148a40da54f945e38181848804e8876644c2fa050d6e4f7fb545b4653126e386dd29a5da85e66ded7f5259a02d4458efe9b0866c080a0d1f05aee86a0e05772d69bbb089e64f2c306b3515c4e6da5dec179978c7b1dfc0f08d3c1edd948866af9bd241341425612e8cfc373d8f1987a8a5fd2540d1f3413ef4c7cb337dae3ffaaa26731ceb0d24263aa0de5797143205ddfd6d44f0c8708ae90f1b2b7d6d63188668b226135052629b7e441e9c21055e2d7f95c706c97845c6b00f367830621f830bac4ec633073c72111b6287fbce52daf9755b4338cba553a0b566e7a22811c512eeb114173ca3f25b10262dd29a59365944a6291fd368fb47354e959ff0bdcdb79b860dc46bb1881904aedc5ff11352e6fca73066786b7ab8afdab187d90c5f2fbaefa37e7d1e826cbeb7b07bff2eeb8c248e2a8ac9c3c766e61a34e021725a3b4654a0210dabc156f8fa8913dd5e2c906545fdd9687d444832bf9985301f7985d8a21503602db2f868d6365a6fd6b5e539b3674847aeb59398f15432ad8ba87af8e3d2486d558284500f1a5b16e8ef77952aa5747997853aa7e36d237fbc8eb5e372ba66eac67cefae409b728bd297406b710201cbb56d58ad5ba98a48d9668edbe985624810fad4812a72cfcce1460b82469f25c8c21ba1218c716fbdc1dce5a63361eb85a98ee022934361cff3ab2fd34dd30946de14e05951876caea192ab982d5589daadb2e0a5cf17e009095c5445d328fdb3a8cf84d135ebcf193d907249dd8ec515e70775daa455693accb4e022711bbd14f2ef76ffcd5faa87466ffe7278d3544991e56ee14db57c014b63bee88d73d8dbc9f4e640d8ad6688e1d87d6aba4f33ccea0ec8d0379820eb74d2638ae60064832563775da9fd29d14d006bbfbf99d535c7010f43b635ad12873c2ed6f0eddf5762f47afe5e0491787094a0018b79c1b4e4cc9b0f9ebdbb0f8756078da5528b5767f28bcd32c8f21217a4d8847fa6733048a1a4963c752132eed68bcfaddcd6a14cd8b617fed8b2ca7707b9187d53c35c0372e9f8b890a3658bbf3a3aa70bd2766ea8aa1b9ff0a68a565c5d45f69e256be24c68fef5828ccacc1138729ee6cddf916dc2271dff89ff9c04f8a31c06202a25b9eaf75921aa21f42705cd9d165a6a6997bcecb2467d8affefa39146884861174dff9d1daffa03bdafa494ab88a6bd44d92abd76eda629cf02ff44f651df8a63e2f9851d389e89dbd8d514ab20b7af37a2aea381cf712d4aa49d533e547d731582222f1e25fc58ccc924f9da4a53990d2de72988a6572f7cc282738721fb8b28c9fd657761e1ef951109f60f54d24ef92d0f5aa923fdda890d3ea9a2b8c2a91a605b62038d38d8d7fcee9bebc7ee11e5ec3a95ea6f22bcdb69cf7fa1e64a2c23d128b52249ff9bb9feace3cdf1dd5ad13e1acd55dc005ff441a2bcf51de6a8e35e46faa7127c8911a6b7de580869ead94af9b4a88fcb66314afd1208012eeeca75fefc99edcc6b4597874f3231def235c6eb7768b8ef6bfee9dd493f789bf3f949ba4030241671261fb2e1745fdf1676079751248a4e9b966937c1fa35635470257ee9d566e6af862348c26de4158859f8b43f70ec51cc1a5e22b2a36036aea6bd7d42f8fafa3de23ad70e7eeb7970628c81ff8ec8ad32b8cb3b9dcd3e83f57e6c0f34def4a7a2833bab1ff7500dc5700f1ad602edead3c8027bb4454321cc4dc1fd36e2ca1f72bcec9814ba073be81c81cdf56f2d6e75d933bcae35b0fdb522f52ff0db9781b9f90a40c06d814dbd209ecf86c9c3b270305a00285d8fa6b2176c4db98b10eb97b60bcf481f70755e9b7f1b89b3a934943dfa2b3774cb38b28c8dd12639d9b2ba3ccd1a9afedea27bb7808dedd54ca843730ebff493058dd2652fcfa4080c2e7b2b2914744511ff0a9c93555a40e6ae7cdd8355b97f99bbb162eef69cd3a1450abcceebd6a8b804f4b2425c8ce95f6672a47ec664d89e1e3b4244e00d512b0e55e3201bbfc8fdca904663aa3f997685fa1d85cc1d96c75c90ce52299f9f78cc6ae26d6fe72663ebc8cea9198612852e76a582709171c6ea71a87994380ea167c6ac9d1716e4fcf2697eec658f0663f75a274a4fc669378a417a4eb0dc1b5b863b3f0e3d86e89959fad30a2ea8a722b6fe7c7b8dc7f2590c66772e0436e8aba357813a500f8d3fce9fef26c6e6dd88eb64a4e4b571f0d2199fbef6e11f16ec720c811c8616ff62ed2e9ec723cb955c869e140c3cbc81490ad64ce035b037c4e852322fe27de660505f108ffd2570186c22bccde609923bbae258d39e0c6ccd6fc0139561bdb1e974950c5ca3af1caf178655a9e0e3d7d796cf6aa13ef67ab5caac0a3bbe0896b79054022dbc48c63096fd3fb0794b3864f1b3e9f0b3da53aff7bc19d077306d65edd29865b34e19de0462c41a2f5a1c89b86bfe4d82feed0934a499fe54ee85875f346a5ca90514606d8214df4fca771baba916ec3f6e8a0091e984fe58beb1e2b7ecddfc3e4f94c89e3f067aabfac57c8ed866e24f0d9d5ec54a2a279b7528002e8c6581f41724d37f6b59fcfe9552bf0c1c51ec5db9b0ed0ba8514cf96f793cca36118cec404c85625b403dbacbc7fd181013bec7ff6317168fa854dcaa4dcf063b651c670f73fa3518bc32584ffd9d2277cb5e3988366bb0123e8c15f58a078a4661746d41a5a1519dca4ecce688ea9c0122dd82dd78cf5944436034efb28a535e5ff89f044312f94daaca30510e149a0573c1c1c454f4bbb2265434ce5d376f8e573f5b04b1021cc53f7f89e6da292740b19ef296ff6ed8c121afe0d812218e7aae4ada7c4e438bd91350632d8c93b291894a6a0a2012b650a2209f18b841bbe20cc12bd8e50ffabf6f511bef861e73764ef78bcdb86123709c6661d26eb1355d7180686182bbc57acc9ac90d4c0271c70609ba02b88c9a2c087113d39245187af8b77b641da84722e2911362a7037e3474d259079bc2b0a1697dc4935521f7fb1a42676f121a15830b262ccf034a357d5979435fab1741b6530c41e58fcc2d019e8245071121d05506e3fe16d7a397493d4283743e27add2ba5055cc4976092ad846a9183a0f6d7d40802cc638cd50904e95a8d6c92b653b6d9d3826c15e73aa8570e741dcb11768700c6dc6fa0829b861e53bc7c220d2306aa12d3bd05ece23ad553e0f3606e53e6b1293c8bfa8f0f92bdd41452218ff9614d168f9e51ce7b4c", 0x1000}, {&(0x7f0000000140)="04ac71ff6011b7bd77da9f595e2c09b8f88dcbc049fe681795563e11bdbf235a5abccc3f79acbb08e6c171d339b047f556ab76", 0x33}, {&(0x7f0000001240)="1894e849b46ec23bf1ede73160ebf0b583b8aef4dee2f673825f564bf81cc214b5fd5555ee04c30b311fdc03a01b72c05788a0fd3fa6edd694ff4bde7644fba969b44cf21d6ab0f5d8078232a82abb341a194949bd88eedfc3bf5f41cca21a1f053774391d9b8c62982dff9a072fe10651c2dc961862ce990460c3f408f05d21d2a6a953ef8c5aca5951cc10e44117db5e", 0x91}, {&(0x7f00000001c0)="3d63f08cef92dbd9cd355f485f1e7de845e8b2ccf36e16913be9c7f3787a6266c6fe1012032a6de9f4b38aea0024643030740e1bae184582b569a5055226", 0x3e}], 0x6, &(0x7f0000001380)=[{0xb8, 0x109, 0x8, "5d9c90edd385cd53dd55c81a5a1fb7419cd6ba28cb4a2aace893504848df5a78ba3c2affa91bb8e7570cd98e69073bfdc4f05e2473cc0369db93ee13966b0df9a60f3dcab2ffaf083010b055f6ef12d3d2ad5e3c8c52f43cc70da6ef3aa9e2d8de7d74b45316bff45cac2b0835220ea73a3e75740e8dca4c96038f4bd568b1cc72543e9ad06d136595049ae3b4facc2b562fa7ab1d64e8b2f312e92ba41dc7be508614fc"}, {0xb8, 0x109, 0x1f, "bfeec3db4cabc423efff5402412b4972dcf9b6d01d0f564c15dd60a4f8df1da39f29cc98b65cd9bcdb043750906f678ecd4f3c11c3f873837ba487cb64c0c9bb8cb663b0393a345d68a91babfcd66b437987be3c59229b7dc7dd2d6a94c6ef942b81cd3d12895aa3210f5977d53d60c9c91559dba70b051f7d8cdcf3be9b2e9083b44637ba0e3bd98cfbaa2d6887cb54518c62412da0bfbf5c9cdf406012f77dc5b71d"}, {0x100, 0x10f, 0x1ff, "7beb68039c4e4a12189622c9722eb3569de1c43ee5888dc606e9b258a10d2db4263b228729e2d1c8bb397d34f037c51d358520481c7dc7e195c5eb509300760e8128ab8596b0e0701ad2d015894617de1e47f18453a303a09bf45bd4f8a848e20c743bb5f9b65bbafbf68286ab6be67e8cf642ff8da5fe360fd53ca2709af93da8d69e06b652e93b540803d158c0516edf8f2cd32925c70c87db677cd3541eeb8e335fb7a0c695ffb6b9752b903eed47a14ce2fd7abc13276d59b80637c92538f44afeb582fb3b27978f26eab3bf0553414478c0a2a61c1823a8fac5e871251891a71977682e1d5788a5412ce2"}, {0x110, 0x10b, 0xa0cb, "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"}, {0x1010, 0x0, 0x4, "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"}, {0x98, 0x10b, 0x1f088256, "a0e6ad21b1053735e09de7ec33982c4b1d2c2d6fef4262ef0cce433046ff1dcc424e22ecba2afdbe720a500ac810bf2910023378a6df8c53f0f5df0a9afc9af6f977f5a04e0ec6e63f89a00d0fc47bca01336048a73a4c31f115566764416559436b125eef2a00068e56967fb31636ca9124e2494d1d981a5ec6e0b287417607469b7d9a3e359dbd"}, {0xb0, 0x0, 0x3, "ca54d403dcc3b94aafd0cf512f6591af6936e5f675309a50ba82369894c4f9acc51e32d09ba72ded0b1115b31c8827d1cf9a8d1666fdd9006783b0654a9bc0c5e6559aee260b38da3d17525771cd398b99487bd02bbbe290e117a2a59c4f4f586186424c533b3c317dcb227e3ab13d84c71889b345555641807c40ad0c97c8475ba5ba4c8a77656d9a7a98910a042dcf61837045cdab192285a8"}, {0x48, 0x10b, 0x8000, "e73dd4ce12b3078ec9dce7aa2bfee82f79d52b80c1e30514ace6cf64024606932b85e062cdf52d957001c8c605e75d1d780421"}, {0x58, 0x84, 0x2, "f076b704879dce2606d4d1b920b36cb378884dda94c16d74bb2c150618decae3a5d50675655fb3bdce7dfd8510ba55a0fcd74f18db72013e7b1d6a519882632da14e7847"}, {0x80, 0x0, 0x9, "33906f695ce15728ef8ee6a6f617548ef562d056bc320f61ec3358ac3a70eeae2077a5209f801c0dfd7c643490c68f68bc1afa0e8ea0885cabc17f21ae07c8c6f2a23dbc6e87742c31148cecbbe7e9fffc541426d3824a0d56c0a90ba6e54028eb0887dc8012a5179448"}], 0x15f8, 0x40000}, 0xffff}, {{&(0x7f0000002980)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x5000100}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)="1dd5c3f3a9345454ae7e432b6f3cfc5d35d73dedde419d4dcd7d86b44b3ec80b22c84e018d59e18e2df635f529bf0c85d365c6cd10df00ce77a631aaa1b4c2f9a81f31cee490e230b59f2b1f67d92d85b64d7e5629affc1256bf84f4e3cc5ca4e853cbde42785011eeb6e9a3129b4acd8857a6df5fd0aadcee758b9078794e9ca4344f4d2a0ed0fb5773b9b67a7a7287b56f992d388e5bd591df6a95f2cfcd23eb150980e943a349ebcb7a247b43d657ac4d3385bf2b21182550df0504d022ad6643b5ba42cbc273b7c06f8c0a2fa21a3c25", 0xd2}, {&(0x7f0000002b00)="6f11d1cbefa23c397f230ebd445971f18001eed15d21cba61ddef1d25f5a3d50f4c9823b2a5ec5bb6f5e163bcc11b3fbffafc606ce8f660794402050e9f7422d5b71d91cc707f671c4933dddb118eaf97609e5a87337d33ec2a336a69d60df0b9187b0efb1677bc3d4d82e0a7b47e80b7f8c1a606f2429de88f196c8bad2385cae6dcadbe19e144fe1ae59057731846bd696cc7759068a870e523d07b648f873b27a19d8f39d46c08aa06b630e686813eaf92f21deec429400161dc3ab0821064ac13dafcffc06910f3bdffb719cae34516d25b836b471", 0xd7}, {&(0x7f0000002c00)="81e1b9930706fafdf9eae7a3c93c57b5d896276b9ed658ae8445c69e584c121fc07eff568dc0acfe53e3201d50e4", 0x2e}, {&(0x7f0000002c40)="01e31cbaf4666573a121abd44c9b6c56676a7eca5f9fa17893f2fda1e8b31b5a5606ef21cdb8b1e37d49b9fe4d181a2095", 0x31}], 0x4, 0x0, 0x0, 0x1}, 0x7}, {{&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20}, 0x1, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d40)="492e8e9e18dbf7487924d4677a237c2ecd5a0f6b8bad7c6cb0031c481e0c0d504b3ee43143650fc50823644afd0d51c9501a740555b8d6525440a8100ee9c706cd0f73d12adc784713b971d652898df756f9be3cf479edb2e87b76dddbef64dfbf94f22c7ac7c55e3163c3e53d2b983d66fc17d4ac97d57f570cebb0d38bb56487243e303c07ca6e81359cfad05717d19aafc4f5ce4d809b90a856c69cd797cb56b9d4a09b1054494f3bf6520cb79ea41abf576c70eb680d03e98c430d1779e5be0bc7a8898caf4defd1d7345c4ebdcf6fc680644b17bde43f35a912724f47457d4e027a4fdc7c4d3dfe23b59080d509648cd998415949", 0xf7}, {&(0x7f0000002e40)="336f8e509a685748294b98cacc7c3a856f", 0x11}, {&(0x7f0000002e80)="fd8a565f695bafccd6f6f73f2aa3f6e12b106eedabf963cddbd7de891fe44f157dd2e4891c964a2d5e86ceedcbd781d04c146c86c0126635c368da04305a7889ad9bdffb1aee1812e7f7d42d19e0fa7c6716e9edc1790f2cd59b1fb356577bef3e458e189a695dfe329bf4fdda1cebc7b2a68fa303ce1ca50a88fa70e4df4d194c3f05f2874c98a51bb467b0567be613eb18e8b7726ffdef53cb5cce5726c2a369a60636b5463c4a", 0xa8}, {&(0x7f0000002f40)="75f42d077dc1f5d29ba011ff77f1620afdd374e6d754d09a97a2ef13286307fc74169ed3b59ad0ef2f4480bad8d76ae39219ca30c3347a64ae50e59609d0e2b2b19f456165cc7076baf343170bb9e91fa5a5266d2f384e83b19e303aba98852d1e02b84cf1f515a576f5c7d6c84998e84943ede00cbc5fd5c39be79e41f9092ea577637fd956fced387005ef485980e8e05951cacc49a36b58c44d8feda6c69c4398149b9381f6ca6d9a32ca0f5a611ba994940477aa", 0xb6}], 0x4, &(0x7f0000003040)=[{0x50, 0x103, 0xcea7, "8984724addcf6dc33bbe5847d82a3d9003c104a95986f3f85fc9a280f3c81520194e78c4b12911ed2f6dd887a805740b4211a6f467e8eba13c46d3ab33152783"}, {0x10, 0x6, 0xffffffffffffffff}, {0x1010, 0x11d, 0x5a, "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"}], 0x1070, 0x20008000}}, {{&(0x7f00000040c0)=@ipx={0x4, 0x3f, 0xc5, "f9904e967d4e", 0xff}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004140)="a786b97bf76806e00c1bc14a8cb4a8d3b595673c7a72b776d52d92ee35c6f18d36134f3d520ebef2cdbaf772493ac3082e659442209d678922b9e64f4880f636868a692a091f5f0703cc2690b80479191d62a9e97db1471d6e7f5ed7958c389bde749c909ccfbbdd263c6fcb712f000577e384a1f21daa383b6485edf2db678b8ac06ec4255e5cf3a25b17dde4657b299a215e3717757a103d0c1fcb7975683a43c06df8fbb5af07162d2f8b3960915311150552877385365e835c3a71b918b293b2f6d59819fe64c877b0a2fafcb2", 0xcf}, {&(0x7f0000004240)="a791cc0eb27ee47878961cb25464b693501a42ecc5c06e0f39054e650326fb183e23a876cbb5c779ad429582e3dd80a4314f66ceb212c0eba2d3071e8c83a2cff1d052618d7e96693b020bbe9fac40b040f4afcf52b38b0ac5f558a32d617567e9cd0aa7efb777afd7cf2a366895714b846b17c09d5c05832e2550de7a28c8a7a2feb560f48e7b9fe95edf9cb0c730c0b7a2f5a0579f075ad1a194", 0x9b}, {&(0x7f0000004300)="f4f5b3b8607f2d88842388e7e6967ec52ea61fef14ec4cc4c99a9f17371160a279e07236f5a55abaad71dcbb9437fe8dc25360ac487c95d26673325a3b1e02ceaf5670eb0bffefa251f454795ab84ea6e47708892e0dacc413886739f531a45be8911f54233d2959094106aa18c7b6d849171a2795740c81cb233ecd52312adca11b8bd707704d9db787d1596b46762fd135274f4546855092aa3be48caad5dcda205f310d0bf4b34abf45d7f8d73965a3e289431272a7bb6d73548a11cbc72e96197a21db91183c38a3867da50a", 0xce}], 0x3, &(0x7f0000004440)=[{0x20, 0x119, 0x58, "4a302ff8e308c9d3bfca31"}, {0x38, 0x10e, 0x3, "ae81229a66bc4101aa3cea76138870665c97fc3114ad162ccd994806688593b0e2"}], 0x58, 0x4008000}, 0x7fff}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000044c0)="e9408c7c766e7eafeae7972d48e62ce20b7b5655ac5e86d40294bf0e501cf06b3cde5e8f990451c44bc7e774b9e1434be70cbac7dd15dec1c0c5a85bbec6896819fba7d945e82998755a155dbc2f1b565644b38030ccb5211fea1094f150f9a74e319d0f844a8debeeb743ba6c6e9d0f13878db67764cae7130bb9fc9a8844d788afc3ca7de4d3efe4ac9ea55d698ed1f5f74b0b6fbd2afa6140d3aa0ca6014a745551c5f18b34e60a703d66307dc2e633bd0da052864c72a8d4e3a93080d69d87a785", 0xc3}, {&(0x7f00000045c0)="1cadfa7c8e2e0db09d145730a172ddf2af5afb96b2c31d50f19f5175fcf43bd76ae63ef634b234b0169d8bab016661a137928fa1a996e60818cb113dadb7d6e9aa1b4bc0088a3e10f8af2e000029d97bf1acd53bc61255118ecfe1c1dc4ae328fe7032e23170d580dca70e317eb52ea05f2266e0cd6243aed6f604478be75061", 0x80}, {&(0x7f0000004640)="a65c2720ec6da8582ee8f49d0f82c8b0ad6b76ff360f8e8d4cea0d3ade3e91ddb3220e21b3a35a5496ae33e1ebbebf462ad545891bc50dfa1f867c59c9591e606ec308a27e004d61b6bc6f8f906c3a29dadd420045fbae261834746579fe31a57a088a8355bd1b7109c95e46bdaf72b35ca26842d2984dbe3b2e5b3e090e1dcb131a5ad802b5fdedccee0bb8fe2b57928727640be8d0fc45643b962627b2f531f36eeb28c0337ae3", 0xa8}, {&(0x7f0000004700)="b0a84bbe7050c2fbe1caca91be673d19a39944bd1034ab2e53466c17daaef3675bd6a1922696f037822219c282eeca32ee91a380410bd574330492b06a477d1d4b8d64e8e6456aa1d73218d8d922de95e2fc3aa729cf65601325f209fccb66fde393dece39c950fbd34ab056e9e4ab5f621cbf6daf48dab45c2c191a0ae3a1976bc1b240269dc2722b121fe038b226473733af09872d9e8f27cc66ac19b4e66392378a", 0xa3}], 0x4, &(0x7f0000004800)=[{0xa0, 0x0, 0x2, "0257b828e2953e379a711c9c52f3d99965411a9b1d1cb50ef9da7dfd0c4d0f194ea9d3a89e2af6170ed6e0e1acd44bf1a5c008f122288510b4e21cda3eacb1976bef8cee0f04302d84cd99b9c5f39170ab5350211335059e7a92290aa7d03529d92fe58f562faeb6f279a3b1fe4ecc078fa0ef0bed91f3dddcae29e4f3bf60165fe877839c0eb5c5fde8203670f22461"}, {0x1010, 0x11d, 0x40, "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"}, {0xe8, 0x29, 0x7, "89fbe68a52bd880f0a6ce6b35ce601d8f0ee28dfc2ddfc2dae64547f6a491aff09d1913f454cfb8fa5e3f15bd5c14a5a3709e01bad22395f27e1a7c12a931f4be5567fd8d7c5169031daae8b2b867cd1d3a16a24fc3061ff73c6e50f7d5301b7fa8a5e7aa55234d641ea3dd0c47b41e2c4b37cb5ec8d036208b8d17f6d963ff842c0fb0a33a2e1ba7fa1212ba077cbbb57f6e7898a6398ba5cf55a6804b3aa76f45431c13cddeba600bef6df132881ac13960d06cbfde1ca78a189a507b47512711ecd30f7a7807704729bcffafaf65c116d756529b2"}], 0x1198, 0x4000}, 0x2000000000000}, {{&(0x7f00000059c0)=@ax25={0x3, {"640379a2e156bf"}, 0x9}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005a40)="7c4749a3b8ba692d38c284a27a102d83ef0115f3b14e7f7d63c5961fc9b3105ea31716235e3be37731b8086e6b41bac1d929213f1fd909fd8c99ce819c8bbeb5e0067bd723bea701769b63c0e569a877251532da3bb9c6b02839520349f29296e8d21e32", 0x64}, {&(0x7f0000005ac0)="4e0ab3f586303f2559731f7aac7e0b4b799ae603f728f2ad0f81674e027524fda15221c848a922fa19f83781aa67e4bc9760b0d2e91aeb6294c3b2c02fec8f632ff6041aa45d00429bb1ad67af8c05120e1fd44f7ed0600ced925df449d43457d3a68526831410f93e567b6dc98cfd570ea339c7b4f94b57b35040bee4a92abd58a410d299bbabcb042bc7d0cf90b6c7706f5f50a4279bf182d5f148aca21c4e8ed04f60784d97cc169d19f0af529543a0c8f6138a3bc5e5afdcb92c546ca811e23040ce428c8b4aed916b2c84f66f713084306576dd00ce67178a815250a600", 0xe0}, {&(0x7f0000005bc0)="52a5736580982fd34432cce0f387828f096854832515b3d6ac690058c53e96ffc34ee9d4444f1ef7dc8a181867c64fe3a3e4ae10020356a0cdde00fe76949499efd5896837f90b100d31f4d1f9bfebad59d129c5cf1d53585f6351280e4fb7ac962868f2c227aa53e39add77bbeaacc8d7bc0f82fc72fdb1212e949b", 0x7c}, {&(0x7f0000005c40)="d6cfdadd4b055e22699ede86a4f9d214", 0x10}, {&(0x7f0000005c80)="00cafc8741b984259a0b6bee4d9c7c87af047ffa950bc05f05d5ca34246067c98044352f9de623c52af8bb7a1ae554a5d5e9d8cf6e7cf207a3822f76107d63f7855462caf867919239f79df815db6731586cbd8c3054bd9ff03ca30bd98c523bb8f1b5fd7e4f395b59de08bb5bd50632ae8653326a912c62a90ff7d66a16571a0a50cafddf7877fced350e2b490731837981061517c8c95db780d629042c1e8c02fa32e866351a3ac6fc90987f57510f2568d2dc2c77e0edb709fb022e621b8b60471d180087e830f09cd26f5a4e6d3e3bd23cf43286329a1c18", 0xda}, {&(0x7f0000005d80)="09b0df1bfb88abf9c88548a5bec5c59da24e08fc34db7091775d9f39e0151d4c14cef8cc8a5b86c6706c140384454bf3ddd1f3fcfae3f5bfc364eb0956a3cc9f20859773119842ac563aacef6905c1383f04c4c9c2e0e7dc0495afcb3c07da4f6a642505e1d66a2c62c5c63cfa56d5fb370078077f92b94565301e9090054132dd8f617daf200dcd", 0x88}], 0x6, 0x0, 0x0, 0x804}, 0x9}], 0x6, 0x0) 03:33:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x84000) read(r1, &(0x7f0000000440)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) setsockopt$inet6_dccp_int(r1, 0x21, 0xe, &(0x7f0000000040)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0xffff, 0x2400000000, 0x7, 0xd9, 0x2, 0x100000000, 0x1, 0x5, 0x6, 0x7, 0x8, 0xff, 0x400, 0xb3, 0x3]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r2, 0x1}, 0x8) 03:33:39 executing program 5 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:39 executing program 3: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, &(0x7f0000001740)="ee50000074d6179be929", 0xa}]) [ 339.132972] FAULT_INJECTION: forcing a failure. [ 339.132972] name failslab, interval 1, probability 0, space 0, times 0 [ 339.144296] CPU: 1 PID: 13299 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 339.152800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.162161] Call Trace: [ 339.164745] dump_stack+0x1c9/0x2b4 [ 339.168382] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.173612] should_fail.cold.4+0xa/0x11 [ 339.177724] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.182867] ? lock_downgrade+0x8f0/0x8f0 [ 339.187044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 339.192604] ? proc_fail_nth_write+0x9e/0x210 [ 339.197127] ? find_held_lock+0x36/0x1c0 [ 339.201252] ? check_same_owner+0x340/0x340 [ 339.205600] ? __lock_is_held+0xb5/0x140 [ 339.209694] ? rcu_note_context_switch+0x680/0x680 [ 339.214664] __should_failslab+0x124/0x180 [ 339.218922] should_failslab+0x9/0x14 [ 339.222749] __kmalloc_track_caller+0x2ae/0x720 [ 339.227450] ? strncpy_from_user+0x510/0x510 [ 339.231883] ? strndup_user+0x77/0xd0 [ 339.235706] memdup_user+0x2c/0xa0 [ 339.239264] strndup_user+0x77/0xd0 [ 339.242906] ksys_mount+0x3c/0x140 [ 339.246461] __x64_sys_mount+0xbe/0x150 [ 339.250455] do_syscall_64+0x1b9/0x820 [ 339.254361] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 339.259746] ? syscall_return_slowpath+0x5e0/0x5e0 [ 339.264705] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 339.269745] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 339.274779] ? recalc_sigpending_tsk+0x180/0x180 [ 339.279557] ? kasan_check_write+0x14/0x20 [ 339.283826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.288710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.293919] RIP: 0033:0x457099 [ 339.297143] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.316077] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.323801] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 03:33:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800, 0x400400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 03:33:39 executing program 1: r0 = msgget(0x2, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[0xee01]) getresuid(&(0x7f0000000100)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) r4 = getgid() r5 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x1000, r1, r2, r3, r4, 0xc5db73ea500ecf07, 0x93a}, 0x3, 0x5, 0x702, 0x100000000, 0x0, 0x2, r5, r6}) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40042408, &(0x7f0000000000)='syzkaller\x00') r9 = dup2(r7, r7) write$P9_RCREATE(r9, &(0x7f0000000400)={0x18, 0x73, 0x1, {{0x20, 0x2, 0x7}, 0x7}}, 0x18) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r10, 0x80045400, &(0x7f00000003c0)) 03:33:39 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x80000001) open(&(0x7f0000000100)='./bus\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240), 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) lseek(r0, 0x0, 0x3) 03:33:39 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r3, r1) 03:33:39 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x28100) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unlink(&(0x7f0000000240)='./file0\x00') ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000780)={0x25, @time}) write$P9_RMKNOD(r1, &(0x7f0000000380)={0x14, 0x13, 0x1, {0x40, 0x4, 0x5}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80000, 0x0) close(r3) 03:33:39 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400), 0xc) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x2c2000, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)={0x2248, 0x2, 0x7, 0x0, 0x70bd2c, 0x25dfdbfc, {0xc, 0x0, 0x1}, [@typed={0x4, 0x1a}, @typed={0x8, 0x83, @u32=0x3}, @typed={0x8, 0x7b, @u32=0x3abd}, @nested={0x2168, 0x69, [@generic="affd16c4b426bc089723425265f3ff4d90270264d9bd4c7edcc634bc402f912e312d1be5a2aa113b10f52bc5d8ecea58ae3d7a3e398a2fdd3c5317e2445f7ef69cbde27e20ae981eb75d07344e992eac5c8f02d675f7d2c34dbe342ea294235347919f8580fa6a43d6411b3fb7d19de5130d60820056efd184f733713e613f9481c0dad8bf08e5d6f88f01eb7aaa4e93be0dfe9ed08fc81aa341a30426f27ad8362155eeb763446aca317ced3b0384ef851269686d20bccb3730a3f929e7dcd6e08c4516aa1d7f83fe408e50e3fc6cec23e1ae5a2b2cd3e0b35457efb10e9e2f792887d732a477d3156dc07fb2e2af057538", @generic="574ae088f660db236fb24421d4f8dbd58b4fb15f40bc867fd4b3f1a5b2005803e58b1246d75f55361733e7b399dcc16eb28ba149f236e71752e0c3c7c25a6b5cd6f5cf419e95796dc4dddb254b6490d3adc8cc9363dac1015ef27df391", @generic="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", @typed={0x14, 0x68, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @generic="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"]}, @generic="979f88b22653a5fe5c519191a9a9938d1bdd5eb5c067628c", @typed={0x8, 0x79, @u32=0x9}, @generic="b7a22aa87134002c9404612dbe6a05f95c347fd3e3e3099a3fdd0b2ab6e81ee1db2bbac0ef93b4da285f95c738ec07df16b4de0a17c8e44b804322a45a1e0f70c65a4d4646a1f8c1229abcee781f964f635ead80a343475c731e20519656d7a714ae3f26067f77be6818e277cb5ed35bb96cfee7143b872613716a99383066041e3c59dfb4d718c06b1adaa0f5a19880bf5223b6bd"]}, 0x2248}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0x0, 0x1, 0x9, &(0x7f00000002c0)=[0x0], 0x1}, 0x20) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000001900)=0xe8) connect$packet(r0, &(0x7f0000001940)={0x11, 0x6, r4, 0x1, 0xa8, 0x6, @remote}, 0x14) dup2(r0, r1) readahead(0xffffffffffffffff, 0x80, 0x1000) [ 339.331072] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 339.338342] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 339.345612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 339.352882] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000000 03:33:39 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)="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", 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0xfffffe0e) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x4c, 0x5, &(0x7f0000000400)=[{&(0x7f0000000180)="97da5c3fa35888270300ec224011c8f72e5abedbab273f075067954afc5fa0074d22e53d", 0x24, 0x1000}, {&(0x7f00000001c0)="556e810c63875df9aa662efd23685f2228c33001527e3816d53795b78fbd3da7da38d971405065949bd812432da1cad7b4fde7d8f53d002e97348da80aaec97eab93388d36656c59bf", 0x49, 0x9}, {&(0x7f0000000240)="81b2934ac5553b2d2bb67416c81abb11486eca0f4aa2ee650bdd2003214dd78b1206b1a49ceb6424764c7220c66558c34900fe89ae1d0b6744ef24350254634ba526b9e021291e6d659c0ee82f6410d9144d34ae3caaf7ab494617cf2fb100bf56161463b139e69f07eb3e2aa4af91e08fd51dcd1228712c947674b2304a849e9e3a30fe", 0x84, 0x400}, {&(0x7f0000000300)="12408c6f737503d18816642abe23153f6fea13cf53bcb0f8b79180e28ce879f70198418e9ceb9888495b3c28cde80ddb41fa022424771a1f87c58b6066", 0x3d, 0x2c1}, {&(0x7f0000000340)="a22c4e3971e1a5c830a42e8d3ec18efd4492ccb8e20d15d2b6537d5fe4f0ac2a8816b960e697fa7930e6e469058c59f3b7332d1e15b871c6c82b6ca71f1b691154554d1732a89bb6c77a9da8b3b53a162af6158db5e0b278a0b57ff218120146092b9880327b2f8cdf428e5f46959a24a1cf9b54ecd44539e6ddba86c997f1fda2636efb8551955ccc31942777090d82094c170682", 0x95, 0x4}], 0x0, &(0x7f0000000480)={[{@treelog='treelog'}, {@fragment_metadata='fragment=metadata'}, {@ssd_spread='ssd_spread'}, {@device={'device', 0x3d, './file0'}}]}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x10000000, 0x4000) openat$cgroup_ro(r2, &(0x7f0000000500)='io.stat\x00', 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000540)=0x5, 0x4) 03:33:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1090, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x20}, [@generic="c25cf86fd7606d1e4770fe7b4c964b15ccb41a37db2d94b80f531a7c66aa6ab0dc74bd7c4652aa198b371745a2c54698e1cf0ea1a711c5744e46cc5be9d220a23d63731000de9ff864cb234adaf5cd35052acbceb0311c9c4838ee080c8d", @generic="b49ccbd9719dd532e2f5d3a4ca21e289801e0901d10e72890c27c9618670a6239e154ff518fb0b6ae919b9f27421cac67a77b21c3e0930c43f0bebe3290b2818760a4e8428838bf5bb8706d976c403eb32b0497d1600c2004ad56448693e2751647e18c626173d6dd34669a6e324bf743b37734f11ed5039a0e5374673630235a29a87b57be34ebb9b24b512635cbfb7b6ae83b33a713cf41cea499c5797da6fb1ca1718fe1791a32de59a5ebfccbe86e276e7f8735270b7cfa11dce810284b63c710246adf44603848e39ad93b6d41a15599d1ffa234c91044c833e357ef7851a0497cac7cd9b2d58c59e63bce87926fb279584748fb5a8cbca6d158d61bfd7ab2dcccefff495685d8e5b86ec68b8c0ae82ef4cdf7a69c98bad85408c83f3b1408bd035440ff3a54d8235490f8d51d5ea67d0c7fdab6d715fd907a3393e423565d7d70f436767e42ea3200e6c28f7ba28944b4f0fdd9e4314ec73cf29641383271bbd751a0c9044bbb43321ca9aa4b549a140c3340d729baef44ee37329d9305902d22c642dd00f9d14e16fdbf198c18a6423b7ed848d30bcbdd196012977c5c2740a4c3559fecdd2fc20cae95b5853f9ffe3d7fe81cae63cf00dabecb8893744e16c8c57c9f67bd8e153e35dfafdb1c0ca6b77ad1b6e61e22f5b483e794fea0b9c14ad88fc652b62ccce7eae9096409b6ee5196a39f12988342817961babd61f6afef5f192d625a646160460a22d74f2e308fa63b703e883daf406f09c442d7d2ac941f7f905a0e0d04f4a872564c3c0e133e1fab85d3972a96b076ab1cab448fa68ae66f6103895a9b4fd706e436c013487082bdfaf9fd337b0aec533dbab57f36dbdede40f8039e8913ef10cee93a2311d8e848c969c6c8516ba9271bd42ca999658be40785cb567e7c3043eef53a80b1e113595f10f1a89f80b7b040a0ecbd9e84b3a787948b8c296475a0515a9760bf1214df85a49a33744890910acbcd211c609ef3bee9d2da697f0cfac2cc46fb7317d79a80396611028c6475f2fa04b477fe65afcd70a869842bfa4fd3105998f504f1ec5f08115ac6925168800470ab387e431fcdc1e0f2293e8e454a18d4c066372486249a6c7c4159806e4596ae5f429b6eea9ba8877bd8788bdc5b65a861a4ac365438a09ec640f85c87faa7ec858acfaaf95e6b5ff110d27f0e4d8c5dcdd7edc3e1c9edc0203be425f3046ef9ace0386fdc1480d2e2fbe9c177ef3892e463f4d3757ae9b2ebe291dc2e5bd2e1f7266619e7731e41ea1ce2547e347a7aa9a6094042cb2d735bc0b20024674552a7f1b62789d7a20b33b97643472be32a31729f829d9bc8e352b92c0ac6e883cc533810b2ede3d15fed7580f24aec6f55d13d4fa1661d79d927c890a1aa9dd86c742e396ab4ab8a1aa427f03b8df20ba046ffe6d6be82c93c7582f43e91cc3f379a3db85a81d93c37d367652806edcfa47ed8b8565fbe3190f1cce80a06d8ce56fb992bb3c3ede22871aa7729204961934516bd7d25d0b9db8d305c5010cb0c2f79bc7d3c0ca6eedd6bae3be155fbf45edad711634a1bf6fea2829a3429bbaf730dad3706e1441452319071fe48ca539d2a3c9663e01a9cce72235af395bab70b4f78836463df78e6b7d08b04226a97e105254601afbb1a38d89a838d711988fa21249c78b14644780eaba7c8f45b2758ab2884642283d4d5763ea5d970f1e152610d416dd395af576c66a84cc9b012a6de2c20597c57ba99a1491ea80e2f0908ff46b933b8fbe8c05793f8d490afc8592e653182c9c5ad22aa34efa08c2edec93edba39e5e431e4555ea08a48fec539fe6bc5297e036636fac1bf80632c2baf0b0df77ac1549910bfa70d9e2ccd32fb9ca1370c633fd43f32b0e1eed2c2a4e261b438c6d3a9679135fa93aac33212495147ebe698b14b84993fe0f94716a7c9f97491a31310c0ce927d100df8e32907fd944d1bd2b8bb090938b10e043ef68a2efc59b810f88a21896eabf274f0b5318bffbbed7ad047e3f37b02d12feca571d6bc4d04f601b1b1b49ab1991cb0d7746d21ef87e329f0674a3f2c19add5354d448d3986078a356b7d150001db8b984d5c665d0c6e8bd488b4a0e42c698ac9209dd444607cc9a9994b693ad8cec78a9a2bef896fbfed67f449109a42d4bd5f2705ad48cbb6a6bd0d0dc207826dc6f59003bce5e413a2726610e81f4df8d03b8b6c7f76f308bc18640d52d0e42e292289c2e0080edc98f22c8d49b127470953f93d7f37e2561be17f82b2b39acdf27ca9515f21a3ae003c2fea643d7cc686258ced2dcd94032c74c8ba109161682310eeb784f9f79ff62acfeb60fdb17b84c999c0904f8959b0db4324b0ab44129a572bdc9ad32b151b9542f48e34acff25b2adcd53d27bb8e9bd1d9ed6391830ee32931e48d381a5b6719bd9dd3ef335d7a8084f40915e9c256e1480525f11a6520f07f00df47787b1571d8eb2c5395c86fb4d45e59da449651a4006bc5026531208da73f1355f5c2e6d3723f4a112ea67572cad75b614842434e7de038d29878633ead98df48af4f3f41471f7209f918cdc1ca1d8d3c21e6d98e92d7b6cece8f9fba96e2e850eb98366b3799e3d51c61fbab17e2e73439d9a24f7a5ccd6fb32438fe5e09098637fb1ee0c22d0acbb5dbbdf0f960b990787dfe5928e8aee867b8cbf24f7b2564c9769626e8a7991f58e94d31bfcaefeba4c3807e977f8ff297ead80663af89cb3c92eef0df3069f7d06b77cb8df1460a6d57daccb3c8838f7df126f03f4b9396b2c036d575c7fd0802ed7b82b07b0ebe69265840319eaeb36d75edea69d9d5b6316572e784c3260634f9ddd3d044ac5046f11d3e08c39a5392912b8874c00d3177490490dbc098e8013f984df96c0f52c610ddf21d2d58dbec2c1dcc44d9cfc993d758b7f270a1d3affbdd477781213fc15295f712a72f9fc2a2ad93982ffe4414ef2f64c8911a7d576b21a987db38e01d7621cb11cb3760c1950bae6a1079e3330048e6e083f0eabb8916b9492285c4e0a3cbffcce2a521a82524ce2cc7cf0ada9fa46f57aadd7e657b6172ca46ea65f08b0ce6fc15b5ebf1fb01d95fc04bcda523e64943229204633d1a7bde672daf3cfabad71bfa6a06d708261cd1800b70fa712ac96307a04ff7d059e5c30c14d3d97a1cc2767eee039a43ec570af00a88addbc356f64169b66baa1f89f36ec26b514f19b5329f77673fea7c8b9d7d776db200554c86fc0e6a55fdcbf86db1f7c8b0032ade8e4f621be6f458ca3276a429be2d2a9b8ff10c9c2966bca2b05defa99bfac890bd1861bc38d0ec5c4856c8a9bad6c47ed24f0ac558226771e1f1fa32ea66833fc09da38fbe87f8c8d89b313ea30449a40a5bec66073707d675b571b225765ec6d7195699631eb7c452286b35042fe5131f4efc9e4a65f6eeebb9f3f0e1a41e47471e699c0e05260865a297c60e26e63480efeac24dfd9629bc370485a7577350a610924528ac3b7884e7ed559a5bdb7d0426c62fd294f92f8d9b2083fef8ca43b211f00808b3d2a950f870de4a6fa1057a1f8e36fcd775ac11faebaf4c3e4a6ad68634019143b073297d39ff0e303ff8e59c8757c2b7b60a8cd387e4b58ccd09050a8b8c5b7cedfb43f148aa98f6d890967b4765096287193531251d40167d6c3a3eb47a021741167c8614211f1ee24d63e32e96b606a4bc90f4a71f9ad814cd327ca29d6683badc31ef33718bef076ef06975b4bf46c5e234d7fdf74f80f666c15327d88224f35ca0458f15998e2e513778ed068540663f4583682c87aa1707ca3edebf30e7f99f1ed9fe18d01118e6e8618bc1072faeade39e92b53c3ff2080fb850bc67599bf04a362a3785e04e53e4a70b4dce4f5574ab0abcde09664b986fa9586e55075325f74ca5fb13a35821fe8f8065837a369ce03b6e61694756ad1b2ffb80220eb0d57c6dc880d322779d9d688aa74ebbcf8eda472c66e9b9175bf35f935e5ff8d4979a98547255d0563010b55a736cb552a10758d51224a5c95f1f848ed1b8f5c982193fb9c2e9137d73bda3e51024219144753ef1656028c414dcdb4a6e812282423a1852691ff0149bc930e6f89b228c288e29a7f384b6cd85ae52855ca91810f868d8f1bc247a2c8657ddef513f4ed7b3aa9fef1b10621eeb79993525d7619cbe861e2d23035c18f946c4f436e1a859db81191ce88f6340e9748be13a58fff8874914cd45c985d3fc53fc2e67e36f2011a5bbf84fbde4b7156d3b307e6c8603b7ad063fc0fdfe795ad75c4792d44bf64edffb3d87af31eaaf30582b9e6aa9729c4f88016c884f8bd78d05f2497dc8287d1c70e36fe846832dae3fadb3437a344476c7acc6b2c5362b82c97f65f349185222bb1c436b2024085200cd53274f5eb3a978371f81c5ab336e9dcb7bb93ea1eb8cf4ef05f1337e4409f1a58663d4a4cac1af3dffa5a021a9a164331d26372d0f15b1fd17e5ecf9299644cd4265791dc029d6d430fa6d476400f5c78ebf303146398de641c2a1d656b51c47f17880554449bec0fe29f2bf72cea83feb2c8c2e2da33d3db7fb18294b65e9625aba9c849bcab48aa8c786c24142ea30a0811ee23d6f371c1cd6bfeca55f8bd4b09ce6cbd06724d181cddc35ee9e5a41c5bed2b5593b1532c76b14f63389a60b887acdeb0528de041da8c818c300bc2922ce1957563ae24d3d9c7a479b9fedb2699319c872a336b87950269a67c4b98d6bf2a8fedf5f33a5a62d0e5d95d4db37d47d567f1faed8b62fe6c3421297e26640cd6ddc4eff07e99066e862b6635a2ded7a6a141e494585b23878c11bac9498f43223637f01fe1627b8cd0c24f934c28305facec7977a2452f84c2d19eee0b829f7c82a1528fef908e6b3bc66e89fd7807488c24a85f350df654015940a9a2c6c2309d4ca834b243126fe078c5e0906b11dbece583605964da81fa3e28c4ce1fd7d46c502c572b80f5f951c7093c836e9c892175b1660f33086f33644733eed03ff64aa6670464fe1f3ecc7af87c37029374b813b6758384613840e3d088ddced20d4a96c2e35b68370e9a18d5ef1f67222b6a0906b082806b36076ab87be45a5c8c33b7e3e9b86665e074c07a30527f9e206509bd59ef4a394a65934f21c6e0c2063954f0aec605551d162727ab370d0fa3ffa2bd6f07471eff2bfffcc65a39bb5a2d7208f2ca56df8bb967f4b4a47ec6e7677da46beb4d8eceef88efe78aab5dc2e5cf172a3bd8f831c447f1aac43ef69568bc39d601e8ace81f71af4a41b80bf16644f3f64f95202e3841f85a0209030c7d4a679c14ad9d15897a8f081163ce84acde40a332d8c3aa1494a27598f57769b06eee9a9b3a27ca6f92d766b56f629f9e850e8fca2b5e26d59fb50cb30559444b8f425314479e4a36f9657c7beacb5557934789510335e4cdf74266ae89789a5706420a8ee8e1a433af4678fa2879104f40fd77714fec6a015c6276c6ed28c949392a3002d544293f5da61f4cad6cca75f9bb118566fb89ae9e2eafd94e8ca0b78be2d0efa091d7a94733e93d63efa4186350e243e00fc378e5fdd7edf46b58e157a6747a6059493236b28c8b64a955d45c70dec64e1d74a74cd5a265d280c4b3dfbca28d3a442c53edc5180fd014d45958adb86f0856331486a75229195eac334ad84c52731dad3ff30a41e9462b3a436d6949fe90396ed8d90edb3142c37b702555e3e9615c867cb383aef73871f90b03fedd2a29a56290de1bd4debdb8eec347e4439dc180607f154958d37536f691f3c4", @typed={0x8, 0x8d, @uid=r3}, @typed={0x14, 0x36, @ipv6=@mcast1}]}, 0x1090}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r4, &(0x7f00000000c0)='D', 0x1) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) r5 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) shutdown(r5, 0x2) 03:33:39 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200001, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000040)={"b911aa372d14c9e4ce2e0ff4cfea66adc93193b8e1ed7f80078ef1e1e04dec44bab410e32355fe63b6c2c161e8f0cadfef33f3e2576f374b5899b4604aa7a3d5539d610c8515a94186fd19fe3731105e555d9eb074a9b73be9586103846796d4a260e5fc4431f94daffbb8cc17374d1e26b61318a55a793549ee893639439590f11824aa53b18910fb1447c634dd98fd332a4b4ea218b11f4441710a40f8d3cb414c6b35cd6b5e451200420407d473c98bcb2afb7f53ddaf643f65fca9b5188d4f3e3c94e1b9a88374a5521cb393c7e71448c2cd9b695e6f514e17a66f77a516bae151ae6eae4489c314f915a05fcfa86261c13029ebb2898ee9da05eb61388ce20d72aad43c92bb0e279ccd4a67138cee13f0b2f389ead0177db562263a7b931073418a8e4c03d79b12debbdfc0c56341a7ea1e0f6c5c30e72f44c876ffb9943da7b3c90b5b9c56d85b93e648b1ddbd10199af1a5046cfb51ab66ebdb64a8f14b0d6799b2a20bd2c74aa07e1c85ee7f0492fdb86b9e7f668beacdf5c04abd7fb943cfed4f2e64291564e912e1320b1bd896d6ea70f153d818f7482236c655f59d6c0b606cef2c801710cccc9107693fdf44d1b081c14830390efb26f9c797d7b59421cdc81e736246d851fd3f560b53393ea741551af8ad483e6832038f985d97df85caa7ead4c2955730ee109cda6adcf6dca8836ae64501cb948ccee6c400c7f2f2c6715cc941ea0c99fa12b85071f3acbb07f3f0e7b8c8f5ab93ae0eb5315600343f2b0e3563fde41dbe8c4aeeb9628f6bdf52b418927c4de84523f690ee2dd4d9c0f531c9ee9e2f8d75ab4443d7ca437017cf742d0b01f0a87cab9b4497cfba50c7066fe93b2a609f36d642117223dec5498632231361b82b80cb08caa8341576200d6a0236294d4cb5e58b29acb3ac25265d867abcc2c9c533ba84085fb939a35bff1932d9d532f680544725ab533b1c7f09242a16d87814513328db0ca0c54115e17a0ef82bf1db135d46e6be8ec8acc6274154bc51d00e8b40d4e6fd6b5ee9faf2de2af3c18f049d109c8dcb88e22e27e258091804066170e7e3671cb7472ca913e2aff84643d09c6142af4fcbf1ee71194f0b2e81500943af2b459faf2f409cc09c735c5e1b115e2775f6ca7a18cecfa8897e87b2158b8d363161a99bb43dd98e973ddba7766289a4f29ff34fee0403aca7ba58d7783578d7e4d026e53cee455362303b339ebef2e3be2833aac06d4450f03f00b8dfc3c67152d521e6646953958a09be263f730a41916b0c501f34868d6a9be9656d15c2b59e1f665467753181f9dd521756b00de598421978532b48606c1584853b1ed2e5fd3971b8bbd5cf2215f7f16079f730d722a7e09f9d7eadb461e19ae3f8e79b5e1ac69f015db6fcf58b6a6a213ae2f0bd4cf0bf93424859eb46b643eb0ab13b6366922b"}) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_mreqsrc(r1, 0x10d, 0xd, &(0x7f0000013ff4)={@multicast1, @dev, @rand_addr}, 0xc) socket$inet6(0xa, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:33:39 executing program 5 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 339.493494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.529734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.557578] device veth0 left promiscuous mode [ 339.703704] FAULT_INJECTION: forcing a failure. [ 339.703704] name failslab, interval 1, probability 0, space 0, times 0 [ 339.715291] CPU: 1 PID: 13364 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 339.723794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.733163] Call Trace: [ 339.735780] dump_stack+0x1c9/0x2b4 [ 339.739431] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.744642] ? __kernel_text_address+0xd/0x40 [ 339.749173] ? unwind_get_return_address+0x61/0xa0 [ 339.754126] should_fail.cold.4+0xa/0x11 [ 339.758217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.763337] ? save_stack+0x43/0xd0 [ 339.766966] ? kasan_kmalloc+0xc4/0xe0 [ 339.770860] ? __kmalloc_track_caller+0x14a/0x720 [ 339.776172] ? memdup_user+0x2c/0xa0 [ 339.779889] ? strndup_user+0x77/0xd0 [ 339.783695] ? graph_lock+0x170/0x170 [ 339.787506] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.792888] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 339.798433] ? proc_fail_nth_write+0x9e/0x210 [ 339.802960] ? find_held_lock+0x36/0x1c0 [ 339.807053] ? check_same_owner+0x340/0x340 [ 339.811381] ? lock_release+0x9f0/0x9f0 [ 339.815363] ? rcu_note_context_switch+0x680/0x680 [ 339.820300] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 339.825329] __should_failslab+0x124/0x180 [ 339.829575] should_failslab+0x9/0x14 [ 339.833383] __kmalloc_track_caller+0x2ae/0x720 [ 339.838066] ? strncpy_from_user+0x510/0x510 [ 339.842482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.848030] ? strndup_user+0x77/0xd0 [ 339.851846] memdup_user+0x2c/0xa0 [ 339.855396] strndup_user+0x77/0xd0 [ 339.859037] ksys_mount+0x73/0x140 [ 339.862584] __x64_sys_mount+0xbe/0x150 [ 339.866569] do_syscall_64+0x1b9/0x820 [ 339.870464] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 339.875836] ? syscall_return_slowpath+0x5e0/0x5e0 [ 339.880777] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 339.885805] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 339.890828] ? recalc_sigpending_tsk+0x180/0x180 [ 339.895589] ? kasan_check_write+0x14/0x20 [ 339.899831] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.904689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.909889] RIP: 0033:0x457099 [ 339.913085] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.931984] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.939713] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 339.946984] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:39 executing program 4: clone(0x7ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() exit_group(0x0) move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x80000001, 0x9ec, 0x1ff}) [ 339.954252] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 339.961519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 339.968793] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000001 03:33:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:33:40 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) syz_open_pts(r1, 0x0) dup2(0xffffffffffffffff, r1) 03:33:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xff03) fallocate(r0, 0x3, 0x5e00, 0x2cbd) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000100)) 03:33:40 executing program 4: gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="05de43c0d25ba92a2f12d4c91a31b74aa73fe42572f414f6705c4f7d045b02452958a98cfac339a1cbdbf615be8c18b6970ae72fadcd2688c77a4c278313836f482d33e66e9d75c6aba9f9369e48731e1f8c75e28b06828811e56655134cbe4125b19a3e23061a535dc40da29dda2878533edbe255c61049b8a82d91b3e6f8e54a0321155e8e1d80b8e9dec7516374e1ac0c4ba0645eb17c8b5b70d827c5cec39551194052ea7f912d5385cc2070a3", 0xaf, 0x1}, {&(0x7f0000000280)="731fb9bd57d5b4cec56aa36af56eb5227377c805f3123c047ea9977914433d58e2f8636a9702aea822d00d05527063d4807208a7edee2ad254468ac5fc6e982a89a0c5cf87e52d8cd272af30b24e6cbaa5d81e5b279909d1a8d6eb387c02b2b51ad15ed9", 0x64, 0x7fff}], 0x400, &(0x7f0000000440)={[{@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}]}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0xa0001) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x80104592, 0xfffffffffffffffd) r1 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0xfffffffffffffffa, 0x80) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000540)={0x28, 0x2, 0x0, {0x2, 0x7, 0x6}}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x80, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}}) 03:33:40 executing program 3: r0 = eventfd2(0x1, 0x807f9) read(r0, &(0x7f0000000200)=""/81, 0x51) [ 340.422399] hfsplus: unable to find HFS+ superblock [ 340.500378] hfsplus: unable to find HFS+ superblock 03:33:40 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) syz_open_pts(r1, 0x0) dup2(0xffffffffffffffff, r1) 03:33:40 executing program 5 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 340.692830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.746729] __ntfs_error: 3 callbacks suppressed [ 340.746740] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 340.783888] FAULT_INJECTION: forcing a failure. [ 340.783888] name failslab, interval 1, probability 0, space 0, times 0 [ 340.795234] CPU: 1 PID: 13424 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 340.803737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.813285] Call Trace: [ 340.815899] dump_stack+0x1c9/0x2b4 [ 340.819547] ? dump_stack_print_info.cold.2+0x52/0x52 [ 340.824760] ? __kernel_text_address+0xd/0x40 [ 340.829278] ? unwind_get_return_address+0x61/0xa0 [ 340.834238] should_fail.cold.4+0xa/0x11 [ 340.838327] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.843452] ? save_stack+0xa9/0xd0 03:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000540)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000005c0)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x334) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f00000003c0)="0e60610dae2c1a135a187eade525d470af55ef684040bda522f48f1c2bf6670e6e99e9d7c43c8768afe1e89ef5e2773051f0d74d7f27c63a78a8f6b535de03a7ebc3fb6ac0b026122d6335496f73a47cd6a6270c7638d8378dc969b9f6427383d2b7b3d06ddd4f04f50f31b33fba2176510a2373dd86cf19be718b6497153c13fec928c5dfe2e82fb9a161dc27ab06ee03e1d9fe12f14b91142d6b3dd0690df8ee70f6d47a0eb0", 0xa7) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000140)={'gre0\x00'}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380), 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x80100013, 0x0, 0x0, 0x28e8000000000000]}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000600)={{r5, r6+30000000}}, &(0x7f0000000640)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000002c0)={0x0, 0x4, 0xffffffffffff184a, 0x0, 'syz0\x00', 0x91}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x1000, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x7) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000340)) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000480)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f00000004c0)={0x2}) 03:33:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") migrate_pages(0x0, 0xff, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x1f) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000) 03:33:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$inet6(0xa, 0x80000, 0x5) close(r1) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000240)={'ip6gretap0\x00', {0x2, 0xffffffff7ffffffe, @dev={0xac, 0x14, 0x14, 0xe}}}) 03:33:40 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x7e, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x9, 'sed\x00', 0x11, 0x1, 0x30}, 0x2c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f000047c000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040), &(0x7f0000013000)=0xffffffffffffff88) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x2, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x2a4, 0x8f1c, 0x7fffffff, 0x3f, 0x8, &(0x7f00000000c0)='bond_slave_0\x00', 0x800, 0x4, 0xffff}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) close(r0) 03:33:40 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x1) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32=r0], 0x4601) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='posix_acl_access\x00', &(0x7f0000000100)="6c6fdb2700", &(0x7f0000000140)='/dev/net/tun\x00', &(0x7f0000000180)='vmnet1self\x00', &(0x7f0000000280)="07009eb4e6040d6a7a7868256ee4ebe8560c8de51db0a91e4ab06e4753853101ff9f08947c06ac113c5b8d02bb1714a225979ee3fb9cf0fb6b7b3f18c3cf1c17ad6fb44e0a5092b8d2db60f075333136bdf6fd435222c9a70476da480491105e1db4c786ca3a88c867731849970dd43d8e46da5553a34feebaf15ac9f9"], &(0x7f0000000500), 0x1000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x0, 0xfff, 0x80000000}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:33:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:40 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x1100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000001300)={0x13, 0x65, 0xffff, 0x3, 0xffffffffffffff0f, '9P2000'}, 0x13) [ 340.847099] ? kasan_kmalloc+0xc4/0xe0 [ 340.851007] ? __kmalloc_track_caller+0x14a/0x720 [ 340.855862] ? memdup_user+0x2c/0xa0 [ 340.859591] ? strndup_user+0x77/0xd0 [ 340.863411] ? graph_lock+0x170/0x170 [ 340.867235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 340.872797] ? proc_fail_nth_write+0x9e/0x210 [ 340.877324] ? find_held_lock+0x36/0x1c0 [ 340.881432] ? check_same_owner+0x340/0x340 [ 340.885767] ? lock_release+0x9f0/0x9f0 [ 340.889756] ? check_same_owner+0x340/0x340 [ 340.894103] ? rcu_note_context_switch+0x680/0x680 [ 340.899065] ? __check_object_size+0xa3/0x5d7 [ 340.903591] __should_failslab+0x124/0x180 [ 340.907847] should_failslab+0x9/0x14 [ 340.911679] kmem_cache_alloc_trace+0x2b5/0x730 [ 340.916385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.921943] ? _copy_from_user+0xdf/0x150 [ 340.926118] copy_mount_options+0x5f/0x380 [ 340.930390] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.935954] ksys_mount+0xd0/0x140 [ 340.936421] QAT: Invalid ioctl [ 340.939515] __x64_sys_mount+0xbe/0x150 [ 340.939546] do_syscall_64+0x1b9/0x820 [ 340.939570] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 340.939592] ? syscall_return_slowpath+0x5e0/0x5e0 [ 340.939615] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 340.939639] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 340.939667] ? recalc_sigpending_tsk+0x180/0x180 [ 340.939692] ? kasan_check_write+0x14/0x20 [ 340.980049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.984921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.990120] RIP: 0033:0x457099 [ 340.993335] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.012256] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.019988] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 341.027273] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 341.034557] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 341.041839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 341.049122] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000002 03:33:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/47, 0x2f, 0x8}, 0x60) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)=""/40, 0x28}], 0x1}}, {{&(0x7f0000004540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000004700)}}, {{&(0x7f0000004740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000048c0), 0x0, &(0x7f0000005940)=""/125, 0x7d, 0x3}}, {{&(0x7f0000005c00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005d00)=""/38, 0x26}], 0x1, &(0x7f0000005e80)=""/220, 0xdc}}], 0x4, 0x0, &(0x7f0000006200)={0x77359400}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x84000, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x6, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r3, &(0x7f0000000140), 0x391, 0x51) 03:33:41 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x3}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a1, &(0x7f0000000000)) 03:33:41 executing program 5 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 341.199466] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 341.233240] FAULT_INJECTION: forcing a failure. [ 341.233240] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 341.245071] CPU: 0 PID: 13463 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 341.253581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.262944] Call Trace: [ 341.265555] dump_stack+0x1c9/0x2b4 [ 341.269207] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.274530] should_fail.cold.4+0xa/0x11 [ 341.278620] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.283737] ? __lock_acquire+0x7fc/0x5020 [ 341.287982] ? lock_downgrade+0x8f0/0x8f0 [ 341.292151] ? mark_held_locks+0x160/0x160 [ 341.296402] ? mark_held_locks+0x160/0x160 [ 341.300667] ? is_bpf_text_address+0xd7/0x170 [ 341.305190] ? kernel_text_address+0x79/0xf0 [ 341.309617] ? __kernel_text_address+0xd/0x40 [ 341.314143] ? unwind_get_return_address+0x61/0xa0 [ 341.319103] ? __save_stack_trace+0x8d/0xf0 [ 341.323465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.329025] ? should_fail+0x246/0xd86 [ 341.332940] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.338081] __alloc_pages_nodemask+0x365/0xd10 [ 341.342770] ? __kmalloc_track_caller+0x14a/0x720 [ 341.347632] ? memdup_user+0x2c/0xa0 [ 341.351362] ? strndup_user+0x77/0xd0 [ 341.355189] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 341.360230] ? proc_fail_nth_write+0x9e/0x210 [ 341.364758] ? find_held_lock+0x36/0x1c0 [ 341.368867] ? trace_hardirqs_off+0xb8/0x2b0 [ 341.373303] cache_grow_begin+0x91/0x710 [ 341.377395] kmem_cache_alloc_trace+0x653/0x730 [ 341.382095] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.387678] copy_mount_options+0x5f/0x380 [ 341.391940] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 03:33:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$netlink(0x10, 0x3, 0x80000000004) [ 341.397504] ksys_mount+0xd0/0x140 [ 341.401066] __x64_sys_mount+0xbe/0x150 [ 341.405063] do_syscall_64+0x1b9/0x820 [ 341.408970] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 341.414360] ? syscall_return_slowpath+0x5e0/0x5e0 [ 341.419315] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 341.424361] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 341.429396] ? recalc_sigpending_tsk+0x180/0x180 [ 341.434181] ? kasan_check_write+0x14/0x20 [ 341.438438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.443290] entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:33:41 executing program 0: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000100)="4283973700c000ddb8460900fff5e2039a5b4202938207d9fb3780398d5375000000007929301ee616d5c01843f55990080053c0e385472da7222a2bb42f2dbd94c3b50035290f118d0000f55d462600001b0000000000000000000000aeb462644a4be0471dae", 0x67, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @mcast2}, 0x1c) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x7, {0x6}}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3, 0x30}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x7, 0x401, 0x8}, &(0x7f0000000280)=0x10) [ 341.448479] RIP: 0033:0x457099 [ 341.451694] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.470640] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.478367] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 341.485643] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 341.492924] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 03:33:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, r0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x4001, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/45, 0x2d}], 0x1, &(0x7f0000000180)=""/2, 0x2, 0x2}, 0x2023) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@mcast1, 0x31, r1}) sendto$inet6(r0, &(0x7f0000000140), 0xfffffc58, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @dev}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 03:33:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000ffa), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r2, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r4, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 341.500200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 341.507469] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000003 03:33:41 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, 0xffffffffffffffff) 03:33:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0xffffffff80000000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2}, &(0x7f00000001c0)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x20000540, 0x0, 0x0, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000180), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'nr0\x00', 'sit0\x00', "6272df0a00000000000076655f3000", 'rose0\x00', @link_local, [], @link_local, [], 0xb0, 0xb0, 0x100, [@devgroup={'devgroup\x00', 0x18, {{0xd3b51ab591fb0566}}}]}}, @common=@log={'log\x00', 0x28, {{0x0, "085c8830d25f52f01d341ff23dbdfe7eb254a6539781e07e20d624437901"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x208) 03:33:41 executing program 3: listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[{}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) geteuid() getegid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}, @sadb_x_nat_t_port={0x1}]}, 0x38}}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='sched\x00') bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)={0x10, 0x37, 0x100}, 0x10}], 0x1, &(0x7f00000029c0), 0x0, 0x881}, 0x0) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1'}, 0x1200e) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x7c, r4, 0x10a, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x900f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa800000000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000811) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) 03:33:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") r1 = getpid() process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000040)=""/154, 0x9a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/26, 0x1a}], 0x4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/51, 0x33}], 0x4, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40106614, 0x0) [ 341.686055] QAT: Invalid ioctl 03:33:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = msgget$private(0x0, 0x210) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000680)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000006c0)={{0x4, r3, r4, r5, r6, 0x4, 0xb4e}, 0x2, 0x7, 0x6, 0x48c1, 0xd3, 0x9, r7, r8}) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='port1\x00', 0xffffffffffffff9c}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f00000002c0)=r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:41 executing program 5 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r3}) flock(r1, 0xffffffffffffffff) preadv(r2, &(0x7f00000017c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x80000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r4, 0xfff}, 0x8) 03:33:41 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xa86) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000002c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(r0, 0x29, 0x33, &(0x7f0000000040), 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/174) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 03:33:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x2, 0x1c}]}}}]}, 0x3c}}, 0x0) [ 341.889952] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xffffffffffff4836, 0x0) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f00000000c0)=""/48, 0x30}], 0x2, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000094}, 0x5755e624badc97e1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000), 0x1c) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) [ 341.964811] FAULT_INJECTION: forcing a failure. [ 341.964811] name failslab, interval 1, probability 0, space 0, times 0 [ 341.976180] CPU: 1 PID: 13534 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 341.984700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.994067] Call Trace: [ 341.996690] dump_stack+0x1c9/0x2b4 [ 342.000333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.005534] ? putname+0xf2/0x130 [ 342.008995] ? filename_lookup+0x397/0x510 [ 342.013232] ? user_path_at_empty+0x40/0x50 [ 342.017557] ? do_mount+0x17f/0x1e30 [ 342.021276] ? __x64_sys_mount+0xbe/0x150 [ 342.025444] should_fail.cold.4+0xa/0x11 [ 342.029515] ? do_raw_spin_unlock+0xa7/0x2f0 [ 342.033939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.039053] ? kasan_check_write+0x14/0x20 [ 342.043306] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 342.048428] ? find_held_lock+0x36/0x1c0 [ 342.052525] ? check_same_owner+0x340/0x340 [ 342.056864] ? rcu_note_context_switch+0x680/0x680 [ 342.061811] __should_failslab+0x124/0x180 [ 342.066057] should_failslab+0x9/0x14 [ 342.069865] kmem_cache_alloc_trace+0x2b5/0x730 [ 342.074548] ? kasan_check_write+0x14/0x20 [ 342.078799] vfs_new_fs_context+0x5b/0x720 [ 342.083051] do_mount+0x605/0x1e30 [ 342.086607] ? copy_mount_string+0x40/0x40 [ 342.090859] ? retint_kernel+0x10/0x10 [ 342.094785] ? copy_mount_options+0x213/0x380 [ 342.099308] ? __sanitizer_cov_trace_const_cmp4+0x11/0x20 [ 342.104857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.110405] ? copy_mount_options+0x285/0x380 [ 342.114910] ksys_mount+0x12d/0x140 [ 342.118548] __x64_sys_mount+0xbe/0x150 [ 342.122538] do_syscall_64+0x1b9/0x820 [ 342.126462] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.131839] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.136776] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 342.141800] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.146824] ? recalc_sigpending_tsk+0x180/0x180 [ 342.151587] ? kasan_check_write+0x14/0x20 [ 342.155835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.160694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.165883] RIP: 0033:0x457099 [ 342.169100] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.188010] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.195723] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 342.203006] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x764, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) read(r2, &(0x7f0000000200)=""/28, 0xffffff2d) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x1b}, 0xdac7}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000480)) syz_execute_func(&(0x7f0000000240)="0f0ff08a0f9e9e3e0f0000c4e1f9f52e021b3edd25e668f4a48fe8e4a2c91a460f0f0545650000aac4417877420fbc7424dac4213968e9") getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000003c0)={'nat\x00'}, &(0x7f0000000440)=0x54) close(r1) [ 342.210276] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 342.217545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 342.224817] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000004 03:33:42 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, 0xffffffffffffffff) 03:33:42 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x8, 0x4) getgroups(0x0, &(0x7f00000004c0)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x9, 0x400000) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000340)="257eb2c8111a8476964c1a24238b9844c984de74cccb5e98786593a589ef9f3c380afde268ed4e43c16c5b1589d3c1235b6360a890ad8b8d163a3efb19fcd7109e3d37987e1f38e978b61ea6afa6c2a6ce7f62555c7a0abe20c9adfaffd91cc70499dddaa1b4c332c47c09e87c1a4a1af706c1ab8f61515a52ac40eb517d203512ea20593ca56c0d106bb1d539b1ea21710b981b533d013b40d7d4b39f48d0b8cb458049d05855f4ff3becd4d13f", 0xae) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x91, "8d11c521a9428f68dba21519072d352e1c328197eb5e6887d638534d4774638d77f6fb1251b749234d15df30df18825ef238f99704d72d32b86920aa08dc29ba8c96db22c7a69b7b8c4c2e45e4ff9de38ea57055abc6a4ecc7fbee62efc06b5bf3dc31373be71082084c371fc701dfc72e64f6de40b743ffe16fe86204e0ee2db3ce827b18c825644731aeb8048dee93d5"}, &(0x7f0000000040)=0x99) getsockopt$inet6_dccp_int(r3, 0x21, 0x1f, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x6}, &(0x7f0000000240)=0x8) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x460dd88aa052c39e, r1, 0x0, 0xffffffffffffff9c}, 0x10) [ 342.289587] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 03:33:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0), 0x8) read(r0, &(0x7f0000000300)=""/174, 0xae) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8462b4f17ef4823", 0x20) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = accept$alg(r0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000007c0), 0x0) 03:33:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99e, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, &(0x7f0000000540)=0x10) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x41b) 03:33:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0xfffffffffffffcf3) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:42 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180), &(0x7f0000000240)="ed", 0x1, 0xfffffffffffffffc) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'\x00', 0x80}) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) keyctl$link(0x2, r2, 0x0) 03:33:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x100000000, 0x40, 0xee3d, 0x0, 0x0, 0x1, 0x800, 0x4, 0x3994, 0x477437ed, 0x5, 0x8000, 0x1f, 0x1, 0x1, 0x0, 0x9, 0x10000, 0x5c83, 0x3, 0x9, 0x2, 0xc05, 0x8001, 0x80, 0xa7, 0x6, 0x417, 0x2, 0x81, 0xb30e, 0x0, 0x81, 0x6, 0x8, 0x8, 0x0, 0x3, 0x828644aa1f4aed97, @perf_bp, 0x1000, 0x6, 0x9633, 0x7, 0x10d1, 0x0, 0xfffffffffffffffa}, r2, 0x4, r0, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) 03:33:42 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0x9, 0x80000004) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto(r0, &(0x7f0000000000)='*', 0x1, 0x0, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) getdents(r1, &(0x7f0000000040)=""/29, 0x1d) sendfile(r0, r1, &(0x7f0000000080)=0x400, 0x10001) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x9, 0x800, 0x1, 0x4d7f, 0x2, 0x0, 0x746, 0x1dd, 0x40, 0x1be, 0x20, 0x6, 0x38, 0x1, 0x8, 0x5, 0x28}, [{0x0, 0x6, 0xcb12, 0x4, 0x800, 0x1, 0x7fff, 0xac1}, {0x70000000, 0x3, 0x2, 0x6, 0x9, 0x1f, 0x1, 0x4}], "9ead4ad287109f1cbe2a9cef491d94431abc884e35cd9edc4f7df9c199bb54df25b7f7d97005b4731e4aa283ca1e98e415debba17d367f7427a3d7c879b6e133bec7199c94c35d2fa644cd7f3a57ecadc259819e5af6f66cc1b65112ede7075d7653b67b6338e0c629cb5ccd344e507c8246620c08886b77bc61af2af5a3347b4fbf802a390b69386994f7e5d2e59b0ab90e20265c288776d4b27415cc80a3ebdcaf5b80f05ecf280caabfee6342303904807fa36687720d95d959978a822c8f0b86ffd341bf8df0c2d1e42e38b2d53ecda9ecc313860619c25a3c8b86e33e04fc28b8", [[], [], [], [], [], [], [], [], [], []]}, 0xb93) [ 342.517942] kernel msg: ebtables bug: please report to author: Wrong len argument [ 342.554750] kernel msg: ebtables bug: please report to author: Wrong len argument 03:33:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040000004000000000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 03:33:42 executing program 5 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:42 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @rand_addr}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x40, &(0x7f0000000300), 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) fsync(r0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 342.672580] binder: 13592:13594 BC_ACQUIRE_DONE u0000000000040000 no match [ 342.698236] binder: BINDER_SET_CONTEXT_MGR already set [ 342.698266] binder: 13592:13598 BC_ACQUIRE_DONE u0000000000040000 no match [ 342.713008] binder: 13592:13594 ioctl 40046207 0 returned -16 03:33:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x501141) write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:42 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5a1, 0x42010) r1 = dup2(r0, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sendto$unix(r1, &(0x7f0000000080)="c3cc29778536f06106c2262398731d7fd00568291cfcc2d4b1154b2be3e526d79577154f3bf3ec289d2e1707eb54177584a4341d932e7474f58506c4f5bf5ae75991a98e6c6f0145a634b6081be120f75eb13dda0c2a59419a25c8b49ebd61afef2d1d4969e9f50598bb61f5617991313b99def68a97ca776064206a6f86", 0x7e, 0x488c1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 03:33:42 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000002040)=0xe8) getpgrp(0x0) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000002140)=""/89, 0x59}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/210, 0xd2}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/241, 0xf1}, {&(0x7f0000002600)=""/93, 0x5d}], 0x3, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000640)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x138, r1, 0xa713ac6c9506d916, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffff000}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffc5d0}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xd}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r2 = gettid() r3 = getpgrp(r2) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x3, 0x86, 0x7494112c, 0x9, 0xfffffffffffffe03}, &(0x7f0000001e40)=0x14) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="4edfc4ec9c165676d21bbf"], &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000200001040000004c000000000200000000000000000000000900001229b615ca4a1018a7e4c05db635488c1237f520c5e01b0008000b000000ef00"], 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000200)={0x77359400}, 0x10) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r3, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) 03:33:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x14e9, 0xffffffff, 0x1, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xe20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8b53}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x240c00, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001200)={0x8, "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", 0xffffffffffffff1c}, 0x1006) close(r1) socket$kcm(0x2, 0x3, 0x2) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) dup(r3) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) accept4$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x298, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x200, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc8b}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 342.795909] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x37, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443) r3 = gettid() ptrace$setregset(0x4205, r3, 0x202, &(0x7f0000000040)={&(0x7f0000000000)="1cc3342cdbeaea4e298591e0cab6c5b8445f52a4bc", 0x15}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) [ 342.865292] FAULT_INJECTION: forcing a failure. [ 342.865292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.877172] CPU: 0 PID: 13607 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 342.885693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.895071] Call Trace: [ 342.897680] dump_stack+0x1c9/0x2b4 [ 342.901336] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.906549] ? mark_held_locks+0x160/0x160 [ 342.910821] should_fail.cold.4+0xa/0x11 [ 342.914894] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.920021] ? mark_held_locks+0x160/0x160 [ 342.924262] ? graph_lock+0x170/0x170 [ 342.928071] ? print_usage_bug+0xc0/0xc0 [ 342.932163] ? find_held_lock+0x36/0x1c0 [ 342.936246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.941793] ? should_fail+0x246/0xd86 [ 342.945693] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.950814] __alloc_pages_nodemask+0x365/0xd10 [ 342.955493] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 342.960188] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 342.965218] ? find_held_lock+0x36/0x1c0 [ 342.969313] ? trace_hardirqs_off+0xb8/0x2b0 [ 342.973734] cache_grow_begin+0x91/0x710 [ 342.977813] kmem_cache_alloc+0x63a/0x710 [ 342.981979] getname_flags+0xd0/0x5a0 [ 342.985794] user_path_at_empty+0x2d/0x50 [ 342.989953] do_mount+0x17f/0x1e30 [ 342.993499] ? rcu_is_watching+0x8c/0x150 [ 342.997654] ? trace_hardirqs_on+0xbd/0x2c0 [ 343.001989] ? copy_mount_string+0x40/0x40 [ 343.006237] ? copy_mount_options+0x5f/0x380 [ 343.010654] ? rcu_read_lock_sched_held+0x108/0x120 [ 343.015681] ? kmem_cache_alloc_trace+0x324/0x730 [ 343.020543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.026099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.031665] ? copy_mount_options+0x285/0x380 [ 343.036185] ksys_mount+0x12d/0x140 [ 343.039823] __x64_sys_mount+0xbe/0x150 [ 343.043809] do_syscall_64+0x1b9/0x820 [ 343.047702] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 343.053090] ? syscall_return_slowpath+0x5e0/0x5e0 [ 343.058024] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 343.063044] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.068061] ? recalc_sigpending_tsk+0x180/0x180 [ 343.072822] ? kasan_check_write+0x14/0x20 [ 343.077070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.081924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.087118] RIP: 0033:0x457099 [ 343.090331] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:43 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, 0xffffffffffffffff) [ 343.109255] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.116973] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 343.124274] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 343.131547] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 343.138814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 343.146080] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000005 03:33:43 executing program 5 (fault-call:4 fault-nth:6): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x14e9, 0xffffffff, 0x1, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xe20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8b53}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x240c00, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001200)={0x8, "9af5abe937e577d35af2ec90b4e679451d6fa4d0e33c3887357dc5adf689062dd5a0c84552a67eacb1764a89e0a5ce96064e18032bc346ac9935ec51031e1d6c98200fcb860dfcb3ef2b4484babc443221d8996c3de7a9c84eabf9e5e31ba52a64f089777d89290a5c1fbdff71111ef6aba87abd0c2912a597b780767ad131fffbc74fea2fed32af4e9ff0a9aa1f117993dda9290015d08434e22db5dbb498efc0c51c81649fb82ac3c1157805ea1e05d0f261aea9772adaa50de6fef99b3b92a8aefee87f770e42345931ecff226f4962da134ba31fcfae95c64bb4fbc5e6aebb6802dbeff8628340cf1138ac87f4b6a2684ee3adfd9c50f69c1db22a5aa8525fa940aa1351c46109dc8c6886db4a5efd539de0057669224b80cb1c0429bb675add0fc1f5724f754fa9e96258393436c4b9b5eba775d52306fb8372b7be59dced341090606450ed47ec18559a31bdbf40b6353b17b44cb6abd02d00f7515ac426d94bf093b75b019c5598fc5bcf60ea6ccd9b14d427c8b078e600cd65ba759cd5302a103fd05b3b97f76820a13f4eef8537dc40eea0cffc9a43b90ecdd66087243f61db2585d83cfe2cdcbbb3a6ccc6259373f53ce68715ba4c3858991dc95ee248fa81f0fe5908606dfc85e37b75973d606332c68db05f0b12f6397ac6705907cb2e4621a7ed3b955183cfb0cc3f91f3a1919165a0f8531a4c3b4ad1da21ed54598534d8f201e9859431ebf65273b960f67fa84bf23e6977a3c0a2dd0098c0beca497b0e6af447970c0985f61c2d7f4535e6ec3da35f99622fad63c7b09ce157861b06e00ec46ac667aa57d2e45b8ff6696cea876811accbe688a9abe8cf57b4ec9f6c208f87a7a99861e2e671967733caa92e2dcb3e917e62038e8562fd368b3413edba53d47a26c270e17234517beaed3355d3857df57184496b3fbfabe60f9403634dea54bf28dfc874cb12098260bdac9fc3ce4e26e8f712bfd758d031b7ae0af17f65f1e335784ba969b71374075d0506ab02a3f1c0e0e37656157b715e8d4b921ff93cfefefbbca0588b3f0436b1f52e5cf22b221dc2075e8349bcff570f23f5311dcbbc1530c44035efdff1dfb6082eac02cda7f66c922b8631e51b685edefe205a3572c3a98fbfc54d4afb9ad215ec9ade19890ee3c1054bdccbe8e74710d5e59f27a06974685aeabc663e4aa669c9037d5fbb07e41ad4b27a36ba393714803b4bc91b88584e0e85f646ccab51cca5e38ab2d32774b5660ba2d8f154428b9fa17c418d3a68c55bc8b999c1f04020bb639076db75aa3527a0cb103eaffa7e93ba2373c4e18adae39cfc7eec9d44cf1a179aa1009056e0bfc625d62f5babae3f561ed0ea7c80f36e8f37423dfe52c3de19481669c93645b164de53e9a5316e44d6063e3be9280185b5a40400a83acd3933eff5d742b80a8a77b9136443988d1bb3342f294ef97dba055010e193ca055fdcb83385084e895e5dfe4ec23ada37f92c060b2d15f3f175a7fbc8227ccc91a58cd0b94085b9e30a8636a652c7c81837948819aedb92b271d18a6ebe8979d97576ddf341eca4bf39350ca9bb98cfdb42bb0567e54f39cf1027253497b1b9df60727ab540bf49fa2b0f1eb60596f4cdda10d7d14ae030faac8338211e263b2fc8420116a3bce8cb8c0c649bf0480b4701c928fb3d422001070bfb5b07a81ce506fccbcf3faa693486cb6b5432d83db1f0a99f414a98f138c7305d9c0af905dadb0b95af4f4d800f79d08c6ece7212407e31edc23c2c3917b7e6b65a3ed7d88641ca54fbb0c032934044618b1495ab9e1b2487ae1eb70a2dd59c803c7322ef3751e9015b172160b95413d681c7909dbc85c5cd9b69fe54f7f2157172551f3fe0e3fcd0f8cb0ef869478b226c27b0c75fb19ec8ceb73b415a3b95c53adc04bcf77529bfaa3770e2f036bb8e8ac5cead6e0a9341990872b0e4f42914fd8971a1fd874489ad5e51e16455420c419cf68fb7ffbaa7ed78ea4f08c078591950d7abe067b92960e02da13546884f2109653711146869a17f182442b64873a2e597b1d54b7e29e303215cf5b48242b6943ebc9c2152c5e65897f878ba7c1237ff84a4e2947a5b7368bf4e584369094ef14d84a47b584c22eab712dcd7336a4e5e0f92cda30fa8c838e66161b883f7f40939556c40653d18dd3a9a152f3dc24d295965c6b6b5c6873f7497caf3fb73af971fd02f8e6fbaecd89815ce488c55138019537cd5cddb36659f43065cd1695b17878d84b7ea3b0be1f30f7d1fec8f2315627d0192a094a0107045ccd2f5a92a7e7491d7aaa959e9f831ee9df686cb6f1d90d30c4bc2c6c7a256fb0e42f277d63763a99a298d4fb6c25142570b510b2fbd69873544d074e87232cd598ef61eace019f0e375f0d2d73c72df1307d0f70dab823eac87f15bab8d23d85e78c2f22e3ab472f49051e60e323cf06d1cd9b6d9674e1e1c0f9b0706a6a1922487d83217cef4517ff36c4ba55399bafadc7b8b27752d7c4de67d6ef0dfd3839fe83bce5a976a569397cb0ae50b58e8686cb3dfff9c261e5b680c357dc3466f20e19b91f526660a557055f7112031ac5efb50987da99cfaac3a231f093958a78e9fd5fb2485925ad2aec29017629fb7fbed122ba732f00ecf4e0be6ebcb138750c28178a3b8c10099261a4fb3571b9d1b6852311d4c6dabe2c1ac04700b59ea43b0cc0893ffba4c58d2185e2fc5f74eee24b465cdf677448c97f9851bc4bbbb89e22ebd33df85c838d30c9e2c23b48d09ee5431fbb09c11650c349a0a481f6215ce955bbcdb58f1483fc98b641e3e08cc878cc07c9fdbb2f93819fe445f13a045b0291a53cff7051ed7b78980f0f5aa529de1f183ef79d5b9381ccc2bd2f5cf00832b9d948dac3e90b5501eed08041639e85bdeb3f1483fa212c0af0d07674d9ceaaf69743d59c340ad2ef38e14bbbe299df4d29179cb499fcfcbc860d06e89f0c8059f89ca2e41760486460ac14c357ec109245933185ffde1578bc8fec3006f7fe40735e0885d4f358c24c3266629b68d84cea1fc1e88b64feca18e27efe59116db02c93c1d9c3a527b99dc08202733cf06df89ac53372126ae4fc4cf09fdabc08e0f7d5584fbfc76d205670ed439db767151d3955d875ad968acaf9c69815fff977faf6f4174bb0e661e933b37bd589c9a05784daf653c0b06912ebb194d4bbfff63f8e04976db8788d0c196a16bac96bb58d8bc572c49ee4b9ffbb3be4e3949bb8dd29ddf5d4aa90bf4099eb208d7d07a384817cb58c68211fcab11e1628efcdb8a1868633cd0f3f8cee149f7d56a76a189d1c25c76d2dcb534992fa7e04601cf0ca185cb4b3c0b1b711cf98b69656c532c14b6467b28f3727726dd44eb1eb99064bbc489acf6c9ec3c9620e62c6d235ee3a35bffe4c65b6b09e70995860b521f79f5080773f80c46fec2bfd44de1e1af59ac6636c9d65d7285d335b0afc708cb2b651c0625e5e4b6c6b2638704eabdec35426e63544a085cbed17a9524fb5cee150a9596f6ad75281b04cb3984e9b231b4cb1c1b24356813d629ec257a6e25a52d043399083755693557250a0771ff25cc5a6f24d50dd50da3957c512b4dda54ee385e848f00568d78c3b040c73d8d7ab73d6fae44697f44153d2800c8d76c2c3714a1091498900e751ae91aadea1abc572af41a5d75eaf23d2df5ea3d859391f459c8c87a4d8a6535258edaf97d27f353fb1b5a848459d8474411c98bec9109e8b9c0f5d7307811607f2bf37dd47997435504042cbeb778fa44fe6e83171c8dd221fd1e3f92f44ff91ea3c8be24ff25b0f3c051a743c3d5a6cf3149c416e6803823daa7accd5da47c461f6a2e70d02c255e7d7b04063c6f7ec47663f784cfc42116caccb28ad72c20e437a44cb2802b9012281d4d469a17b743f3b1cb9bc5b5faf1e9b95577b102f0df4a14594a75042eda586abb2ee5a42d056023b5c8ff0ea322de6b214ce0db74b269b52ca2bf2c288495e5df6868033d142d31a0c6d50d29267fe36a53cf9dd85174e559647271a484c406461f9e213c313336656de97eb437736bf6e5febab3d3cf6096d441ec69b0b0f51268992a61e8e3dd134339b5c5f0db78a42e8f4de1e5f61aa05c66ca52008519bb594275bc72608e817aaf03b0acb941d41fb78559433cd3d8f9b8a65e947d73f11c4729e829c5830fc0f30bc636be0c8eb35e35f1a05a9aaf30691395ef6a55d0a040d4ca5a8a0b88e80034e8e9e82972cdf279069faba2d11ae2b2687d15af920ef5e1142979beaf9fd1fa20981a9b15598c99d976174192ac4a1e616128b290b3e936d5268ff9dc6115a0694ae17d509fe5ac56918d650e73b43550128533b529a99eacef488eb18890d436bd1a8c9354918407084eb11b52f78ad84642a419d367a6c7c477ee537e09a076d81ecc3e9b89d478613b3ba86493b6d8245c4979ccf2a24f3024faad71293024c83540f668f612ee1129ab1aa1bdf0f2349f20e12372a58a0ae6bef20d889ddef30999b14b67b88fa68c0e789c36062ea5c717b6be12f4b34f2e79596c8aacff275cf8c17c817d4e7703bf0137b34707e1914390e78ca6790369e687403a51cd55e4418649b1a054f54e08df0280448aecee14e72945ecbd040e2ebaeda8b4d4659c5541875defffb7f238e2afc482ede1e9c2dfd82f33680bbfdc57782d83423b09d580ee57667df591be6aac8e3afee6c6e5848d0f6470ccf484e9dd38d64b1bde38bd8d55c982e393954031b420e75fda67d22e6b48c7fbb9194de007f27bc1ff981bcbd5588611d9d038c883387ace42d9fa243fb7dad985f104a87236d8b7907d955aa76655b8e6519c6c9d51b4baad14a95e6c33261b43c971efaee61772180a73b1c14af6fef04023657f2d22a2f950b9506da4e9c3ddf27c611aeb3ea111bdfcb578c6c782afc54e9b58f45daf1d6f605ba7e265325416033bec7938e359357120346e8c6f1e0a42ed0a8c51526ea09bc8be6e13b583cf828e0631f1442dc2349faf9f30fad8e6277394074951d98e7188b04618c53b02f8d6bb8ab8abed77753d0e20d3c2a56f0dc08cc273ac91d975c0c222c108011aa76ae17624e60f39b3770615031b6fc59fcc90a15461ca7147b26e69f3fca14234122bd4b801fbefc15fc745bfdf3c4bc698ff6953a4748f4b0502ab7e160ab5314d68ed825c4c9379e0d09648673f9364b8ddc3495eea46a73ff854569d4697da2d41d40ecf4741693ae3733b75cd5f1b697a872c591631dddb58880f6ded43bf2d05f605406f38eb4225e50525ff85560f18f30f9bea8b8aee57c8f7ec7c5d3677cb7cbc92f013d7576d95f48edd6fb8c02bdfadd7033b59e4c6bf78722e1018cb8be97f5bec20eb03804d14a0c4fc6cb99534d7b85be381469362ee5f733252b220932ea6499a0af305ffbe1c853c39ac1dc26b49ef7e5f02e487243da82caf4712591858ee1722266117170f10e01c28af6b6212faf763f963c419114a29b347806507f0b70bf8a5a26e21e63583f2f99418b6a2c3dac8f0922f507fbb94c4f31c41a55c7af47da26b7fa00fd47462bf8767d34942d020884440623ceb29719c8f29de2797a7d3fc087b38e93387c88e4e2833e937196fd483aa6ef48e1b40235bf6482cf132fcb233de9ae93d250c426580c44719695c2bf9ffbf8b16032dc946f0aaa01980e53255ad80dd3d19cad4c9803669a79972448a93b038584f5f66a74352c6e177ed1a2fbcbe69b3527597f8ad8c79aba67058a76a11f292415e87a4d4d6e876", 0xffffffffffffff1c}, 0x1006) close(r1) socket$kcm(0x2, 0x3, 0x2) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) dup(r3) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) accept4$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x298, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x200, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc8b}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 343.349425] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 343.450250] FAULT_INJECTION: forcing a failure. [ 343.450250] name failslab, interval 1, probability 0, space 0, times 0 [ 343.461582] CPU: 0 PID: 13653 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 343.470079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.479439] Call Trace: [ 343.482040] dump_stack+0x1c9/0x2b4 [ 343.485684] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.490881] ? putname+0xf2/0x130 [ 343.494340] ? filename_lookup+0x397/0x510 [ 343.498579] ? user_path_at_empty+0x40/0x50 [ 343.502903] ? do_mount+0x17f/0x1e30 [ 343.506624] ? __x64_sys_mount+0xbe/0x150 [ 343.510788] should_fail.cold.4+0xa/0x11 [ 343.514860] ? do_raw_spin_unlock+0xa7/0x2f0 [ 343.519287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.524398] ? kasan_check_write+0x14/0x20 [ 343.528650] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 343.533774] ? find_held_lock+0x36/0x1c0 [ 343.537868] ? check_same_owner+0x340/0x340 [ 343.542202] ? rcu_note_context_switch+0x680/0x680 [ 343.547165] __should_failslab+0x124/0x180 [ 343.551412] should_failslab+0x9/0x14 [ 343.555224] kmem_cache_alloc_trace+0x2b5/0x730 [ 343.559905] ? kasan_check_write+0x14/0x20 [ 343.564171] vfs_new_fs_context+0x5b/0x720 [ 343.568422] do_mount+0x605/0x1e30 [ 343.571970] ? rcu_is_watching+0x8c/0x150 [ 343.576125] ? trace_hardirqs_on+0xbd/0x2c0 [ 343.580477] ? copy_mount_string+0x40/0x40 [ 343.584728] ? copy_mount_options+0x5f/0x380 [ 343.589159] ? kmem_cache_alloc_trace+0x324/0x730 [ 343.594026] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.599579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.605144] ? copy_mount_options+0x285/0x380 [ 343.609659] ksys_mount+0x12d/0x140 [ 343.613301] __x64_sys_mount+0xbe/0x150 [ 343.617294] do_syscall_64+0x1b9/0x820 [ 343.621196] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 343.626571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 343.631506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.636359] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 343.641382] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.646906] ? prepare_exit_to_usermode+0x291/0x3b0 [ 343.651936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.656796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.661985] RIP: 0033:0x457099 [ 343.665190] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.684194] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.691942] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 03:33:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x8f, "2bede04eb49a4f97dd685419483f0ff3cc3acadd08c059df5a11618de138f5fb2e796d55501ccf9a92a3c4757d1884b2f3fc07447c7a673825108f32d0e54965165b587a1aea345495765b8e8e8324792fc2de6821c9bd676b91dbdb14c64879c5a83aca12406c17bdfec3f8f9b74a2db2288ef7d9d99d54e28aeb67d15113937ee4f0cc7d3dac7f315e4b95c195f2"}, &(0x7f0000000000)=0x97) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x7}, &(0x7f0000000240)=0x8) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:43 executing program 7 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 343.699228] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 343.706506] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 343.713788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 343.721066] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000006 03:33:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7fff) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1, 0x200000000000000) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x40, 0x22040) ioctl$RTC_AIE_OFF(r0, 0x7002) 03:33:43 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000080)=@ethtool_cmd={0x10, 0x9, 0x4, 0x0, 0x8, 0x3, 0x5, 0x5, 0x1ff, 0x0, 0x7f5c, 0x5, 0x9, 0xfffffffffffffffa, 0xfa, 0x6, [0x6bd, 0xe10]}}) 03:33:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000380)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x4, 0x7, 0x1, 0x119a4727}) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000002640), 0x0, &(0x7f0000000100)}, 0x0) close(r1) 03:33:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000000200)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000500)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/247, 0xf7}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0xffffffffffffffb5) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x400, 0x48080) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)='i') close(r0) 03:33:44 executing program 5 (fault-call:4 fault-nth:7): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000080)='md5sum.*mime_type\x00') mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x1000004, 0x40000002871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) mremap(&(0x7f000053c000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f000053f000/0x1000)=nil) 03:33:44 executing program 3: timer_create(0x0, &(0x7f0000000380), &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xadf, 0x8}, &(0x7f0000000600)=0x10) accept4(r2, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000280)=0x80, 0x80000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000140)) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x90000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="3d800000e6b4d34579896ef1f86541835884fd01d1f132d32b3d44cb453089eff2c3710930605ab95296f6cd1d154ae966e18562607bf996d17cfbc019d28724d7"], &(0x7f0000000180)=0x45) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl(0xffffffffffffffff, 0x39b, &(0x7f0000000700)="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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x0, 0xe603000000000000, 0xfc000000]}}, 0x1c) [ 344.091941] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 344.109990] FAULT_INJECTION: forcing a failure. [ 344.109990] name failslab, interval 1, probability 0, space 0, times 0 [ 344.121425] CPU: 1 PID: 13693 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 344.129937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.139306] Call Trace: [ 344.141927] dump_stack+0x1c9/0x2b4 [ 344.145586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.150809] ? is_bpf_text_address+0xd7/0x170 [ 344.155331] ? kernel_text_address+0x79/0xf0 [ 344.159770] should_fail.cold.4+0xa/0x11 [ 344.163869] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.169009] ? save_stack+0xa9/0xd0 [ 344.172665] ? save_stack+0x43/0xd0 [ 344.176314] ? kasan_kmalloc+0xc4/0xe0 [ 344.180228] ? kmem_cache_alloc_trace+0x152/0x730 [ 344.185093] ? legacy_init_fs_context+0x49/0xd0 [ 344.189792] ? vfs_new_fs_context+0x2c6/0x720 [ 344.194305] ? do_mount+0x605/0x1e30 [ 344.198029] ? ksys_mount+0x12d/0x140 [ 344.201836] ? __x64_sys_mount+0xbe/0x150 [ 344.205998] ? find_held_lock+0x36/0x1c0 [ 344.210093] ? check_same_owner+0x340/0x340 [ 344.214430] ? rcu_note_context_switch+0x680/0x680 [ 344.219365] ? rcu_is_watching+0x8c/0x150 [ 344.223530] ? trace_hardirqs_on+0xbd/0x2c0 [ 344.227882] __should_failslab+0x124/0x180 [ 344.232147] should_failslab+0x9/0x14 [ 344.235966] kmem_cache_alloc_trace+0x2b5/0x730 [ 344.240651] ? legacy_init_fs_context+0x49/0xd0 [ 344.245343] ? rcu_read_lock_sched_held+0x108/0x120 [ 344.250371] ? kmem_cache_alloc_trace+0x324/0x730 [ 344.255230] ? rcu_read_lock_sched_held+0x108/0x120 [ 344.260273] apparmor_fs_context_alloc+0x43/0xa0 [ 344.265060] security_fs_context_alloc+0x54/0xb0 [ 344.269842] vfs_new_fs_context+0x318/0x720 [ 344.274189] do_mount+0x605/0x1e30 [ 344.277739] ? rcu_is_watching+0x8c/0x150 [ 344.281895] ? trace_hardirqs_on+0xbd/0x2c0 [ 344.286232] ? copy_mount_string+0x40/0x40 [ 344.290476] ? copy_mount_options+0x5f/0x380 [ 344.294895] ? kmem_cache_alloc_trace+0x324/0x730 [ 344.299751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.305297] ? _copy_from_user+0xdf/0x150 [ 344.309458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.314998] ? copy_mount_options+0x285/0x380 [ 344.319501] ksys_mount+0x12d/0x140 [ 344.323148] __x64_sys_mount+0xbe/0x150 [ 344.327145] do_syscall_64+0x1b9/0x820 [ 344.331042] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 344.336419] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.341355] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 344.346381] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.351399] ? recalc_sigpending_tsk+0x180/0x180 [ 344.356166] ? kasan_check_write+0x14/0x20 [ 344.360415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.365306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.370498] RIP: 0033:0x457099 [ 344.373700] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.392621] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.400345] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 344.407619] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 344.414889] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 344.422165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 344.429439] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000007 [ 344.456898] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:44 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffff, 0x400140) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r5 = getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x0, r4, r5, r6, r7, 0x82, 0x7}, 0x8167, 0x0, 0x80, 0x4, r8, r9, 0x401}) connect$bt_sco(r0, &(0x7f0000000480)={0x1f, {0x100000000, 0x9, 0x9, 0x2c000000000, 0x6, 0x4}}, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x1, 0x6, 0x1, 0x8000}, 0x107, 0x200, 0x4}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'broute\x00'}, &(0x7f0000000600)=0x78) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000006c0)={r10, 0x4}, &(0x7f0000000700)=0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000740)) bind$bt_hci(r0, &(0x7f0000000780)={0x1f, r3, 0x3}, 0xc) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000800)={{0x0, 0x3, 0x8000, 0x6, 'syz0\x00', 0x9}, 0x1, [0xbad2, 0x8000, 0x9, 0x5, 0x1, 0x800, 0x22dc, 0x5, 0x3ff, 0xffffffff, 0xffffffffffff7fff, 0x1, 0x9, 0x8, 0x7, 0xffffffff, 0x82, 0x9, 0x3, 0x20, 0x0, 0x9a, 0x7a, 0x81, 0xfff, 0xad9, 0x160, 0x1, 0x0, 0x9, 0x2, 0x2, 0x1, 0xc67, 0x5, 0x1f, 0x71, 0x3, 0x8, 0x6, 0x4, 0x401, 0x7f, 0x1f, 0xe7, 0x7, 0x1, 0xfff, 0xfffffffffffffffa, 0x7, 0x4000400, 0x9, 0x8000, 0x6, 0x9, 0x0, 0x8001, 0x1, 0x6, 0x2c05, 0x4, 0x9, 0x5f2, 0x2, 0x100000000, 0x5, 0x10000, 0xffffffff, 0x1, 0x401, 0x8, 0x1ff, 0x9, 0x3, 0x5, 0x1, 0x7, 0x7f, 0x5, 0x7, 0x2, 0xfffffffffffffff8, 0x2, 0x4, 0xffffffff, 0x1, 0x4, 0x4, 0x7a, 0xee, 0x7, 0x400, 0x6, 0x401, 0x3f, 0x2, 0x73, 0x2a, 0x80000000000, 0x34bd, 0x80000000, 0x179, 0x80000000, 0x0, 0x80000000000, 0xffffffffffffffff, 0x5, 0x2, 0x8, 0xfffffffffffffffb, 0x200, 0x1ff, 0x0, 0x2, 0x9, 0x634, 0x1ff, 0x200, 0x7, 0x5, 0x5, 0x3, 0xffffffff80000001, 0x6, 0x0, 0xe, 0x48000000, 0x3ff], {r11, r12+30000000}}) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000d00)={r10, 0x4, 0x70}, 0x8) socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000d40)) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d80)=""/26, 0x1a}], 0x1, &(0x7f0000000e00)=""/63, 0x3f, 0x100000000}, 0x5}, {{&(0x7f0000000e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/220, 0xdc}], 0x1, &(0x7f0000001000)=""/129, 0x81, 0x68d0857}, 0x11}, {{&(0x7f00000010c0)=@rc, 0x80, &(0x7f0000002340)=[{&(0x7f0000001140)=""/65, 0x41}, {&(0x7f00000011c0)=""/150, 0x96}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/174, 0xae}], 0x4, &(0x7f0000002380)=""/6, 0x6, 0x9}, 0x4}], 0x3, 0x120, &(0x7f0000002480)={0x77359400}) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r13, 0x40286608, &(0x7f0000002500)={0x2, 0x8, 0x3, 0x3, 0x4, 0x6}) ioctl$TIOCLINUX2(r14, 0x541c, &(0x7f0000002540)={0x2, 0x3ff00000000000, 0xfffffffffffffffb, 0x9, 0x9, 0x100000001}) 03:33:44 executing program 5 (fault-call:4 fault-nth:8): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:44 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000700)={@dev={[], 0x16}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x3c, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000100)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000300)=""/206, 0xce}], 0x6, &(0x7f0000000500)=[{&(0x7f0000000480)=""/107, 0x6b}], 0x1, 0x0) [ 344.629290] FAULT_INJECTION: forcing a failure. [ 344.629290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.641747] CPU: 1 PID: 13665 Comm: syz-executor7 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 344.650250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.659614] Call Trace: [ 344.662231] dump_stack+0x1c9/0x2b4 [ 344.665878] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.671085] ? print_usage_bug+0xc0/0xc0 [ 344.675178] should_fail.cold.4+0xa/0x11 [ 344.679261] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.684379] ? __lock_acquire+0x7fc/0x5020 [ 344.688633] ? lock_acquire+0x1e4/0x4f0 [ 344.692631] ? find_held_lock+0x36/0x1c0 [ 344.696716] ? release_pages+0x7cf/0x14e0 [ 344.700924] ? lock_downgrade+0x8f0/0x8f0 [ 344.705090] ? kasan_check_read+0x11/0x20 [ 344.709251] ? rcu_is_watching+0x8c/0x150 [ 344.713416] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 344.718101] ? rcu_read_lock+0x70/0x70 [ 344.722007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.727562] __alloc_pages_nodemask+0x365/0xd10 [ 344.732239] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 344.737259] ? mark_held_locks+0x160/0x160 [ 344.741499] ? find_held_lock+0x36/0x1c0 [ 344.745575] ? lock_acquire+0x1e4/0x4f0 [ 344.749588] ? lock_release+0x9f0/0x9f0 [ 344.753573] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 344.759122] alloc_pages_current+0x10c/0x210 [ 344.763557] __get_free_pages+0xc/0x40 [ 344.767452] __tlb_remove_page_size+0x2e5/0x500 [ 344.772128] unmap_page_range+0x106d/0x2560 [ 344.776955] ? vm_normal_page_pmd+0x510/0x510 [ 344.781458] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 344.786126] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 344.790820] ? is_bpf_text_address+0xd7/0x170 [ 344.795318] ? kernel_text_address+0x79/0xf0 [ 344.799730] ? __kernel_text_address+0xd/0x40 [ 344.804227] ? graph_lock+0x170/0x170 [ 344.808043] ? find_held_lock+0x36/0x1c0 [ 344.812125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.817684] ? uprobe_munmap+0x14c/0x440 [ 344.821753] ? uprobe_mmap+0xd20/0xd20 [ 344.825665] unmap_single_vma+0x1a0/0x310 [ 344.829821] unmap_vmas+0x125/0x200 [ 344.833459] exit_mmap+0x2c2/0x590 [ 344.837003] ? __ia32_sys_munmap+0x80/0x80 [ 344.841240] ? __khugepaged_exit+0x455/0x6a0 [ 344.845683] mmput+0x265/0x620 [ 344.848883] ? lock_downgrade+0x8b1/0x8f0 [ 344.853035] ? set_mm_exe_file+0x200/0x200 [ 344.857276] ? kasan_check_read+0x11/0x20 [ 344.861429] ? do_raw_spin_unlock+0xa7/0x2f0 [ 344.865839] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 344.870424] ? kasan_check_write+0x14/0x20 [ 344.874664] ? do_raw_spin_lock+0xc1/0x200 [ 344.878908] do_exit+0xec6/0x26e0 [ 344.882366] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 344.887481] ? mm_update_next_owner+0x9a0/0x9a0 [ 344.892160] ? print_usage_bug+0xc0/0xc0 [ 344.896227] ? __lock_acquire+0x7fc/0x5020 [ 344.900465] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 344.905572] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 344.910684] ? lockdep_hardirqs_on+0x421/0x5c0 [ 344.915277] ? trace_hardirqs_on+0xbd/0x2c0 [ 344.919605] ? __lock_acquire+0x7fc/0x5020 [ 344.923843] ? do_raw_spin_lock+0xc1/0x200 [ 344.928088] ? __call_rcu.constprop.68+0x3bc/0xb30 [ 344.933025] ? mark_held_locks+0x160/0x160 [ 344.937262] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 344.942370] ? kfree+0x111/0x210 [ 344.945738] ? kfree+0x111/0x210 [ 344.949120] ? note_gp_changes+0x420/0x420 [ 344.953366] ? graph_lock+0x170/0x170 [ 344.957175] ? kzfree+0x28/0x30 [ 344.960462] ? kzfree+0x28/0x30 [ 344.963749] ? apparmor_file_free_security+0x138/0x1a0 [ 344.969028] ? graph_lock+0x170/0x170 [ 344.972828] ? find_held_lock+0x36/0x1c0 [ 344.976900] ? memset+0x31/0x40 [ 344.980183] ? find_held_lock+0x36/0x1c0 [ 344.984261] ? _raw_spin_unlock_irq+0x27/0x70 [ 344.988760] ? _raw_spin_unlock_irq+0x27/0x70 [ 344.993262] do_group_exit+0x177/0x440 [ 344.997162] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 345.002271] ? __ia32_sys_exit+0x50/0x50 [ 345.006347] get_signal+0x851/0x18e0 [ 345.010072] ? ptrace_notify+0x130/0x130 [ 345.014153] ? set_fd_set.part.4+0x70/0x70 [ 345.018392] ? find_held_lock+0x36/0x1c0 [ 345.022467] do_signal+0x9c/0x21c0 [ 345.026009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.031551] ? poll_select_copy_remaining+0x433/0x6a0 [ 345.036743] ? lock_release+0x9f0/0x9f0 [ 345.040719] ? poll_freewait+0x260/0x260 [ 345.044785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.050324] ? setup_sigcontext+0x7d0/0x7d0 [ 345.054650] ? sigprocmask+0xfc/0x310 [ 345.058458] ? sigsuspend+0x270/0x270 [ 345.062264] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.067802] ? _copy_from_user+0xdf/0x150 [ 345.071954] ? exit_to_usermode_loop+0x8c/0x380 [ 345.076636] ? fput+0x130/0x1a0 [ 345.079922] ? do_syscall_64+0x9a/0x820 [ 345.083900] exit_to_usermode_loop+0x2e5/0x380 [ 345.088491] ? syscall_slow_exit_work+0x490/0x490 [ 345.093338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.098886] do_syscall_64+0x6be/0x820 [ 345.102821] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.108188] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.113116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.117969] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 345.122987] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 345.128005] ? prepare_exit_to_usermode+0x291/0x3b0 [ 345.133030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.137903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.143092] RIP: 0033:0x457099 [ 345.146288] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.165186] RSP: 002b:00007f8a08a72c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 345.172895] RAX: 0000000000000001 RBX: 00007f8a08a736d4 RCX: 0000000000457099 03:33:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f0000000100), 0x8001) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8) [ 345.180163] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 00000000200000c0 [ 345.187430] RBP: 00000000009300a0 R08: 0000000000000008 R09: 0000000000000000 [ 345.194698] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000006 [ 345.201962] R13: 00000000004d3e10 R14: 00000000004c887a R15: 0000000000000000 03:33:45 executing program 1: recvmmsg(0xffffffffffffff9c, &(0x7f0000001cc0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/183, 0xb7}], 0x7, &(0x7f00000006c0)=""/56, 0x38, 0x3}, 0x81}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/165, 0xa5}], 0x1, &(0x7f0000000880)=""/4096, 0x1000, 0x8}, 0x9}, {{&(0x7f0000001880)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/22, 0x16}, {&(0x7f0000001940)=""/139, 0x8b}, {&(0x7f0000001a00)=""/116, 0x74}], 0x3, 0x0, 0x0, 0xd1}}, {{&(0x7f0000001ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/194, 0xc2}], 0x1, &(0x7f0000001c80)=""/8, 0x8}, 0x1}], 0x4, 0x40000101, &(0x7f0000001dc0)) bind$inet(r0, &(0x7f0000001e00)={0x2, 0x4e20}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000001e40)='/dev/vcs#\x00', 0xfff, 0x200000) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000001f40)={0x4, 0x3, 'client1\x00', 0x5, "fae990e07e7ce41c", "3146ef91108aae7209b59f3fe7844ecd740efba825eff81236e54f41790cec1d", 0x2, 0x5}) r5 = dup(r2) r6 = creat(&(0x7f0000002000)='./file0\x00', 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000002040)=0x4, 0x4) r7 = request_key(&(0x7f0000002080)='.dead\x00', &(0x7f00000020c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002100)='{\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000002180)={0x8, &(0x7f0000002140)=[{0x4, 0x0, 0x4, 0x1ff}, {0xad, 0x1, 0x9ec, 0x4}, {0xfff, 0x11, 0x5a536985, 0x101}, {0xfffffffffffff001, 0xffffffffffff1b92, 0xf25, 0x8b65}, {0x4, 0x0, 0x6, 0x5}, {0xb6, 0x100000001, 0xf0, 0x8}, {0x100000001, 0x4, 0x9, 0x1}, {0x0, 0x8001, 0x8, 0x1}]}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000021c0)=0x81, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002200)=""/12, &(0x7f0000002240)=0xc) utimes(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={{0x0, 0x7530}, {0x0, 0x7530}}) syz_open_dev$sndseq(&(0x7f0000002300)='/dev/snd/seq\x00', 0x0, 0x10800) socket$key(0xf, 0x3, 0x2) socket(0x0, 0x80005, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) r9 = syz_open_procfs(r8, &(0x7f00000023c0)='net/nfsfs\x00') r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002440)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400810}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)={0xdc, r10, 0x112e14c29259a6c9, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004800) r11 = request_key(&(0x7f0000002600)='id_legacy\x00', &(0x7f0000002640)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002680)='/dev/snd/seq\x00', r7) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000002700)={0x1, &(0x7f00000026c0)=[{0xfffffffffffffff7, 0x1, 0x8}]}) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000002740)) keyctl$get_keyring_id(0x0, r11, 0x0) lseek(r3, 0x0, 0x3) connect$packet(r0, &(0x7f0000002780)={0x11, 0x1c, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000027c0)={0x2000000000000000, 0xf000, 0x8001, 0x2, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000002840)={{0x0, 0x6, 0xfffffffffffffffa, 0x72, 'syz0\x00'}, 0x0, 0x230, 0x3, r8, 0x1, 0x4, 'syz1\x00', &(0x7f0000002800)=['{\x00'], 0x2, [], [0x3, 0x7, 0x5fe7, 0x4]}) 03:33:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000000)="153f6234488dd25d976070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) [ 345.255377] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f727431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200", 0x0, 0x131004, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:45 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x11) pread64(r0, &(0x7f0000000140)=""/25, 0xffffffffffffff8b, 0x0) 03:33:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000280), 0x1c) r1 = accept(r0, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e20, 0xe18a, @remote, 0x7}}}, &(0x7f0000000440)=0x84) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@sco={0x1f, {0x8, 0xffff, 0x7, 0x1, 0x0, 0x6}}, {&(0x7f00000000c0)=""/253, 0xfd}, &(0x7f00000001c0), 0x42}, 0xa0) getsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x2a8) 03:33:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x7, 0x3, 0x10001, 0x0, 'syz1\x00', 0x100}) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x2) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18) 03:33:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) getpid() connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc7, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 345.443385] FAULT_INJECTION: forcing a failure. [ 345.443385] name failslab, interval 1, probability 0, space 0, times 0 [ 345.454738] CPU: 1 PID: 13747 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 345.463247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.472605] Call Trace: [ 345.475208] dump_stack+0x1c9/0x2b4 [ 345.478855] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.484077] should_fail.cold.4+0xa/0x11 [ 345.488169] ? unwind_get_return_address+0x61/0xa0 [ 345.493125] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.498276] ? save_stack+0x43/0xd0 [ 345.501916] ? kasan_kmalloc+0xc4/0xe0 [ 345.505815] ? kmem_cache_alloc_trace+0x152/0x730 [ 345.510683] ? apparmor_fs_context_alloc+0x43/0xa0 [ 345.515633] ? security_fs_context_alloc+0x54/0xb0 [ 345.520592] ? find_held_lock+0x36/0x1c0 [ 345.524711] ? check_same_owner+0x340/0x340 [ 345.529053] ? kmem_cache_alloc_trace+0x275/0x730 [ 345.533918] ? rcu_note_context_switch+0x680/0x680 [ 345.538871] ? kasan_check_read+0x11/0x20 03:33:45 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000000c0)) getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000040)='security\x00', 0xc2, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x300}) mq_open(&(0x7f0000000140)='vboxnet0}ppp0(\x00', 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc00}) [ 345.543047] __should_failslab+0x124/0x180 [ 345.547312] should_failslab+0x9/0x14 [ 345.551124] __kmalloc_track_caller+0x2ae/0x720 [ 345.555818] ? m_show+0x5d0/0x5d0 [ 345.559288] ? rcu_read_lock_sched_held+0x108/0x120 [ 345.564315] ? kmem_cache_alloc_trace+0x324/0x730 [ 345.569173] ? vfs_parse_fs_string+0x191/0x2b0 [ 345.573767] kmemdup_nul+0x31/0xa0 [ 345.577313] vfs_parse_fs_string+0x191/0x2b0 [ 345.581756] ? vfs_parse_fs_param+0x2c0/0x2c0 [ 345.586265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.591818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.597373] do_mount+0x658/0x1e30 [ 345.600919] ? rcu_is_watching+0x8c/0x150 [ 345.605069] ? trace_hardirqs_on+0xbd/0x2c0 [ 345.609404] ? copy_mount_string+0x40/0x40 [ 345.613649] ? copy_mount_options+0x5f/0x380 [ 345.618074] ? kmem_cache_alloc_trace+0x324/0x730 [ 345.622932] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.628480] ? _copy_from_user+0xdf/0x150 [ 345.632643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.638191] ? copy_mount_options+0x285/0x380 [ 345.642699] ksys_mount+0x12d/0x140 [ 345.646664] __x64_sys_mount+0xbe/0x150 [ 345.650652] do_syscall_64+0x1b9/0x820 [ 345.654558] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.659932] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.664869] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 345.669893] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 345.674911] ? recalc_sigpending_tsk+0x180/0x180 [ 345.679681] ? kasan_check_write+0x14/0x20 [ 345.683926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.688780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.693969] RIP: 0033:0x457099 [ 345.697175] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.716080] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.723797] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 345.731075] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 345.738352] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 345.745624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 345.752897] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000008 03:33:45 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x600, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x12000000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x8c}, 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x100, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={r1, 0x4}, &(0x7f0000000280)=0x8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000340)=""/204) recvmmsg(r3, &(0x7f0000000140)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000000180)={0x0, 0x989680}) 03:33:45 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20000000000, 0x0) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) inotify_init() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) sched_setparam(r1, &(0x7f00000000c0)=0x5) 03:33:45 executing program 5 (fault-call:4 fault-nth:9): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:45 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x5, 0x8000) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socketpair(0x9, 0x80001, 0x8000, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair(0x9, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r5, 0x210, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffff8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24048001) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r5, 0x401, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0x0, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xe8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@loopback, @empty, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_bond\x00', 'sit0\x00', {}, {}, 0x73, 0xffff, 0x2, 0x8}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xbd, 0x4, "a8280104974c3af93dc4ca15da919328a339e0df1da98dbad24b04742dec"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r6 = dup2(r2, r4) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000200)={0xd}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4000400203) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 03:33:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001ca266f6e64000000000c0006000800040000000000"], 0x3c}}, 0x0) [ 345.977218] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 345.998258] FAULT_INJECTION: forcing a failure. [ 345.998258] name failslab, interval 1, probability 0, space 0, times 0 [ 346.009657] CPU: 0 PID: 13797 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 346.018184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.027554] Call Trace: [ 346.030187] dump_stack+0x1c9/0x2b4 [ 346.033846] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.039054] ? do_syscall_64+0x1b9/0x820 [ 346.043133] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.048544] should_fail.cold.4+0xa/0x11 [ 346.052629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.057760] ? __kmalloc_track_caller+0x26e/0x720 [ 346.062632] ? rcu_is_watching+0x8c/0x150 [ 346.066800] ? trace_hardirqs_on+0xbd/0x2c0 [ 346.071155] ? rcu_pm_notify+0xc0/0xc0 [ 346.075085] ? find_held_lock+0x36/0x1c0 [ 346.079217] ? check_same_owner+0x340/0x340 [ 346.083569] ? rcu_note_context_switch+0x680/0x680 [ 346.088524] __should_failslab+0x124/0x180 [ 346.092788] should_failslab+0x9/0x14 [ 346.096611] __kmalloc_track_caller+0x2ae/0x720 [ 346.101306] ? vfs_parse_fs_string+0x1fd/0x2b0 [ 346.105913] ? legacy_parse_monolithic+0xde/0x1e0 [ 346.110779] kmemdup+0x24/0x50 [ 346.113991] legacy_parse_monolithic+0xde/0x1e0 [ 346.118677] ? cmp_flag_name+0x50/0x50 [ 346.122585] do_mount+0x6d8/0x1e30 [ 346.126162] ? rcu_is_watching+0x8c/0x150 [ 346.130326] ? trace_hardirqs_on+0xbd/0x2c0 [ 346.134674] ? copy_mount_string+0x40/0x40 [ 346.138937] ? copy_mount_options+0x5f/0x380 [ 346.143369] ? kmem_cache_alloc_trace+0x324/0x730 [ 346.148252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.153813] ? _copy_from_user+0xdf/0x150 [ 346.157987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.163547] ? copy_mount_options+0x285/0x380 [ 346.168068] ksys_mount+0x12d/0x140 [ 346.171716] __x64_sys_mount+0xbe/0x150 [ 346.175714] do_syscall_64+0x1b9/0x820 [ 346.179620] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.185003] ? syscall_return_slowpath+0x5e0/0x5e0 [ 346.189950] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 346.194982] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 346.200009] ? recalc_sigpending_tsk+0x180/0x180 [ 346.204778] ? kasan_check_write+0x14/0x20 [ 346.209034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.213896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.219098] RIP: 0033:0x457099 [ 346.222309] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.241229] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 346.248963] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 346.256248] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 346.263525] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 346.270807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 03:33:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x9, 0x800) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9e0, 0x9ce, 0x7fffffff, 0xffffffff}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0xd0}, &(0x7f00000002c0)=0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @rand_addr}, &(0x7f0000000080)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x100000000, {{0x2, 0x4e21, @remote}}}, 0x88) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x2217) 03:33:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 03:33:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x4100) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000001c0)={[0x2006, 0x3000], 0x6b9, 0xc}) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x111001, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000025c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0xa}, 0x1}}}, &(0x7f0000002680)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000026c0)={r3, 0x2, 0x30}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0xc4, 'syz0\x00', 0x3}, 0x4, 0x4, 0x20, r4, 0x5, 0xffffffffffff3cb0, 'syz1\x00', &(0x7f0000000340)=["562665746831b000", '/dev/kvm\x00', '/dev/dmmidi#\x00', 'tls\x00', '/dev/dmmidi#\x00'], 0x2f, [], [0x3, 0x6d41, 0x100000000, 0x1]}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000580)="ad902f4cadf0b9a6f13da4586d9ae8b34101af4803bce42cdcf44f1866ccf661ffdefcd3975026e4b75c263500c0621aa0ed5eee7cb7eee3a0c4ddc4517231186556dd4e064dccdb59", 0x49) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f0000000140)={0x7b, 0xbff, [0x0, 0x0, 0x40000020, 0x80]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000004c0)=""/111, &(0x7f0000000540)=0x6f) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002540)={&(0x7f0000002700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x2278}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 03:33:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$unix(r2, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0xfffffffffffffc98) r3 = memfd_create(&(0x7f0000000300)="8eb549d6602c4f7bd34748897dad3c5294756c657aa1baf428787ea7eae01666ffe43bbab9f3caa0730258bd4eb40346521c4339f0e539461e7ce69120e5718903381385e95fa44ac967863ab437c34caed94d016de3db13f017355776b8eff79e7cbf9d7da31daac1d834d5b45bde344e0a26452a0946fc939ca34ea8d3cdcb5e37a3b89dada0b0598fdfd7514e32a1060005326799ce85686f5d184e8fd3384099fbf3cc1153bdd7c7baad0026c2390c739f716ac2264022b76e46f7709d471a5d765ea03d6ff41d7b", 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x53, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x1, 0x4) sendfile(r3, r4, &(0x7f0000000000), 0x40000000009) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f00000001c0)=0x1f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x47, @loopback, 0x1}}, 0x9, 0x100000000, 0x7, 0x1, 0xb0b2}, &(0x7f0000000140)=0x98) [ 346.278086] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000009 03:33:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000340)=""/28, 0xfffffffffffffe75) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) fadvise64(r0, 0x0, 0x40, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:46 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x5a010000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:46 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffd3b, &(0x7f0000000140)=0x40000000010009) r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xb2a, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, 0x14) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x210200, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0xd6c1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/35) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0xfffffffffffffffe, 0xfffffffffffffda9) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0xea03000000000000, 0x50000ff0f0000, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) r6 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r9}}, 0x18) r10 = getgid() shmctl$IPC_SET(r6, 0x1, &(0x7f0000000640)={{0x7, 0x0, r7, r8, r10, 0x8, 0x4}, 0x8, 0x7, 0x1, 0x4, r5, r5, 0x1c}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) prctl$setptracer(0x59616d61, r5) tkill(r5, 0x401104000000016) 03:33:46 executing program 1: r0 = socket$inet(0x10, 0x400000080002, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000006061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 03:33:46 executing program 5 (fault-call:4 fault-nth:10): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x4000000000000080}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x25, @time, 0x0, {}, 0xfffffffffffffffc}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='/dev/snd/seq\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) init_module(&(0x7f0000000080)='mime_type:\x00', 0xb, &(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00') lseek(r2, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) connect(r3, &(0x7f0000000340)=@ax25={0x3, {"bb6ee1695376cb"}, 0xfffffffffffffff8}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0xf00000010000000, 0x0, 0xffffffffffffff39) accept4(r2, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000280)={0x80000001, 0x1f, 0x10000}) 03:33:46 executing program 4: syz_emit_ethernet(0x101a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@mpls_mc={0x8848, {[{0x9, 0x5, 0x369, 0x5}], @llc={@snap={0x0, 0xaa, 'w', "133d42", 0x805, "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"}}}}}}, &(0x7f0000001040)={0x0, 0x1, [0x36a, 0x96d, 0xee, 0xe0c]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000010c0)={0x2d, 0x4, 0x0, {0x3, 0x4, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) r1 = syz_open_dev$sndpcmp(&(0x7f0000001100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x101000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000001140)={0x0, 0x80000000}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000011c0)={r2, 0xe14f}, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001200)='/dev/rtc0\x00', 0x101000, 0x0) r4 = semget(0x0, 0x4, 0x80) semctl$GETNCNT(r4, 0x4, 0xe, &(0x7f0000001240)=""/4096) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002240), 0x0, 0x1000}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000022c0)={0x8, 0x6, 0x9, 'queue0\x00', 0x5}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002400)=0x0) perf_event_open(&(0x7f0000002380)={0x4, 0x70, 0xe4aa, 0x800, 0x0, 0xd94a, 0x0, 0x6, 0x2008, 0x4, 0x40, 0x9, 0x9, 0x4fc, 0x1f, 0x4, 0x7, 0xffffffffffffffff, 0x6, 0xff, 0xfff, 0x9, 0xfffffffffffffffc, 0x7, 0xfffffffffffffffe, 0x300000, 0x4b, 0x1, 0x5, 0x4, 0x1, 0x100, 0x1, 0x2, 0x8, 0x101, 0x1, 0x6, 0x0, 0x4, 0x6, @perf_config_ext={0x4, 0x100000000}, 0x28, 0x20a, 0x3ff, 0x0, 0x5, 0x0, 0x2}, r5, 0x4, r3, 0x1) fcntl$getflags(r0, 0x0) recvfrom$llc(r3, &(0x7f0000002440)=""/66, 0x42, 0x40000160, &(0x7f00000024c0)={0x1a, 0x30e, 0xffffffff, 0x0, 0x2, 0x80, @dev={[], 0x1a}}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000002500), &(0x7f0000002540)=0xb) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000002580)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000002c80)=@filter={'filter\x00', 0xe, 0x3, 0x5d0, [0x0, 0x20002680, 0x200028b8, 0x200028e8], 0x0, &(0x7f0000002640), &(0x7f0000002680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x11, 0x2, 0xfbff, 'team_slave_0\x00', 'bpq0\x00', 'ipddp0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x21}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1d8, 0x1d8, 0x208, [@time={'time\x00', 0x18, {{0x3, 0x401, 0xcd38, 0x107ad, 0x9, 0x119, 0x2}}}, @comment={'comment\x00', 0x100}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x13, 0x8, 0x6558, 'gre0\x00', 'bcsf0\x00', 'bpq0\x00', 'erspan0\x00', @remote, [0xff, 0xe9e50ce82a3efb41, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb0, 0xe8, 0x130, [@time={'time\x00', 0x18, {{0x9, 0x7fffffff, 0x1075e, 0xbd17, 0x7, 0x72d}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x3f6, 0x6}}}}, {{{0x5, 0x49, 0x89f7, 'irlan0\x00', 'bond0\x00', 'ip6gretap0\x00', 'ip6tnl0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x11}, [0x0, 0x0, 0xff], 0xa8, 0xa8, 0x1d8, [@cluster={'cluster\x00', 0x10, {{0xfffffffffffffffc, 0xff, 0x6, 0x1}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}}}}]}]}, 0x648) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000002d00)={0x5, 0x2, 0x5e, 0x0, 0x40000000, 0xffffffff, 0x85, 0x28b, 0x2d, 0x912e}) ioctl$void(r1, 0x5451) syz_open_dev$binder(&(0x7f0000002d40)='/dev/binder#\x00', 0x0, 0x2) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/autofs\x00', 0xc002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000002dc0)={r2, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x11}, 0x1}}, 0x4, 0x1, 0x8001, 0x100000000, 0x44c8}, &(0x7f0000002e80)=0x98) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000003040)={'broute\x00', 0x0, 0x4, 0xfe, [], 0x7, &(0x7f0000002ec0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002f40)=""/254}, &(0x7f00000030c0)=0x78) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000003100)={[], 0x8, 0x205, 0x6, 0x35a8, 0x5, r5}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000003180)=r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) getpeername$packet(r6, &(0x7f00000032c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003300)=0x14) recvfrom$packet(r6, &(0x7f00000031c0)=""/31, 0x1f, 0x2, &(0x7f0000003340)={0x11, 0xfc, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000003380)=""/174) [ 346.675951] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 346.683353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 346.743356] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 346.763948] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 346.790764] FAULT_INJECTION: forcing a failure. [ 346.790764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.802681] CPU: 0 PID: 13851 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 346.811190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.820577] Call Trace: [ 346.823202] dump_stack+0x1c9/0x2b4 [ 346.826861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.832091] should_fail.cold.4+0xa/0x11 [ 346.836210] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.841333] ? rcu_is_watching+0x8c/0x150 [ 346.845494] ? graph_lock+0x170/0x170 [ 346.849314] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 346.854015] ? find_held_lock+0x36/0x1c0 [ 346.858120] ? check_same_owner+0x340/0x340 [ 346.862480] ? rcu_note_context_switch+0x680/0x680 [ 346.867426] ? legacy_parse_monolithic+0xde/0x1e0 [ 346.872296] __alloc_pages_nodemask+0x365/0xd10 [ 346.876988] ? find_held_lock+0x36/0x1c0 [ 346.881070] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 346.886119] ? __kmalloc_track_caller+0x26e/0x720 03:33:46 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80000000800, 0x1, 0x6, 0x1, 0x1, 0x9}) fgetxattr(r0, &(0x7f0000000000)=@known='security.SMACK64IPOUT\x00', &(0x7f0000000040)=""/189, 0xbd) ioctl(r0, 0x800000000000937e, &(0x7f0000000100)="9ea42c273dfa7204c691") 03:33:46 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x21, 0x1, 0x4}}, 0x14) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={0x65, 0x78}, &(0x7f00000001c0)='\x00', 0x0) [ 346.891001] ? rcu_is_watching+0x8c/0x150 [ 346.895182] ? trace_hardirqs_on+0xbd/0x2c0 [ 346.899526] ? rcu_pm_notify+0xc0/0xc0 [ 346.903455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.909021] alloc_pages_current+0x10c/0x210 [ 346.913455] get_zeroed_page+0x14/0x50 [ 346.917361] legacy_validate+0x133/0x220 [ 346.921437] ? logfc+0x760/0x760 [ 346.924822] vfs_get_tree+0x144/0x5c0 [ 346.928649] do_mount+0x6f9/0x1e30 [ 346.932211] ? rcu_is_watching+0x8c/0x150 [ 346.936384] ? copy_mount_string+0x40/0x40 [ 346.940647] ? retint_kernel+0x10/0x10 [ 346.944566] ? copy_mount_options+0x1f0/0x380 [ 346.949096] ? copy_mount_options+0x202/0x380 [ 346.953624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.959189] ? copy_mount_options+0x285/0x380 [ 346.963710] ksys_mount+0x12d/0x140 [ 346.967362] __x64_sys_mount+0xbe/0x150 [ 346.971364] do_syscall_64+0x1b9/0x820 [ 346.975272] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.980650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 346.985596] ? trace_hardirqs_on_caller+0x2b0/0x2b0 03:33:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) init_module(&(0x7f0000000080)='mime_type:\x00', 0xb, &(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00') lseek(r2, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) connect(r3, &(0x7f0000000340)=@ax25={0x3, {"bb6ee1695376cb"}, 0xfffffffffffffff8}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0xf00000010000000, 0x0, 0xffffffffffffff39) accept4(r2, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000280)={0x80000001, 0x1f, 0x10000}) [ 346.990628] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 346.995655] ? recalc_sigpending_tsk+0x180/0x180 [ 347.000426] ? kasan_check_write+0x14/0x20 [ 347.004678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.009547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.014744] RIP: 0033:0x457099 [ 347.017947] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.036854] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000000000)='ppp1mime_typetrustedbdev\x00', 0x1) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000040)=0x1) [ 347.044576] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 347.051860] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 347.059148] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 347.066432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 347.073711] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000a 03:33:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x80) r1 = getpgrp(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000c40)={&(0x7f0000000280)={0x990, 0xa, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {0x5, 0x0, 0x9}, [@typed={0x8, 0x75, @pid=r1}, @nested={0x2e0, 0x29, [@generic="ff6c83819f17697ff75b12c950824ea29d267b7847b5952c667946969dddd4f14d5e675745bdcc7b87ba53fc1dbf8aab2cbf6144ea649f504ea9e70b1c8942195d56f3662c7e10c26e696be8399d01f2cb14c57ad19066cf449ace67e97b14b08ddc620fe50c9e5725d36135dd90a0f07a31a57d55faf780b4143d1f505ac261797553bc20655702c2d78b450ffef358c325c1279886", @generic="b7e0812d8f58519c31a1050d52b15ccac7236bf33830649c05924a5246e17c9702ba7b1924d744f7818ca81960642c9836462a2fe1d99f6a9dea8e88f8552b8d90deaece4af78f8e3e90ce97a3d6debdd259c65b8cf44edea8a3121edba333323142c2c63fe3a5554fe631016e152357d9f4aff5a9f8f108819b059902ec4456c4d9c7e9165683cb3dbd50693423f1644ef5cf63f798c28b8e5ed05e61365d70db02000d72b7944f26252854274dd476359e09c68bd4b89a0ed00780a86e02f491f0aa60e4a8ed0d9f52476abf2769c7ce217454fde4aeb1c0bb1ca1756a77149375ea9664d58b10", @generic="afe7937d2ef5b492c537815e94a07590ec5c3a70821179082cae88c1d90b4288ebc7cd2afcafd71cea22de294fb1218bea5e1b1ded701eced4f5e32e7b5eae179ef09bbbb319ec09f017944bf0022ab1da0885769808361d3074a0369404c1dd160f9dd1274f301e80cc982550ffcce9e5f3", @generic="f5f53dda03884cf553829c549c227906a6fd575c539cc4da60e3452d18e28a4be70f3e183777fe9c2d6e22ee4f8fc5042c68413bf7bcfef563b1089f9943d3a625f07cc9da5dadcda3794c821a1c8bab98a9f5d887d44cd2f5133802730d2b7da974fde44521d3241e906f1eea28665e065a412cae87451388189afdffec8ee20e64bf5129ee320c181801d96ef1f232688f93a9200f014b72a603d74e37e2271600d01b0751deb58806a10ffc1ea9daeef9b3a62da153d69e861319519612c5cb16c097ffd36c05b1c0079789b641f14ea6fb5f75e55e6020dc041196704fd0f0393d64b3780dc043"]}, @generic="310a474e244e451b23cd635c562b5a637424858907d05d", @nested={0x4fc, 0x84, [@typed={0x8, 0x4a, @pid=r2}, @generic="7cc122177c339794466609fda692447bc192123e1ff1d7e29b86bbf61a437a1d56e3db368c32874a3c853249ac767801a5ffec4c08be293b5671b69728254e4ebdee5b7034bc2d2a9bb92615a617976404715869a6dc372a55c02329710b2e7e2a37cd435882315383d1d982ce21f151dcd7ddc8b7eaec79c16be976620fcc61cd34699d0560b55f28719afa2a2523ad17c520c75bf0c0eced858f864a7dff133aca985a984e1baff329e6f1d240ba5ee0e7406bbe7bad842dc1", @generic="0101cbd466383c5f3501f5c079938beba5139e448483fe75e5110dae35d4aba651a28d59c72c7af4a4e5a66f9edf1622319f21346023bb808c026ee6797cef3856b43e2175dc35de5a39e383009e3cc57ef1cbd369cb122e117f88967118e3052b09dd84f8af42b3c0286be65d64d205b715a16c86015b032558d74a08", @generic="920662f79a3cc650910b1e8ed90d0a344a9f55f5ba45b7c4d180078a7fff542e89a2e34c14b070a11ddbd358c3e2117801d033ab9279083b148127b635", @generic="12f49777cd53a7a21497b91d3ab86b917f9b78fa76294225daad8854", @generic="6e3750a1568cc2040c7dc3e50a7df4ae7073e45d1a940bc4081f942f380bc3e3f0bfcf9c6c44a69295acadba9d45c2a8d16ef3333463f9e25d6e364c67667c6bda23873ab545549f06c7c4c695b5d7e3a8c5fa7c7c537bd3a796f7bb45f6b1f868b94365ed4b20baba53f90720a6801378ef98a58dc7713babc3b89a046004b0d235cdc1bc0ca62fc5a71f3fcb56bb2f1510735702d23dcb66802484", @generic="c8472a3c9ea93ce3af34225aafc950e2a9ae8d435d6f5883b3d1b8b65ca62caeef404c051b1617d2c2eb5c66c76e947ca5e6720464755e53d06278ff765913bafc55f31e261686c9053bc25fbdace97e87f094149a97631a5c66cb50ed2ad3d2e191dfcd586655e75efe520449417b5250b4059c5513aff568e044a819a52ea766ba9ff10e95e7d863473a731800118e9204e210ac744a0c5d7c81266f2687bb25b89dd0c0679e01ff4312ce5fbd0260a691fdd09e00d5", @generic="c7b4b14b253b2260a7d9344714ad1322c245ebe42be784392317244c2db7de3667d826c9ee08fd157abb6c0cc604d071acb9781398ebf055e5d41245400b1c15d7b5cd749f016280b79ecc1f2e4c326f4b279322a228d9f9e64b71feccf7643c37904029463f1b0063cc64d34c8e620d0a9b3a5d4568736e3218d984e22a01d36ae4fd38867882d1ef50885c25a106", @generic="e5d4bee6bfb36a958aad18e2cd2a949aa9c51a00bb19f6f70b34d42a6aee71eadfc737de062b3034c313ac0dac307f598fc941cf80d957e8e869c3209786bb1700dc873f20688bd39ca10ff01378c861294ddb8baaa5f87a8779c8f1af71143b44a9def24da45315cb3791e126d9f09b229c669fcedee19e272ac2d9192e53acbf2f40d4ac954405f3c952d9b633b7f27ef7a80ed84308c08369f2c04c8be422756b8c96d96c08adf0d005a8613fa7f821df8f03c613dc2089589adf12e3d99e4b824c82aa287b331a209a02f4c967066d8ad39a90923d4c38bd1f87b1b7353eb0e6a95a", @generic="08592c44873926c5a4a09a62f53ba93bf3d5e62b11f0a9f2a9af53f4b68d934447525a9af10787b40ea7f78b862deaf0093ec791c816f0844464f9a8c4af495c546664b887fb22a4cd900b75271e52314b4bdbe66ef8089647c82346e6b6f3ddbb5d47bc93820f853271149684941386b2ea236b142cd6d7860e13cc627b3fb99211ea9425587bc20265177cbf842c72ac7c201ef0df79de3a"]}, @nested={0x114, 0x51, [@generic="5dd76c52edd6a78e4c86539bdaa2b621f0a6cff28f853b13ba53b434cd75503cceb25348fd27b14e773cc9158ed105ec740d07b624403694c3e47b215f644a6ed9978bea70be6ee35201b07a2fcdad24b70e53eb987158d3b4a961986675febd19905b089eefa66f32c60514203015f9e5df3eb73886534b217e4e3915f14727c85ebf1e4e5457364431116681a6cc6152ae4830491f657f143561080bbff5044e80c46daa39c3c51216c127b2f21a9405bedf2bd674e995516b", @generic="06e74262ec937f4e9bc8b7a543651883e8c3240cf46a072ffa5637ffa8115f0305393fc071814c2814887b7236", @typed={0x14, 0x8e, @ipv6=@local}, @typed={0x14, 0x22, @ipv6=@remote}]}, @nested={0x18, 0x3a, [@typed={0x8, 0x13, @fd=r3}, @typed={0xc, 0xe, @str='nodev\x00'}]}, @typed={0x8, 0x67, @uid=r4}, @typed={0x8, 0x20, @u32=0x101}, @typed={0x8, 0x3c, @u32=0x3}, @nested={0x3c, 0x8a, [@typed={0x8, 0x54, @u32=0x3}, @typed={0x8, 0x90, @str='.\x00'}, @generic="4208a6d3f4032b0066a9426bd1ff7fb2774c3100849b95c8591cd204e3b0f7bc606e1f279270ac3a"]}]}, 0x990}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) socket(0x0, 0x3, 0x102) 03:33:47 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x7, 0x3, 0x80000001, 0x81, 0x7, 0x33b6, 0x3, 0x2, 0x2, 0x5, 0x5, 0x8, 0x10001}, {0x1000, 0x48, 0x1f, 0xaff, 0x3, 0x47, 0x0, 0x30e, 0x2, 0x80000000000000, 0x10001, 0x9, 0x40}, {0x1, 0x200, 0x7, 0x10001, 0x242f, 0x80, 0x3, 0x0, 0xdea, 0x674, 0x1, 0x2, 0x80}], 0x7fffffff}) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14}, 0x14) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000200), &(0x7f00000032c0)) 03:33:47 executing program 5 (fault-call:4 fault-nth:11): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0xc14) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) 03:33:47 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xfffffffffffffffe, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x8000000000005, &(0x7f0000000200)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000140)) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000380)) bpf$OBJ_GET_MAP(0x8, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 347.411000] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 347.457275] FAULT_INJECTION: forcing a failure. [ 347.457275] name failslab, interval 1, probability 0, space 0, times 0 [ 347.468571] CPU: 0 PID: 13901 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 347.477078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.486439] Call Trace: [ 347.489055] dump_stack+0x1c9/0x2b4 [ 347.492715] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.497933] ? do_syscall_64+0x1b9/0x820 [ 347.502019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.507416] should_fail.cold.4+0xa/0x11 [ 347.511507] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.516644] ? __kmalloc_track_caller+0x26e/0x720 [ 347.521516] ? rcu_is_watching+0x8c/0x150 [ 347.525675] ? trace_hardirqs_on+0xbd/0x2c0 [ 347.530011] ? rcu_pm_notify+0xc0/0xc0 [ 347.533908] ? find_held_lock+0x36/0x1c0 [ 347.538003] ? check_same_owner+0x340/0x340 [ 347.542352] ? rcu_note_context_switch+0x680/0x680 [ 347.547318] __should_failslab+0x124/0x180 [ 347.551575] should_failslab+0x9/0x14 [ 347.555394] __kmalloc_track_caller+0x2ae/0x720 [ 347.560085] ? vfs_parse_fs_string+0x1fd/0x2b0 [ 347.564687] ? legacy_parse_monolithic+0xde/0x1e0 [ 347.569555] kmemdup+0x24/0x50 [ 347.572769] legacy_parse_monolithic+0xde/0x1e0 [ 347.577458] ? cmp_flag_name+0x50/0x50 [ 347.581372] do_mount+0x6d8/0x1e30 [ 347.584928] ? rcu_is_watching+0x8c/0x150 [ 347.589090] ? trace_hardirqs_on+0xbd/0x2c0 [ 347.593436] ? copy_mount_string+0x40/0x40 [ 347.597697] ? copy_mount_options+0x5f/0x380 [ 347.602131] ? kmem_cache_alloc_trace+0x324/0x730 [ 347.607024] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.612591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.618145] ? copy_mount_options+0x285/0x380 [ 347.622659] ksys_mount+0x12d/0x140 [ 347.626297] __x64_sys_mount+0xbe/0x150 [ 347.630290] do_syscall_64+0x1b9/0x820 [ 347.634193] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 347.639567] ? syscall_return_slowpath+0x5e0/0x5e0 [ 347.645003] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 347.650026] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 347.655051] ? recalc_sigpending_tsk+0x180/0x180 [ 347.659810] ? kasan_check_write+0x14/0x20 [ 347.664058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.668913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.674102] RIP: 0033:0x457099 [ 347.677300] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.696201] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.703913] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 347.711186] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 347.718453] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 347.726239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 347.733508] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000b 03:33:47 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x64}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:47 executing program 4: r0 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x460000) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/71) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x4, 0x0, 0x8}, 0x4}}, 0x18) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/17) 03:33:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x89) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 03:33:47 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000140)=0x7fffffff) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x10000) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200) readahead(r3, 0x12d, 0xffffffffffff516c) r4 = dup3(r2, r2, 0x80000) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) dup3(r2, r2, 0x80000) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x5c6, 0x8001, 0x1ff, 0x7}, 0x1c, [0x100, 0x7, 0x2, 0x400, 0x9, 0x8000, 0xffff, 0x6, 0xff, 0x1000, 0x1000, 0xb39c, 0x864a, 0x3, 0x7, 0x0, 0x1ae, 0x53d, 0x6, 0x3, 0x2f49, 0x7, 0x1, 0x1, 0x9, 0x8000, 0xffffffff7fffffff, 0x9, 0x5, 0x4, 0x100, 0x1, 0x6, 0x800, 0x7, 0x1, 0x3, 0x4, 0xffff, 0x1, 0xffffffff00000001, 0x4, 0x1ff, 0x477a, 0x101, 0x3, 0xdd, 0x5, 0x3f, 0x4, 0x4daeabd4, 0xffffffff, 0x7, 0x6, 0x100000001, 0x100, 0x4, 0x0, 0x80000000, 0xffffffffffffffb8, 0xdd6b, 0x101, 0x3, 0x81d], [0x9, 0x1f, 0x0, 0x6, 0xaff0, 0x5, 0x2, 0x7fffffff, 0x5, 0x1, 0x3ff, 0x2, 0x9, 0x8, 0x2, 0x4, 0x800, 0x3f, 0x80, 0x7, 0x0, 0x7f5, 0xe49d, 0x1000, 0x3ff, 0xffffffff, 0x1, 0x2, 0x400, 0x100, 0x7, 0x8, 0x100, 0x3, 0x935, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x3ff, 0x7, 0x7, 0x3, 0x4, 0x0, 0x5, 0x50f, 0x359a, 0x1, 0x8be9, 0x7, 0xffffffffffffffff, 0x1, 0xfffffffffffffeff, 0x74, 0x3, 0x3, 0xffff, 0x1, 0x6, 0x9, 0x5], [0x1, 0x3, 0x1f5, 0xfffffffffffffffd, 0x0, 0xedb4, 0x4, 0x7, 0x100, 0x17, 0x3, 0x1, 0xe91c, 0x7fff, 0x9, 0x30000000000000, 0x17a, 0x800, 0x3, 0x80000001, 0x8000, 0x100000001, 0x2, 0x401, 0x8001, 0x7, 0x6, 0x745, 0x2, 0x1a, 0x9, 0x7ff, 0x434f, 0x800, 0x8, 0x5, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x100000001, 0x8, 0x1, 0x401, 0x9, 0x4, 0x4, 0x800, 0xfb2a, 0x200, 0x40, 0x100000001, 0xd90, 0xfffffffffffffffc, 0x8, 0x2, 0x7, 0x9da4, 0x20, 0x7, 0x6, 0x6, 0xffffffffffff7f3d, 0x5], [0x7f, 0x9, 0x1, 0x0, 0x8, 0x5, 0x200, 0x4, 0xffffffff, 0x1c03, 0x1ff8000000000, 0x3, 0x8, 0xff, 0x949, 0x647c, 0x100000000, 0x10001, 0x101, 0x3, 0x186, 0xfffffffffffffffd, 0x101, 0x4, 0x7, 0x1, 0xd91, 0x0, 0x1aa57318, 0x1da4ab15, 0x1000, 0x6, 0x0, 0x8a, 0x5, 0x101, 0x0, 0x2, 0x0, 0x3, 0x101, 0x1, 0x8, 0xe80b, 0x5f, 0x5, 0x1, 0xe2a, 0x100, 0xf9, 0x1, 0xe004, 0x7, 0x81, 0x0, 0x7, 0x9, 0xb7b0, 0x8, 0x81, 0x0, 0x6, 0x4, 0x101]}, 0x45c) 03:33:47 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getgroups(0x4, &(0x7f00000000c0)=[r7, r6, r5, r4]) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x5e367f9b65488e85, &(0x7f0000000100)={'trans=unix,', {[{@cache_none='cache=none'}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0xd428089}}]}}) close(r0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0xf) 03:33:47 executing program 5 (fault-call:4 fault-nth:12): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:47 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0xff00000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x10000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x7fff, 0xec, 0xffffffff80000001, 0x2, 0xa5}) 03:33:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0xa9f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200), 0xc) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xffe6) [ 347.982004] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 348.022567] FAULT_INJECTION: forcing a failure. [ 348.022567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.034424] CPU: 0 PID: 13951 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 348.042923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.052283] Call Trace: [ 348.054892] dump_stack+0x1c9/0x2b4 [ 348.058552] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.063769] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 348.068463] should_fail.cold.4+0xa/0x11 [ 348.072544] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.077669] ? kernel_text_address+0x79/0xf0 [ 348.082096] ? __kernel_text_address+0xd/0x40 [ 348.086590] ? unwind_get_return_address+0x61/0xa0 [ 348.091554] ? mark_held_locks+0x160/0x160 [ 348.095808] ? save_stack+0xa9/0xd0 [ 348.099441] ? save_stack+0x43/0xd0 [ 348.103075] ? kasan_kmalloc+0xc4/0xe0 [ 348.106959] ? __kmalloc_track_caller+0x14a/0x720 [ 348.111794] ? krealloc+0x65/0xb0 [ 348.115237] ? apparmor_fs_context_parse_param+0x1dd/0x490 [ 348.120852] ? security_fs_context_parse_param+0x54/0xb0 [ 348.126301] ? vfs_parse_fs_param+0x127/0x2c0 [ 348.130799] ? vfs_parse_fs_string+0x1d5/0x2b0 [ 348.135381] ? do_mount+0x658/0x1e30 [ 348.139115] ? ksys_mount+0x12d/0x140 [ 348.142944] ? __x64_sys_mount+0xbe/0x150 [ 348.147081] ? do_syscall_64+0x1b9/0x820 [ 348.151170] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.156559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.162095] ? should_fail+0x246/0xd86 [ 348.165983] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.171082] __alloc_pages_nodemask+0x365/0xd10 [ 348.175744] ? __kmalloc_track_caller+0x26e/0x720 [ 348.180596] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 348.185619] ? rcu_pm_notify+0xc0/0xc0 [ 348.189529] ? find_held_lock+0x36/0x1c0 [ 348.193610] ? trace_hardirqs_off+0xb8/0x2b0 [ 348.198009] cache_grow_begin+0x91/0x710 [ 348.202081] __kmalloc_track_caller+0x63d/0x720 [ 348.206786] ? vfs_parse_fs_string+0x1fd/0x2b0 [ 348.211362] ? legacy_parse_monolithic+0xde/0x1e0 [ 348.216195] kmemdup+0x24/0x50 [ 348.219374] legacy_parse_monolithic+0xde/0x1e0 [ 348.224031] ? cmp_flag_name+0x50/0x50 [ 348.227916] do_mount+0x6d8/0x1e30 [ 348.231468] ? rcu_is_watching+0x8c/0x150 [ 348.235617] ? trace_hardirqs_on+0xbd/0x2c0 [ 348.239927] ? copy_mount_string+0x40/0x40 [ 348.244165] ? copy_mount_options+0x5f/0x380 [ 348.248577] ? kmem_cache_alloc_trace+0x324/0x730 [ 348.253421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.258948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.264474] ? copy_mount_options+0x285/0x380 [ 348.268957] ksys_mount+0x12d/0x140 [ 348.272572] __x64_sys_mount+0xbe/0x150 [ 348.276547] do_syscall_64+0x1b9/0x820 [ 348.280437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.285788] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.290704] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 348.295717] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 348.300721] ? recalc_sigpending_tsk+0x180/0x180 [ 348.305467] ? kasan_check_write+0x14/0x20 [ 348.309704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.314555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.319744] RIP: 0033:0x457099 [ 348.322928] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.341826] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.349536] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 348.356804] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 348.364065] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 03:33:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) init_module(&(0x7f0000000080)='mime_type:\x00', 0xb, &(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00') lseek(r2, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) connect(r3, &(0x7f0000000340)=@ax25={0x3, {"bb6ee1695376cb"}, 0xfffffffffffffff8}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0xf00000010000000, 0x0, 0xffffffffffffff39) accept4(r2, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000280)={0x80000001, 0x1f, 0x10000}) 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000180), 0x4) 03:33:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100, 0x111000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8010}, 0xfffffe10, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x4008001) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @random="2e745db07264"}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000540)=""/246) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x4004743d, &(0x7f0000000cc0)=""/246) dup3(r4, r3, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) [ 348.371324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 348.378576] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000c 03:33:48 executing program 5 (fault-call:4 fault-nth:13): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x13a5662c}, 0x4) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0x80, 0xcafc]) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/144, &(0x7f0000000100)=0xffffffffffffff96) 03:33:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='teql0\x00', 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000680)=0x3, 0x8) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xaf50, 0x24000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3ff}, &(0x7f0000000240)=0x8) io_setup(0x20, &(0x7f0000000480)=0x0) io_submit(r5, 0x2, &(0x7f0000000640)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000004c0)="0762a894255e7dd0104ba463670a1e63ddc38c501a00d9b4518162f27cfeada852a41b44b5445cb764a11ef9d49426508a3c9695d09abd7325956430901e8133122099619700e117d1111f7e55e14366beeef42beb3bcb3b6d8e0d5217677fd542f9204be481f7353c768910f197e5d06aaa89717fb4b8b3d6e899ed4f1b9b0215e097c2cd21285b654126d1db178dda89c04a26ea2c13bcc9a5d3809d93212d85bca1b016e73695c1b2a72b0d4c99ffb8fd88bd89", 0xb5, 0x1, 0x0, 0x0, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7fff, r0, &(0x7f00000005c0)="0064c49ff34e89da7ebf6a502777b27087e1edd8ae709d9bd1b316c657c8693800afc73acac0a4ba659db39a32f2aaf2639c25ce57419cb59fff92", 0x3b, 0x1, 0x0, 0x2, r3}]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x9, @ipv4={[], [], @broadcast}, 0x7}}}, 0x84) sendmmsg(r2, &(0x7f0000000280), 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 03:33:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0xa0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0xf8}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x2, @empty, 0x9}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x1f, @mcast2, 0x8}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x3}], 0x74) [ 348.694763] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 348.730671] FAULT_INJECTION: forcing a failure. [ 348.730671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.742664] CPU: 0 PID: 13985 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 348.751186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.760555] Call Trace: [ 348.763192] dump_stack+0x1c9/0x2b4 [ 348.766847] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.772074] should_fail.cold.4+0xa/0x11 [ 348.776185] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.781311] ? rcu_is_watching+0x8c/0x150 [ 348.785484] ? graph_lock+0x170/0x170 [ 348.789306] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 348.794014] ? find_held_lock+0x36/0x1c0 [ 348.798119] ? check_same_owner+0x340/0x340 [ 348.802482] ? rcu_note_context_switch+0x680/0x680 [ 348.807431] ? legacy_parse_monolithic+0xde/0x1e0 [ 348.812300] __alloc_pages_nodemask+0x365/0xd10 [ 348.816993] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 348.822028] ? lock_downgrade+0x8f0/0x8f0 [ 348.826230] ? __kmalloc_track_caller+0x26e/0x720 [ 348.831086] ? rcu_is_watching+0x8c/0x150 [ 348.835225] ? trace_hardirqs_on+0xbd/0x2c0 [ 348.839551] ? rcu_pm_notify+0xc0/0xc0 [ 348.843474] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.849041] alloc_pages_current+0x10c/0x210 [ 348.853477] get_zeroed_page+0x14/0x50 [ 348.857382] legacy_validate+0x133/0x220 [ 348.861457] ? logfc+0x760/0x760 [ 348.864841] vfs_get_tree+0x144/0x5c0 [ 348.868666] do_mount+0x6f9/0x1e30 [ 348.872229] ? copy_mount_string+0x40/0x40 [ 348.876490] ? retint_kernel+0x10/0x10 [ 348.880407] ? copy_mount_options+0x1f0/0x380 [ 348.884932] ? copy_mount_options+0x1fa/0x380 [ 348.889454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.895011] ? copy_mount_options+0x285/0x380 [ 348.899530] ksys_mount+0x12d/0x140 [ 348.903182] __x64_sys_mount+0xbe/0x150 [ 348.907182] do_syscall_64+0x1b9/0x820 [ 348.911074] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.916428] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.921345] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 348.926358] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 348.931374] ? recalc_sigpending_tsk+0x180/0x180 [ 348.936118] ? kasan_check_write+0x14/0x20 [ 348.940352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.945202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.950391] RIP: 0033:0x457099 [ 348.953584] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.972487] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.980214] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 348.987486] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0xc0001) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000040)=0x5e, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:49 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) dup2(r0, 0xffffffffffffffff) [ 348.994756] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 349.002021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 349.009290] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000d 03:33:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") rt_sigtimedwait(&(0x7f0000000240)={0x1}, &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}, 0x8) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='gretap0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000380)=0x81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:49 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x100000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:49 executing program 1: mkdir(&(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x8, 0x101, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:33:49 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x20000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x8, 0xffffffffffff8000, 0x9, 0x0, 0x0, [{r0, 0x0, 0x3}, {r0, 0x0, 0x8}, {r0, 0x0, 0xffff}, {r0, 0x0, 0x2fe99c9a}, {r0, 0x0, 0x4}, {r0, 0x0, 0x1f}, {r0, 0x0, 0x1}, {r0, 0x0, 0x4}, {r0, 0x0, 0x6}]}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfffffffffdfffffd) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x10001, 0x100000800) 03:33:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="8500000099ff5b5bbc1c00000044000000e74000a1516a529a1e52b0539dc7f30a7e485fb92922260a30e8212f81b9962253ffffffffaaaac11aad82275b7b4625434004465cefa90e80e8e62de0a99368105910bdeceed90500d59586bb810ea5f57377c3c83bd2bcbe16ffb08f14e1bd3e45695ac9aacfbedac71e1e45b97071451edf126506ab66cf4aefb7ede1c26ee40e3683a9b9981d705fc0ddee242540822467e3485debe7d7624b9a699f0ed9ff6c0d0d7638615218d21095c390fe3e1aba0bb22d1093b377d4cc6690e901313f2d183ccfc8d4ff113107"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0x50, &(0x7f0000000300)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0xcd, &(0x7f00000002c0)="7686cc19d91a6ac81056165fadd9", &(0x7f00000003c0)=""/205, 0x8000}, 0x28) 03:33:49 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") write$binfmt_misc(r0, &(0x7f0000000380)={'syz1', "21f77fcc697b2d32148f0bb3fbb8603923d5f7242bca6217a3a7934e0087dff60e4e71a8e7ad242609eb9ac10444d06dff91cfed3a58c78dd447c0d8e210dedf4e903f38fc8e9c208e3bc63e912f2f4b78decc168704b76aa0927a593fa95a212a8e421e34ce9de644f7f7ff807009c54db07d86a942181b774d448ebf2281b72ae14a8e0ed42cc592cd7fe20be84683196b40b1fe3ca4be5656a6105c803dba0a22"}, 0xa6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'syz_tun\x00', 0x3}, 0x18) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) munlockall() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x84, 0x20, &(0x7f00000006c0)={@dev, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x80000000800000}, 0x20) close(r1) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000580)=""/202, &(0x7f0000000680)=0xca) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x6, 0x4, 0x1000, 0x80000000, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x5}}}, 0x84) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000300)={0x37, 0x6, 0x6, 0xbf53, 0x4, 0x6d4, 0x2}, 0xc) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032bbd7000fe25030000000c00020007000000000000000c00060003000000000000000c00050020000000000000000c00020008000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000040)) 03:33:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_bt(r0, 0x5411, &(0x7f0000000140)) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000240)=""/232) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) init_module(&(0x7f0000000080)='mime_type:\x00', 0xb, &(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00') lseek(r2, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) connect(r3, &(0x7f0000000340)=@ax25={0x3, {"bb6ee1695376cb"}, 0xfffffffffffffff8}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0xf00000010000000, 0x0, 0xffffffffffffff39) accept4(r2, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000280)={0x80000001, 0x1f, 0x10000}) 03:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) pipe2(&(0x7f0000000000), 0x84800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:49 executing program 1: r0 = memfd_create(&(0x7f0000000040)='vcan0\x00', 0x2) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x4d3, 0x400, 0x3}) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[]}}, 0x0) setsockopt(r1, 0x65, 0xec3, &(0x7f00000003c0)="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", 0x5f) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) listen(r2, 0x0) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000580)=@can={{}, 0x0, 0x0, 0x0, 0x0, "950348f704a06bcd"}, 0x10}}, 0x0) 03:33:49 executing program 5 (fault-call:4 fault-nth:14): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 03:33:49 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x5a01000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:49 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="2600000000000000f0cd98cbc600000000000000000000"]) dup3(r2, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400"], 0x1}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') 03:33:49 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0xfffffffffffffccc) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000180)={0x9, 0x7, 0x10001, 0x7, 'syz0\x00', 0x2}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) 03:33:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{}], 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0x3}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x4, 0xff, 0x3, r3}, 0x10) recvfrom(r1, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) getsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) connect(r1, &(0x7f0000000400)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x80000001, @mcast1, 0x4}}}, 0x84) accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) [ 349.659780] misc userio: No port type given on /dev/userio [ 349.673198] misc userio: The device must be registered before sending interrupts [ 349.681637] misc userio: The device must be registered before sending interrupts [ 349.691154] misc userio: No port type given on /dev/userio [ 349.698103] misc userio: The device must be registered before sending interrupts [ 349.758647] FAULT_INJECTION: forcing a failure. [ 349.758647] name failslab, interval 1, probability 0, space 0, times 0 [ 349.770605] CPU: 1 PID: 14068 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 349.780123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.789514] Call Trace: [ 349.792148] dump_stack+0x1c9/0x2b4 [ 349.795807] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.800765] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 349.801025] ? radix_tree_descend+0x13c/0x2e0 [ 349.813495] should_fail.cold.4+0xa/0x11 [ 349.817577] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.823152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.828289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.833837] ? graph_lock+0x170/0x170 [ 349.837656] ? find_held_lock+0x36/0x1c0 [ 349.841753] ? __lock_is_held+0xb5/0x140 [ 349.845849] ? check_same_owner+0x340/0x340 [ 349.850193] ? rcu_note_context_switch+0x680/0x680 [ 349.855155] __should_failslab+0x124/0x180 [ 349.859408] should_failslab+0x9/0x14 [ 349.863226] __kmalloc+0x2b2/0x720 [ 349.866778] ? lock_downgrade+0x8f0/0x8f0 [ 349.870951] ? __list_lru_init+0x151/0x840 [ 349.875205] __list_lru_init+0x151/0x840 [ 349.879289] ? list_lru_destroy+0x500/0x500 [ 349.883628] ? up_write+0x7b/0x220 [ 349.887189] ? up_read+0x110/0x110 [ 349.890738] ? down_read+0x1d0/0x1d0 [ 349.894470] ? init_wait_entry+0x1c0/0x1c0 [ 349.898726] ? prealloc_shrinker+0xe5/0x330 [ 349.903074] alloc_super+0x986/0xb20 [ 349.906804] ? destroy_unused_super.part.11+0x110/0x110 [ 349.912190] ? lock_downgrade+0x8f0/0x8f0 [ 349.916358] ? kasan_check_read+0x11/0x20 [ 349.920522] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 349.925122] ? kasan_check_write+0x14/0x20 [ 349.929383] ? do_raw_spin_lock+0xc1/0x200 [ 349.933642] sget_userns+0x276/0x860 [ 349.937374] ? get_anon_bdev+0xc0/0xc0 [ 349.941276] ? vfs_get_super+0x270/0x270 [ 349.945366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.950941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.956489] ? ns_capable_common+0x13f/0x170 [ 349.960912] ? get_anon_bdev+0xc0/0xc0 [ 349.964815] sget+0x10b/0x150 [ 349.967939] ? ovl_show_options+0x550/0x550 [ 349.972276] mount_nodev+0x38/0x120 [ 349.975924] ? ovl_own_xattr_set+0x10/0x10 [ 349.980183] ovl_mount+0x34/0x40 [ 349.983570] legacy_get_tree+0x131/0x460 [ 349.987650] vfs_get_tree+0x1cb/0x5c0 [ 349.991481] do_mount+0x6f9/0x1e30 [ 349.995033] ? rcu_is_watching+0x8c/0x150 [ 349.999205] ? copy_mount_string+0x40/0x40 [ 350.003462] ? retint_kernel+0x10/0x10 [ 350.007370] ? copy_mount_options+0x1a1/0x380 [ 350.011877] ? copy_mount_options+0x1a4/0x380 [ 350.016391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.021940] ? copy_mount_options+0x285/0x380 [ 350.026448] ksys_mount+0x12d/0x140 [ 350.030088] __x64_sys_mount+0xbe/0x150 [ 350.034084] do_syscall_64+0x1b9/0x820 [ 350.037982] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 350.043359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.048306] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 350.053340] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 350.058370] ? recalc_sigpending_tsk+0x180/0x180 [ 350.063150] ? kasan_check_write+0x14/0x20 [ 350.067409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.072284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.077480] RIP: 0033:0x457099 [ 350.080693] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.099608] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x400000) read(r1, &(0x7f0000000300)=""/28, 0xffffffffffffff96) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x5, 0xf63, 0xfffffffffffffffc, 0x6, 0x6, 0x400, 0x9, 0x0, 0x80, 0x2}, 0xb) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='port1\x00', r1}, 0x10) ioctl$TIOCSCTTY(r2, 0x540e, 0x93) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000002c0)) 03:33:50 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="2600000000000000f0cd98cbc600000000000000000000"]) dup3(r2, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400"], 0x1}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') 03:33:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x4b, &(0x7f000012e000)}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{0xd000, 0x4, 0xa, 0x2d4, 0x8000, 0x9, 0x4, 0x80000001, 0x9f57, 0x3, 0x7f, 0x9}, {0xd000, 0x4, 0xd, 0x101, 0x0, 0x25, 0x101, 0x81, 0x7, 0xff, 0x1ff, 0x80000000}, {0x5000, 0x7002, 0x9, 0x49f, 0xdd, 0x9, 0x8000, 0xffffffffffffff7f, 0x200, 0x1, 0xffffffffffffff80, 0xc24}, {0x1000, 0x3000, 0xa, 0x8, 0x10000, 0x10000, 0x7e, 0xffffffffffffffff, 0x6, 0x6, 0x0, 0x2c}, {0x3000, 0x7002, 0xc, 0x20, 0x1000, 0x6, 0x80000000, 0x400, 0x1ff, 0x81, 0x4, 0x8}, {0x7000, 0x0, 0xf, 0x6, 0xabb7, 0x0, 0x9, 0xffffffffffffd339, 0x9, 0x5, 0x7, 0x5}, {0x0, 0x0, 0xf, 0x5b, 0x6, 0x200, 0x80000000, 0x9, 0xfffffffffffffffe, 0x5b, 0x9, 0xffffffffffffff11}, {0xf000, 0xf000, 0xa, 0x3, 0xd7, 0x10001, 0xe4, 0x9, 0x4, 0x4, 0x2, 0x2}, {0x0, 0x1000}, {0x4, 0x5000}, 0x40000000, 0x0, 0x2000, 0x50, 0x5, 0xd800, 0x10000, [0x3, 0x40, 0x101, 0xcdf]}) mount$9p_virtio(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x50, &(0x7f0000000340)={'trans=virtio,', {[{@cache_mmap='cache=mmap'}, {@posixacl='posixacl'}, {@cache_mmap='cache=mmap'}, {@uname={'uname', 0x3d, 'md5sum'}}, {@posixacl='posixacl'}, {@privport='privport'}]}}) recvmsg$kcm(r1, &(0x7f0000000d40)={&(0x7f0000000800)=@l2, 0x80, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/5, 0x5}], 0x3, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x299, 0x80000) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000480)={0x3, 0x0, [{}, {}, {}]}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xf102, 0x4c32e0d9, 0x80000000, 0x100000001}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000440)={r4, 0x80000001, 0x4, 0x3}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="5b54e57488e4cd12cae366d9d7f037fe831d410bfd8d5b888b70b9784c618147924791ef0b0e21a05ffbbceb5bd32304e19555e32f5cb6c4426ec7ea3b1d869a4d09f3ad14a7b9d81afdb652aa0a577e79006120288e666c62fc44d74a723eb9504d7164d359d45db769d6f4e94c3b7b567578b1da2a93a9203f6e78c1b0924dfcfe949387a365cd160dc86e9ef8c79736ea79e17859bb892d56f67680bc847a2176b73c818ed81fa8dbd27a79fe4404dff18a5a98b8c1ae11962d6c0af9c4842d8df91ec04c7f448a2433e6df877953436705fc1c8bc97fba6bde21601a52d75e1dfc", &(0x7f0000000040)="735b5ff831424cbdf18481e64a50d991f48baf95375aba24d0cb8de2ef21054391d1619d40a7c212992a875620de4b4217003b9eaec754ab4e658b828612491162c0f6e5e8d42618029b7348b093a8dee8c0adb04961edee997c2b593cb1d0958058a1540e249d5c6d55e2db80b4c8e78400c02293b16c749ec9da34c31f171955e5c5af8aab33d9c7e112c15861a47d6737035a", 0x1}, 0x20) 03:33:50 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000006c0), 0x2, &(0x7f0000000040)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='tunl0\x00') ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) 03:33:50 executing program 5 (fault-call:4 fault-nth:15): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 350.107323] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 350.114580] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 350.121841] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 350.129108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 350.136371] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000e 03:33:50 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x6400000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x6000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) close(r1) 03:33:50 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x4016, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240), &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000140), &(0x7f0000000100)='.', &(0x7f00000000c0)='hugetlbfs\x00', 0x3002480, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) close(r0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) [ 350.285996] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 350.362904] FAULT_INJECTION: forcing a failure. [ 350.362904] name failslab, interval 1, probability 0, space 0, times 0 [ 350.374242] CPU: 1 PID: 14112 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 350.382744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.392112] Call Trace: [ 350.394732] dump_stack+0x1c9/0x2b4 [ 350.398388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.403597] ? kasan_check_read+0x11/0x20 [ 350.407761] ? rcu_is_watching+0x8c/0x150 03:33:50 executing program 0: syz_mount_image$ntfs(&(0x7f0000000980)='ntfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c80)={[{@gid={'gid'}, 0x52}]}) r0 = memfd_create(&(0x7f0000000000)='ntfs\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @mcast2, 0xda0}, r1}}, 0x30) [ 350.411934] should_fail.cold.4+0xa/0x11 [ 350.416023] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.421158] ? is_bpf_text_address+0xd7/0x170 [ 350.425688] ? kernel_text_address+0x79/0xf0 [ 350.430127] ? unwind_get_return_address+0x61/0xa0 [ 350.435093] ? __save_stack_trace+0x8d/0xf0 [ 350.439431] ? graph_lock+0x170/0x170 [ 350.443252] ? find_held_lock+0x36/0x1c0 [ 350.447331] ? __lock_is_held+0xb5/0x140 [ 350.451426] ? check_same_owner+0x340/0x340 [ 350.455762] ? kmem_cache_alloc_node_trace+0x219/0x720 03:33:50 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="2600000000000000f0cd98cbc600000000000000000000"]) dup3(r2, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400"], 0x1}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') [ 350.461059] ? rcu_note_context_switch+0x680/0x680 [ 350.466017] __should_failslab+0x124/0x180 [ 350.470276] should_failslab+0x9/0x14 [ 350.474094] kmem_cache_alloc_trace+0x2b5/0x730 [ 350.478793] ? __kmalloc_node+0x33/0x70 [ 350.482789] ? __kmalloc_node+0x33/0x70 [ 350.486811] ? rcu_read_lock_sched_held+0x108/0x120 [ 350.491859] __memcg_init_list_lru_node+0x185/0x2d0 [ 350.496897] ? kvfree_rcu+0x20/0x20 [ 350.500544] ? __kmalloc_node+0x47/0x70 [ 350.504551] __list_lru_init+0x4d6/0x840 [ 350.508641] ? list_lru_destroy+0x500/0x500 [ 350.512999] ? up_write+0x7b/0x220 [ 350.516565] ? up_read+0x110/0x110 [ 350.520123] ? down_read+0x1d0/0x1d0 [ 350.523862] ? init_wait_entry+0x1c0/0x1c0 [ 350.528117] ? prealloc_shrinker+0xe5/0x330 [ 350.532478] alloc_super+0x986/0xb20 [ 350.536221] ? destroy_unused_super.part.11+0x110/0x110 [ 350.541643] ? lock_downgrade+0x8f0/0x8f0 [ 350.545825] ? kasan_check_read+0x11/0x20 [ 350.549987] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 350.554580] ? kasan_check_write+0x14/0x20 [ 350.558824] ? do_raw_spin_lock+0xc1/0x200 [ 350.563109] sget_userns+0x276/0x860 [ 350.566843] ? get_anon_bdev+0xc0/0xc0 [ 350.570747] ? vfs_get_super+0x270/0x270 [ 350.574902] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.580467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.586012] ? ns_capable_common+0x13f/0x170 [ 350.590436] ? get_anon_bdev+0xc0/0xc0 [ 350.594335] sget+0x10b/0x150 [ 350.597457] ? ovl_show_options+0x550/0x550 [ 350.601794] mount_nodev+0x38/0x120 [ 350.605446] ? ovl_own_xattr_set+0x10/0x10 [ 350.609705] ovl_mount+0x34/0x40 [ 350.613098] legacy_get_tree+0x131/0x460 [ 350.617185] vfs_get_tree+0x1cb/0x5c0 [ 350.621005] do_mount+0x6f9/0x1e30 [ 350.624553] ? rcu_is_watching+0x8c/0x150 [ 350.628718] ? trace_hardirqs_on+0xbd/0x2c0 [ 350.633060] ? copy_mount_string+0x40/0x40 [ 350.637320] ? copy_mount_options+0x5f/0x380 [ 350.641747] ? kmem_cache_alloc_trace+0x324/0x730 [ 350.646615] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.652177] ? _copy_from_user+0xdf/0x150 [ 350.656347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.661899] ? copy_mount_options+0x285/0x380 [ 350.666423] ksys_mount+0x12d/0x140 [ 350.670067] __x64_sys_mount+0xbe/0x150 [ 350.674059] do_syscall_64+0x1b9/0x820 [ 350.677963] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 350.683344] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.688293] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 350.693327] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 350.698353] ? recalc_sigpending_tsk+0x180/0x180 [ 350.703127] ? kasan_check_write+0x14/0x20 [ 350.707395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.712263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.717463] RIP: 0033:0x457099 [ 350.720674] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.739580] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.747313] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 350.754600] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:50 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80100, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1000, 0x20001) connect$nfc_llcp(r1, &(0x7f00000018c0)={0x27, 0x1, 0x1, 0x1, 0x31b4, 0x2, "60a62524b4f7cc5976e7c11cd44a84b54134db748b03e1c539eeead434551dc781a2a5941bc543eaf4fc37e1c3abc94badcaf5db2f9ce3d4282a23d292e272", 0x21}, 0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40040, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0x8, 0x3, r2}) socketpair$unix(0x1, 0x401, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6}) r7 = eventfd(0x0) pwritev(r5, &(0x7f0000001800)=[{&(0x7f0000000200)="e12be7b94eb519e49a7c4ca2c8d36632833ca22524f0ef2fd1c91f4f1eaaf844958b3d615aea11fffa7f9a667ee7d7b72a3f66c6939e033ae01e6cd883559bca24c9991e5724fa549ab90ce598788fddf5c7d6b0f45208790d3ae05628005b27bb80bfd991f7f8f56d7d1b63617bf8f63a7dba602b4b454fee05bf8ef847075abbe3eae481ae9d3bc5a4d10e615f14f8e2f803ba4619eaeb2003e0f12a194dd961ed7fac", 0xa4}, {&(0x7f00000002c0)="dcaef7c02c70954e08e37b74bfff8307fc88802fb8e6b5b547390c6a2d5b1f5316544b2ef8957d0a7b5e3601cb82e5c5a9110bbd11860b7ef2df974999962ea3b2f46728d1a135816a182dfd19706421dfd9e45bec134af8e1df0b41f1ee5f26a127a9801f8f194efa72015874dccced2188e5b6dfa4a1213c111a573f877eee35f7910369", 0x85}, {&(0x7f0000000380)="a7542f4123661ba6fa1c38f19a09cf860b446b58a9fa7a101ebeefd4c036694e1e3977b98b080eb69a6a50ac8dfb0558a5280d0e0d69c44732063ed24211870504308a226bb6fdee1bd5c716ce15dff1024fb9dd227601ffc07e510811db291b2df4c2fbae51c6e01538d64f31f26497a63a38898e464e1a7a91a830dafad2164b20c2ddee9a25e40a147fad49d6a28e1f8fd6a9a4c66fa1d2d34086c8f898dfbbcd88f330dad37db446dc372082c7d4c5", 0xb1}, {&(0x7f0000000440)="54414ebca574ed61347c82afdd200cff25e33e0c3e531aed99dbdd1b055887606c1025aef8e27796e45910b8778dfed378f501e07fb60e7b44f05db1c83de0336a30aa351e1081e2096bfac173dccf04b3a64795f64ced6cb2d000e7617e65cd8e56a6d69fa9058c3e2b3f49c879b18b8f95bb1d54854573b800500d30492131084021f25116b6f275616137dce2cb3233fd58f419fc268df0ec09cb9a8f6dec", 0xa0}, {&(0x7f0000000500)="fce89a6f2e94b6ec961b42b57f70c1793ce0deeb298b6676f340f78de152d34c1b7bce45bce8a982428c6d10e87de14ec727b471fe59db55fad1ccdf9b6fe5921a51872fe20fc4cf98c89d4937d5f00cbf90d892cf7f0f00f29a9eb86d74df770f425817eb988096c0b6beeefbe66e2b3adda855de8c4dc95c10cb9fb84aea691bbb3514475e2e29e5fe81cc475fef1722377811307d9a0e57f184f82c2e98491735cae50611c1fbd910ff3eabb64ff5534729cd926914eaeda00b25699be249f98a5d75be0ee751", 0xc8}, {&(0x7f0000000600)="7b7e3ef37786af8304f19f89232128d3baa279efbc5c44fe066502d24e4b8031a2950ed52d437b37cd969717839d49f6390bb9b1ec8decaa008f504a9eb01fcad1915298fcc319208c0938643cf7db869a5f79ebd198facfb3ab5ff4b4952db8b119e9618ae685cb7bd3b7ed02276b997c1e52422880cd6587b310e0e05a2b5cee4b526cd3aef0199efef7eeb5d1", 0x8e}, {&(0x7f00000006c0)="6cadd6f0cc3ee1e0a3aaa82b2ee65c9a66be3abf8c4818a748defc173dfaef477c413588a6cb85d92fd95f63157cd3a98e526fcf73303ae25d1d01bc4975d52b710ecf91eaf577ffd9281579ca257a7729060215fe5d11010588d995c1c350a093ed040b9bc8348b010eebc4c80dac0a4b4ddaee884da44b0e9a", 0x7a}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="73c09fb83d60aa3825bbfdad4a31b262e807a4815cf262f5f4e3f01014a70f77c3d6292bd956b836e1ed934214dabe0fcc6946fdfa1dcf3321c24d32099bd57df34d81332e729200ed25d85d25ad7128cac02f51cbf271e5114b48be1bbe5bf4c856057711a7f162ab3626ef296c4824", 0x70}, {&(0x7f00000017c0)="cb9db3a418285ca4b08d213aba0c6870606dff650a89957a8eddf81a3b72eb5c11547afc4980ddc8f548", 0x2a}], 0xa, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x0, 0x3}) 03:33:50 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x5a01}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x100) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x6af, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time, 0x0, {0x0, 0x80000000}, 0x0, 0x1000000, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) pipe2(&(0x7f0000000000), 0x800) [ 350.761882] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 350.769173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 350.776455] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000000f 03:33:50 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair(0x14, 0x0, 0x0, &(0x7f00000001c0)) 03:33:50 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x9, 0x6, 0x9, 0x2, 0x4e, 0x1, 0x1, 0x602, 0x0, 0x90}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fstat(0xffffffffffffffff, &(0x7f0000000180)) preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 03:33:50 executing program 5 (fault-call:4 fault-nth:16): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, &(0x7f0000000480)) sendto$inet(r1, &(0x7f0000000080)="2174c18a6e689a6a50b22b5c8725891112692a298771d6a3540f69baec26d4ca4a779e885affe4bb142f76fadcf4440e06d40276a514453c149572de9009ad6a30e1d3d69e8a2c73b41d7fdc90c2b1930cc0a66ed3b54c3434e8281dc233b32eeb454f586a983a017aec815b05a9553db1e3a36e04e13fddc9e3c18550ea14ef81bf206aa0e7525a351c1def1e853113c7c7d3fce54040c80b9c6c7e9d365ad676eece5dff60bddc4ce9219416d0adaf0c", 0xb1, 0x44, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) io_submit(r2, 0x2, &(0x7f0000000c00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000740), 0x0, 0x0, 0x0, 0xfdfe}]) r3 = semget(0x1, 0x6, 0x300) semop(r3, &(0x7f0000000040)=[{0x0, 0x8, 0x1000}, {0x1, 0x80000000, 0x1000}, {0x4, 0x1}], 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 350.966732] irq bypass consumer (token 00000000a60341ff) registration fails: -16 03:33:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @broadcast}, &(0x7f0000000400)=0xc) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000380)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x6) dup2(r2, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="57e91a267f0c44d6bf7d9944f42cd609ec627a0069e4cd6a5a807b9fba7baf23a5b302902d7983c9fd3500127a443b7487a94ba23268ab7a5495a7389c53599eedb95eb1c0ee0bafbb62101aa0fdb5e0bf5ae92464ae70d8aaf18712736df19349dea9e8a190230d662bf8225cc21ce39a4b9e8a9dcb8d14b81b39868a637588abafe22be0564ef4863f30e6c21da85f1688d8fa52371ed21a56b2339f9b4529e6cec25a5cdba486db372f3f3d3278d27ee9a8b97e976bbb6cf8807ef7677483ceaa0967e267ddc69de292c82cd0f1e9021f4003bfa6cc7ae354b8d22e0b12636031e0ba9fa81384230f6ac5416a", 0xee, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff) keyctl$negate(0xd, r3, 0x401, r4) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10000000000001, r5) 03:33:51 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x200000005, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000140)=""/186) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5eb, 0x0, 0x100}, &(0x7f0000000580)=0x14) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x120e, 0x80) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x14, 0x0, 0x5, 0x300, 0x70bd26, 0x25dfdbff, {0x2}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000800)=""/205, &(0x7f0000000600)=0xcd) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) mmap(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x2000000, 0x100011, 0xffffffffffffffff, 0x0) r4 = geteuid() getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) fchown(r0, r4, r5) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000005c0)={r2, 0x7}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000780)={0xab92, 0x0, 0x0, 0x0, 0x2, 0x3ff}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x1, 0x100, 0x7, 0x0, 0x7e58, 0xb00, 0x8, 0x3, 0x400, 0x5, 0x3ff, 0x0, 0x0, 0x3f, 0x5, 0x2, 0x6, 0x7, 0x9, 0x7, 0x0, 0xc, 0x1, 0x9, 0x50c58dcb, 0x3, 0x3, 0x0, 0x2, 0x0, 0x3f, 0x5, 0x3f, 0xca88, 0x10000, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x4, 0x3, 0x7, 0x101, 0x6, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x3) accept4$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x0) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) setgid(r5) 03:33:51 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000000b540)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4600000000000001000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000"], 0xfffffff7) fcntl$setstatus(r0, 0x4, 0x800) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0xfe0f}, 0x18) 03:33:51 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={&(0x7f00000000c0)=""/196, 0xc4}) ptrace$setregset(0x420b, r2, 0x0, &(0x7f0000000040)={&(0x7f0000000040)}) 03:33:51 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) r1 = getpid() r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) fcntl$setown(r2, 0x8, r1) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r2, 0x8038550a, &(0x7f00000001c0)) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x2, 0x4, {0xa, 0x4e22, 0x400, @mcast2, 0x3}}}, 0x32) 03:33:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000005, 0xb2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x15}, {0xa, 0x4e20, 0x1, @loopback, 0x8}, 0x2403, [0xfffffffffffffffb, 0x10001, 0x3, 0xffff, 0x8, 0x8, 0x3, 0x6]}, 0x5c) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="4fa7af5cbf0269b93d1192473af1ad4944e513abcfa77e2287fed6218aacffc049286fe3a03ed14ca7fad19112f3ddeb4812") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:51 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040400000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000040000000000000000000000000c090a020c", 0x7d}], 0x0, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x6080, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x8001, 0x4) [ 351.248209] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000009c0)={0x20, 0x26, 0x5, 0x0, 0x0, {0x3}, [@typed={0xc, 0x1, @u64}]}, 0x20}}, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffffa, 0x3) [ 351.314244] FAULT_INJECTION: forcing a failure. [ 351.314244] name failslab, interval 1, probability 0, space 0, times 0 [ 351.325673] CPU: 0 PID: 14185 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 351.334220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.343578] Call Trace: [ 351.346208] dump_stack+0x1c9/0x2b4 [ 351.349866] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.355084] ? __kernel_text_address+0xd/0x40 [ 351.359609] ? unwind_get_return_address+0x61/0xa0 [ 351.364569] should_fail.cold.4+0xa/0x11 [ 351.368665] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.373803] ? save_stack+0x43/0xd0 [ 351.377455] ? kasan_kmalloc+0xc4/0xe0 [ 351.381361] ? kmem_cache_alloc_trace+0x152/0x730 [ 351.386224] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 351.391430] ? __list_lru_init+0x4d6/0x840 [ 351.395686] ? alloc_super+0x986/0xb20 [ 351.399595] ? graph_lock+0x170/0x170 [ 351.403415] ? legacy_get_tree+0x131/0x460 [ 351.407673] ? vfs_get_tree+0x1cb/0x5c0 03:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast2}}, 0x0, 0x1}, &(0x7f00000002c0)=0x90) dup3(r2, r0, 0x80000) set_tid_address(&(0x7f0000000300)) [ 351.411670] ? do_mount+0x6f9/0x1e30 [ 351.415407] ? ksys_mount+0x12d/0x140 [ 351.419224] ? __x64_sys_mount+0xbe/0x150 [ 351.423398] ? find_held_lock+0x36/0x1c0 [ 351.427487] ? __lock_is_held+0xb5/0x140 [ 351.431587] ? check_same_owner+0x340/0x340 [ 351.435937] ? rcu_note_context_switch+0x680/0x680 [ 351.440898] __should_failslab+0x124/0x180 [ 351.445175] should_failslab+0x9/0x14 [ 351.448996] kmem_cache_alloc_trace+0x2b5/0x730 [ 351.453684] ? __kmalloc_node+0x33/0x70 [ 351.457675] ? __kmalloc_node+0x33/0x70 [ 351.461670] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.466718] __memcg_init_list_lru_node+0x185/0x2d0 [ 351.471758] ? kvfree_rcu+0x20/0x20 [ 351.475409] ? __kmalloc_node+0x47/0x70 [ 351.479413] __list_lru_init+0x4d6/0x840 [ 351.483508] ? list_lru_destroy+0x500/0x500 [ 351.487857] ? up_write+0x7b/0x220 [ 351.491415] ? up_read+0x110/0x110 [ 351.494974] ? down_read+0x1d0/0x1d0 [ 351.498708] ? init_wait_entry+0x1c0/0x1c0 [ 351.502958] ? prealloc_shrinker+0xe5/0x330 [ 351.507306] alloc_super+0x986/0xb20 03:33:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = dup2(r4, r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="b95d030000b800800000ba000000000f302e0f890038000066ba4000b840f90000efc4814d5863ab3e8197fd4300008fbc0000673667674d0fc79bc2c1f8640f323e400f0766baa000b000eeb9a5030000b89e4a0000ba000000000f30", 0x5d}], 0x1, 0x0, &(0x7f0000000500), 0x0) [ 351.511044] ? destroy_unused_super.part.11+0x110/0x110 [ 351.516423] ? lock_downgrade+0x8f0/0x8f0 [ 351.520597] ? kasan_check_read+0x11/0x20 [ 351.524763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 351.529364] ? kasan_check_write+0x14/0x20 [ 351.533608] ? do_raw_spin_lock+0xc1/0x200 [ 351.537861] sget_userns+0x276/0x860 [ 351.541582] ? get_anon_bdev+0xc0/0xc0 [ 351.545490] ? vfs_get_super+0x270/0x270 [ 351.549575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 351.555158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.560726] ? ns_capable_common+0x13f/0x170 [ 351.565168] ? get_anon_bdev+0xc0/0xc0 [ 351.569073] sget+0x10b/0x150 [ 351.572203] ? ovl_show_options+0x550/0x550 [ 351.576539] mount_nodev+0x38/0x120 [ 351.580224] ? ovl_own_xattr_set+0x10/0x10 [ 351.584473] ovl_mount+0x34/0x40 [ 351.587858] legacy_get_tree+0x131/0x460 [ 351.591944] vfs_get_tree+0x1cb/0x5c0 [ 351.595790] do_mount+0x6f9/0x1e30 [ 351.599342] ? copy_mount_string+0x40/0x40 [ 351.603584] ? retint_kernel+0x10/0x10 [ 351.607486] ? copy_mount_options+0x1a1/0x380 [ 351.612001] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 351.616858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.622401] ? copy_mount_options+0x285/0x380 [ 351.626906] ksys_mount+0x12d/0x140 [ 351.630569] __x64_sys_mount+0xbe/0x150 [ 351.634561] do_syscall_64+0x1b9/0x820 [ 351.638463] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 351.644225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.649181] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 351.654213] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 351.659233] ? recalc_sigpending_tsk+0x180/0x180 [ 351.663997] ? kasan_check_write+0x14/0x20 [ 351.668242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.673098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.678310] RIP: 0033:0x457099 [ 351.681507] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.700433] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.708159] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 03:33:51 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x15a}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 351.715451] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 351.722723] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 351.729992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 351.737261] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000010 [ 351.759720] XFS (loop1): Mounting V4 Filesystem [ 351.813722] XFS (loop1): totally zeroed log [ 351.832304] XFS (loop1): Failed to read root inode 0x400000000000d88, error 22 03:33:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) uselib(&(0x7f00000003c0)='./file0\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-'}, 0x28, 0x2) r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000440)={0x4, [0x81, 0x53e5, 0x5, 0x7]}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x244000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340), 0x0, 0x1009}}, 0x20) close(r1) 03:33:51 executing program 5 (fault-call:4 fault-nth:17): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:51 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x8}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="03097600000000d10000000003da99b13c8fa711ab3fdb83906285812e24ac69020093e70800f100000000"], &(0x7f0000000200)=0xa) r1 = socket(0x1e, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x118) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'wlc\x00'}, 0x2c) socket(0x0, 0x5, 0x200) close(r1) r2 = dup(0xffffffffffffffff) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x1}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8faf2d68d66efbafc0cb80000ef6666640f01c9d339baf80c66b8c2105c8b66efbafc0cb88700eff4f2a6ead536380066b9d90a00000f32b83e008ec067260f013f", 0x46}], 0x1, 0x49, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x100000001, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffff9}], 0x1) syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x4a1, 0x484000) 03:33:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101402) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x9, 0x1000}, 'port1\x00', 0x90, 0x2, 0x40, 0x1, 0x9, 0xc8, 0xb, 0x0, 0x1, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000540)={{0xffffffe9, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 352.007929] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x4000000000, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() ioctl$int_out(r2, 0x5462, &(0x7f0000000000)) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$KDSETLED(r2, 0x8982, 0x0) [ 352.071906] FAULT_INJECTION: forcing a failure. [ 352.071906] name failslab, interval 1, probability 0, space 0, times 0 [ 352.083297] CPU: 1 PID: 14267 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 352.091805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.101175] Call Trace: [ 352.103796] dump_stack+0x1c9/0x2b4 [ 352.107450] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.112674] ? __kernel_text_address+0xd/0x40 [ 352.117213] ? unwind_get_return_address+0x61/0xa0 03:33:52 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x1000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 352.122185] should_fail.cold.4+0xa/0x11 [ 352.126274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.131404] ? save_stack+0x43/0xd0 [ 352.135049] ? kasan_kmalloc+0xc4/0xe0 [ 352.138958] ? kmem_cache_alloc_trace+0x152/0x730 [ 352.143812] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 352.148991] ? __list_lru_init+0x4d6/0x840 [ 352.153215] ? alloc_super+0x986/0xb20 [ 352.157106] ? graph_lock+0x170/0x170 [ 352.160928] ? legacy_get_tree+0x131/0x460 [ 352.165192] ? vfs_get_tree+0x1cb/0x5c0 [ 352.169190] ? do_mount+0x6f9/0x1e30 [ 352.172920] ? ksys_mount+0x12d/0x140 [ 352.176738] ? __x64_sys_mount+0xbe/0x150 [ 352.180906] ? find_held_lock+0x36/0x1c0 [ 352.184994] ? __lock_is_held+0xb5/0x140 [ 352.189091] ? check_same_owner+0x340/0x340 [ 352.193440] ? rcu_note_context_switch+0x680/0x680 [ 352.198401] __should_failslab+0x124/0x180 [ 352.202673] should_failslab+0x9/0x14 [ 352.206499] kmem_cache_alloc_trace+0x2b5/0x730 [ 352.211194] ? __kmalloc_node+0x33/0x70 [ 352.215193] ? __kmalloc_node+0x33/0x70 [ 352.219206] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.224259] __memcg_init_list_lru_node+0x185/0x2d0 [ 352.229302] ? kvfree_rcu+0x20/0x20 [ 352.232952] ? __kmalloc_node+0x47/0x70 [ 352.236959] __list_lru_init+0x4d6/0x840 [ 352.241046] ? list_lru_destroy+0x500/0x500 [ 352.245397] ? up_write+0x7b/0x220 [ 352.248962] ? up_read+0x110/0x110 [ 352.252517] ? down_read+0x1d0/0x1d0 [ 352.256248] ? init_wait_entry+0x1c0/0x1c0 [ 352.260502] ? prealloc_shrinker+0xe5/0x330 [ 352.264848] alloc_super+0x986/0xb20 [ 352.268582] ? destroy_unused_super.part.11+0x110/0x110 [ 352.273964] ? lock_downgrade+0x8f0/0x8f0 [ 352.278137] ? kasan_check_read+0x11/0x20 [ 352.282311] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 352.286909] ? kasan_check_write+0x14/0x20 [ 352.291163] ? do_raw_spin_lock+0xc1/0x200 [ 352.295424] sget_userns+0x276/0x860 [ 352.299159] ? get_anon_bdev+0xc0/0xc0 [ 352.303068] ? vfs_get_super+0x270/0x270 [ 352.307173] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.312778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.318326] ? ns_capable_common+0x13f/0x170 [ 352.322747] ? get_anon_bdev+0xc0/0xc0 [ 352.326647] sget+0x10b/0x150 [ 352.329772] ? ovl_show_options+0x550/0x550 [ 352.334105] mount_nodev+0x38/0x120 [ 352.337761] ? ovl_own_xattr_set+0x10/0x10 [ 352.342012] ovl_mount+0x34/0x40 [ 352.345397] legacy_get_tree+0x131/0x460 [ 352.349472] vfs_get_tree+0x1cb/0x5c0 [ 352.353292] do_mount+0x6f9/0x1e30 [ 352.356846] ? rcu_is_watching+0x8c/0x150 [ 352.361002] ? trace_hardirqs_on+0xbd/0x2c0 [ 352.365353] ? copy_mount_string+0x40/0x40 [ 352.369601] ? copy_mount_options+0x5f/0x380 [ 352.374026] ? kmem_cache_alloc_trace+0x324/0x730 [ 352.378892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.384448] ? _copy_from_user+0xdf/0x150 [ 352.388612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.394171] ? copy_mount_options+0x285/0x380 [ 352.398696] ksys_mount+0x12d/0x140 [ 352.402341] __x64_sys_mount+0xbe/0x150 [ 352.406335] do_syscall_64+0x1b9/0x820 [ 352.410238] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.415619] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.420563] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 352.425593] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.430622] ? recalc_sigpending_tsk+0x180/0x180 [ 352.435395] ? kasan_check_write+0x14/0x20 [ 352.439646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.444522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.449750] RIP: 0033:0x457099 [ 352.452954] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.471866] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.479589] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 352.486866] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 352.494153] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 352.501433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 352.508711] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000011 03:33:54 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f61646a00000026e7080900040000") r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000580)=0x0) r9 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r3, 0x1, &(0x7f00000005c0)={{0x2, r4, r5, r6, r7, 0x8, 0x1000}, 0x1, 0x9, 0x3, 0x0, r8, r9, 0x19eb}) open_by_handle_at(r1, &(0x7f0000000640)={0x2f, 0x2, "d998e0df913675c6af44d85d55fc9b92ba54b660f23c8e5bdb2458707d30376bc4bdb92ee2af6e"}, 0x490080) sendfile(r2, r1, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000180)=ANY=[], 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) 03:33:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140), &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2000000001}, 0xb6) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r0, &(0x7f0000ce6ffe)="da", 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8) 03:33:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb", 0x1}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x7fff, 0x1, 0x0, 0x7a48, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000006c0)={r0, 0x3f}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r0, 0x80000001, 0x9, 0xc8a6}, 0x234) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[], 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000500)={0xf5f, 0x101, 0x5, 0x1, [], [], [], 0x1, 0x4, 0xbd1, 0x101, "b3cc4882b7d65ff13d8384a5161cec5d"}) keyctl$describe(0x6, r1, &(0x7f0000000200)=""/29, 0x1d) getresuid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f00000003c0)) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) flock(0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x3, 0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x2012, r4, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0x1000}, 0xb) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/158, 0x9e) 03:33:54 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0xff00}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:54 executing program 5 (fault-call:4 fault-nth:18): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f40f070f20c035100000000f22c064f36e0f06450fc71f0f3048b85c000000000000000f23c00f21f835010008000f23f866baf80cb88065338bef66bafc0cb8e0000000ef2e3e3666400f3882a7c5a59d8f", 0x52}], 0x0, 0x5d, &(0x7f0000000000), 0xf) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105d}, 0x2c) socket$inet6(0xa, 0x1000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000a2bd70007cdbf700000000cb0707000000000008bab1112770d6cdfb63149294f7d4535bbf43906908b5a628a03b2e6b89820971207981ad1c8e789ad16700ff3cb9c62f4bca3149fd06753e952b8deaa3fee194b5d1e379b7819a732669df6e90c60a9030c7542c811569628fba04928fefbbc2297202b4f7"], 0x1c}}, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000280)="6e986b96b44b44533220da8f74d0139524da584f566be6376d730a411bfaef6be24e87bd03becbbeb110e8a0e21fc5168685d7cff080aef4f45e6be9fdc0250adc1777712a1ff89764851569f11521ffc07b1ffced92cf6bf39df5ce92d64c87cb1bded2be40154f1d0039df34a09ede6b7a562eca36345d", 0x78, 0x1, 0x0, 0x2, r3}, &(0x7f0000000300)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) 03:33:54 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1000000000802, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000380)=0x8) memfd_create(&(0x7f0000000440)=':#(}\x00', 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={r3, 0x6052, 0x30, 0x200, 0x5}, &(0x7f0000000400)=0x18) write$vnet(r2, &(0x7f0000000300)={0x1, {&(0x7f0000000240), 0x0, &(0x7f00000002c0)=""/3, 0x3, 0x1}}, 0x68) r4 = memfd_create(&(0x7f0000000040)='eth0-*#(keyring\x00', 0x2) ftruncate(r4, 0xffffffff) ioctl$KVM_NMI(r4, 0xae9a) close(r2) 03:33:54 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:54 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x6400}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 354.207235] FAT-fs (loop4): bogus number of reserved sectors [ 354.213363] FAT-fs (loop4): Can't find a valid FAT filesystem [ 354.231297] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 354.299435] FAULT_INJECTION: forcing a failure. [ 354.299435] name failslab, interval 1, probability 0, space 0, times 0 [ 354.310971] CPU: 0 PID: 14346 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 354.319476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.328864] Call Trace: [ 354.331472] dump_stack+0x1c9/0x2b4 [ 354.335133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.340380] should_fail.cold.4+0xa/0x11 [ 354.344464] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.349602] ? graph_lock+0x170/0x170 [ 354.353426] ? save_stack+0x43/0xd0 [ 354.357070] ? kasan_kmalloc+0xc4/0xe0 [ 354.360968] ? __kmalloc+0x14e/0x720 [ 354.364698] ? find_held_lock+0x36/0x1c0 [ 354.368786] ? __lock_is_held+0xb5/0x140 [ 354.372880] ? check_same_owner+0x340/0x340 [ 354.377224] ? rcu_note_context_switch+0x680/0x680 [ 354.382197] __should_failslab+0x124/0x180 [ 354.386455] should_failslab+0x9/0x14 [ 354.390273] kmem_cache_alloc_node_trace+0x259/0x720 [ 354.395412] __kmalloc_node+0x33/0x70 [ 354.399231] kvmalloc_node+0x65/0xf0 [ 354.402967] __list_lru_init+0x5d9/0x840 [ 354.407052] ? list_lru_destroy+0x500/0x500 [ 354.411400] ? up_write+0x7b/0x220 [ 354.414981] ? up_read+0x110/0x110 [ 354.418541] ? down_read+0x1d0/0x1d0 [ 354.422277] ? init_wait_entry+0x1c0/0x1c0 [ 354.426539] ? prealloc_shrinker+0xe5/0x330 [ 354.430893] alloc_super+0x986/0xb20 [ 354.434634] ? destroy_unused_super.part.11+0x110/0x110 [ 354.440017] ? lock_downgrade+0x8f0/0x8f0 [ 354.444216] ? kasan_check_read+0x11/0x20 [ 354.448393] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 354.452995] ? kasan_check_write+0x14/0x20 [ 354.457245] ? do_raw_spin_lock+0xc1/0x200 [ 354.461524] sget_userns+0x276/0x860 [ 354.465250] ? get_anon_bdev+0xc0/0xc0 [ 354.469171] ? vfs_get_super+0x270/0x270 [ 354.473284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.478877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.484771] ? ns_capable_common+0x13f/0x170 [ 354.489217] ? get_anon_bdev+0xc0/0xc0 [ 354.493109] sget+0x10b/0x150 [ 354.496232] ? ovl_show_options+0x550/0x550 [ 354.500561] mount_nodev+0x38/0x120 [ 354.504206] ? ovl_own_xattr_set+0x10/0x10 [ 354.508447] ovl_mount+0x34/0x40 [ 354.511823] legacy_get_tree+0x131/0x460 [ 354.515896] vfs_get_tree+0x1cb/0x5c0 [ 354.519707] do_mount+0x6f9/0x1e30 [ 354.523256] ? rcu_is_watching+0x8c/0x150 [ 354.527415] ? trace_hardirqs_on+0xbd/0x2c0 [ 354.531747] ? copy_mount_string+0x40/0x40 [ 354.536019] ? copy_mount_options+0x5f/0x380 [ 354.540450] ? kmem_cache_alloc_trace+0x324/0x730 [ 354.545308] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.550857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.556398] ? copy_mount_options+0x285/0x380 [ 354.560903] ksys_mount+0x12d/0x140 [ 354.564537] __x64_sys_mount+0xbe/0x150 [ 354.568524] do_syscall_64+0x1b9/0x820 [ 354.572422] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 354.577800] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.582740] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 354.587766] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 354.592791] ? recalc_sigpending_tsk+0x180/0x180 [ 354.597555] ? kasan_check_write+0x14/0x20 [ 354.601806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.606668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.611864] RIP: 0033:0x457099 [ 354.615071] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.633981] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.641710] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 03:33:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000002c0)) signalfd4(r0, &(0x7f0000000000)={0x7}, 0x8, 0x80000) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000240)={0x0, 0x2, 0x7}) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:54 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x80}}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 354.649430] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 354.656703] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 354.663980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 354.671252] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000012 03:33:54 executing program 5 (fault-call:4 fault-nth:19): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:54 executing program 0: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x2fc) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000140)=0x75, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a40], 0x0, &(0x7f00000000c0), &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000003815c1a0cff5e46f6400000000000000000000000000faffffff00ab7d22d49bcb8c8e0000000000000000000000000000000000000000000000010000000000000000000000f4fbb7611483ca58784ee2017fdf7ec4ceb0b1e31589b5d9be160eefba53c282acc561005f3fa5df12c0c749fa2748"]}, 0x148) bind$bt_hci(r0, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x7, 0x8, 0x5, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x0, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) readahead(r2, 0x9, 0xff) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000180)) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r4, &(0x7f00000030c0), 0x1000) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) read$FUSE(r4, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 354.869232] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 354.909652] FAULT_INJECTION: forcing a failure. [ 354.909652] name failslab, interval 1, probability 0, space 0, times 0 [ 354.921093] CPU: 0 PID: 14372 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 354.929591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.938948] Call Trace: [ 354.941559] dump_stack+0x1c9/0x2b4 [ 354.945211] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.950418] ? kasan_check_read+0x11/0x20 [ 354.954582] ? rcu_is_watching+0x8c/0x150 [ 354.958764] should_fail.cold.4+0xa/0x11 [ 354.962849] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.967969] ? is_bpf_text_address+0xd7/0x170 [ 354.972502] ? kernel_text_address+0x79/0xf0 [ 354.976933] ? unwind_get_return_address+0x61/0xa0 [ 354.981882] ? __save_stack_trace+0x8d/0xf0 [ 354.986222] ? graph_lock+0x170/0x170 [ 354.990044] ? find_held_lock+0x36/0x1c0 [ 354.994123] ? __lock_is_held+0xb5/0x140 [ 354.998235] ? check_same_owner+0x340/0x340 [ 355.002572] ? kmem_cache_alloc_node_trace+0x219/0x720 [ 355.007868] ? rcu_note_context_switch+0x680/0x680 [ 355.012822] __should_failslab+0x124/0x180 [ 355.017078] should_failslab+0x9/0x14 [ 355.020897] kmem_cache_alloc_trace+0x2b5/0x730 [ 355.025582] ? __kmalloc_node+0x33/0x70 [ 355.029575] ? __kmalloc_node+0x33/0x70 [ 355.033570] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.038646] __memcg_init_list_lru_node+0x185/0x2d0 [ 355.043688] ? kvfree_rcu+0x20/0x20 [ 355.047332] ? __kmalloc_node+0x47/0x70 [ 355.051336] __list_lru_init+0x4d6/0x840 [ 355.055418] ? list_lru_destroy+0x500/0x500 [ 355.059763] ? up_write+0x7b/0x220 [ 355.063321] ? up_read+0x110/0x110 [ 355.066876] ? down_read+0x1d0/0x1d0 [ 355.070605] ? init_wait_entry+0x1c0/0x1c0 [ 355.074861] ? prealloc_shrinker+0xe5/0x330 [ 355.079214] alloc_super+0x986/0xb20 [ 355.082949] ? destroy_unused_super.part.11+0x110/0x110 [ 355.088328] ? lock_downgrade+0x8f0/0x8f0 [ 355.092506] ? kasan_check_read+0x11/0x20 [ 355.096670] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.101266] ? kasan_check_write+0x14/0x20 [ 355.105512] ? do_raw_spin_lock+0xc1/0x200 [ 355.109768] sget_userns+0x276/0x860 [ 355.113506] ? get_anon_bdev+0xc0/0xc0 [ 355.117439] ? vfs_get_super+0x270/0x270 [ 355.121523] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.127098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.132646] ? ns_capable_common+0x13f/0x170 [ 355.137066] ? get_anon_bdev+0xc0/0xc0 [ 355.140967] sget+0x10b/0x150 [ 355.144084] ? ovl_show_options+0x550/0x550 [ 355.148418] mount_nodev+0x38/0x120 [ 355.152063] ? ovl_own_xattr_set+0x10/0x10 [ 355.156305] ovl_mount+0x34/0x40 [ 355.159685] legacy_get_tree+0x131/0x460 [ 355.163761] vfs_get_tree+0x1cb/0x5c0 [ 355.167580] do_mount+0x6f9/0x1e30 [ 355.171127] ? rcu_is_watching+0x8c/0x150 [ 355.175311] ? trace_hardirqs_on+0xbd/0x2c0 [ 355.179646] ? copy_mount_string+0x40/0x40 [ 355.183893] ? copy_mount_options+0x5f/0x380 [ 355.188313] ? kmem_cache_alloc_trace+0x324/0x730 [ 355.193190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.198749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.204299] ? copy_mount_options+0x285/0x380 [ 355.208808] ksys_mount+0x12d/0x140 [ 355.212453] __x64_sys_mount+0xbe/0x150 [ 355.216443] do_syscall_64+0x1b9/0x820 [ 355.220382] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.225770] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.230711] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 355.235739] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.240788] ? recalc_sigpending_tsk+0x180/0x180 [ 355.245556] ? kasan_check_write+0x14/0x20 [ 355.249806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.254680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.259885] RIP: 0033:0x457099 [ 355.263105] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.282022] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.289742] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 355.297015] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 355.304293] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 355.311567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 355.318844] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000013 03:33:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f40f070f20c035100000000f22c064f36e0f06450fc71f0f3048b85c000000000000000f23c00f21f835010008000f23f866baf80cb88065338bef66bafc0cb8e0000000ef2e3e3666400f3882a7c5a59d8f", 0x52}], 0x0, 0x5d, &(0x7f0000000000), 0xf) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105d}, 0x2c) socket$inet6(0xa, 0x1000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000a2bd70007cdbf700000000cb0707000000000008bab1112770d6cdfb63149294f7d4535bbf43906908b5a628a03b2e6b89820971207981ad1c8e789ad16700ff3cb9c62f4bca3149fd06753e952b8deaa3fee194b5d1e379b7819a732669df6e90c60a9030c7542c811569628fba04928fefbbc2297202b4f7"], 0x1c}}, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000280)="6e986b96b44b44533220da8f74d0139524da584f566be6376d730a411bfaef6be24e87bd03becbbeb110e8a0e21fc5168685d7cff080aef4f45e6be9fdc0250adc1777712a1ff89764851569f11521ffc07b1ffced92cf6bf39df5ce92d64c87cb1bded2be40154f1d0039df34a09ede6b7a562eca36345d", 0x78, 0x1, 0x0, 0x2, r3}, &(0x7f0000000300)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) 03:33:55 executing program 5 (fault-call:4 fault-nth:20): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x20810, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400100, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/76) 03:33:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) mkdirat(r0, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat(r0, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f0000000040)='./file0\x00') [ 355.526093] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 355.551860] FAULT_INJECTION: forcing a failure. [ 355.551860] name failslab, interval 1, probability 0, space 0, times 0 [ 355.563203] CPU: 0 PID: 14402 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 355.571705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.581157] Call Trace: [ 355.583775] dump_stack+0x1c9/0x2b4 [ 355.587423] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.592628] ? __kernel_text_address+0xd/0x40 [ 355.597157] ? unwind_get_return_address+0x61/0xa0 [ 355.602121] should_fail.cold.4+0xa/0x11 [ 355.606219] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.611345] ? save_stack+0x43/0xd0 [ 355.614986] ? kasan_kmalloc+0xc4/0xe0 [ 355.618882] ? kmem_cache_alloc_trace+0x152/0x730 [ 355.623738] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 355.628937] ? __list_lru_init+0x4d6/0x840 [ 355.633193] ? alloc_super+0x986/0xb20 [ 355.637093] ? graph_lock+0x170/0x170 [ 355.640905] ? legacy_get_tree+0x131/0x460 [ 355.645617] ? vfs_get_tree+0x1cb/0x5c0 [ 355.649599] ? do_mount+0x6f9/0x1e30 [ 355.653323] ? ksys_mount+0x12d/0x140 [ 355.657129] ? __x64_sys_mount+0xbe/0x150 [ 355.661304] ? find_held_lock+0x36/0x1c0 [ 355.665383] ? __lock_is_held+0xb5/0x140 [ 355.669473] ? check_same_owner+0x340/0x340 [ 355.673812] ? rcu_note_context_switch+0x680/0x680 [ 355.678761] __should_failslab+0x124/0x180 [ 355.683023] should_failslab+0x9/0x14 [ 355.686835] kmem_cache_alloc_trace+0x2b5/0x730 [ 355.691517] ? __kmalloc_node+0x33/0x70 [ 355.695505] ? __kmalloc_node+0x33/0x70 [ 355.700978] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.706020] __memcg_init_list_lru_node+0x185/0x2d0 [ 355.711050] ? kvfree_rcu+0x20/0x20 [ 355.714690] ? __kmalloc_node+0x47/0x70 [ 355.718683] __list_lru_init+0x4d6/0x840 [ 355.722762] ? list_lru_destroy+0x500/0x500 [ 355.727098] ? up_write+0x7b/0x220 [ 355.730662] ? up_read+0x110/0x110 [ 355.734215] ? down_read+0x1d0/0x1d0 [ 355.737938] ? init_wait_entry+0x1c0/0x1c0 [ 355.742192] ? prealloc_shrinker+0xe5/0x330 [ 355.746535] alloc_super+0x986/0xb20 [ 355.750262] ? destroy_unused_super.part.11+0x110/0x110 [ 355.755635] ? lock_downgrade+0x8f0/0x8f0 [ 355.759796] ? kasan_check_read+0x11/0x20 [ 355.763951] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.768543] ? kasan_check_write+0x14/0x20 [ 355.772786] ? do_raw_spin_lock+0xc1/0x200 [ 355.777327] sget_userns+0x276/0x860 [ 355.781048] ? get_anon_bdev+0xc0/0xc0 [ 355.784949] ? vfs_get_super+0x270/0x270 [ 355.789034] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.794612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.800228] ? ns_capable_common+0x13f/0x170 [ 355.804645] ? get_anon_bdev+0xc0/0xc0 [ 355.808545] sget+0x10b/0x150 [ 355.811662] ? ovl_show_options+0x550/0x550 [ 355.815989] mount_nodev+0x38/0x120 [ 355.819627] ? ovl_own_xattr_set+0x10/0x10 [ 355.823871] ovl_mount+0x34/0x40 [ 355.827249] legacy_get_tree+0x131/0x460 [ 355.831320] vfs_get_tree+0x1cb/0x5c0 [ 355.835137] do_mount+0x6f9/0x1e30 [ 355.838717] ? rcu_is_watching+0x8c/0x150 [ 355.842868] ? trace_hardirqs_on+0xbd/0x2c0 [ 355.847220] ? copy_mount_string+0x40/0x40 [ 355.851467] ? copy_mount_options+0x5f/0x380 [ 355.855882] ? kmem_cache_alloc_trace+0x324/0x730 [ 355.860736] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.866283] ? _copy_from_user+0xdf/0x150 [ 355.870441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.875984] ? copy_mount_options+0x285/0x380 [ 355.880487] ksys_mount+0x12d/0x140 [ 355.884127] __x64_sys_mount+0xbe/0x150 [ 355.888127] do_syscall_64+0x1b9/0x820 [ 355.892035] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.897405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.902343] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 355.907369] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.912391] ? recalc_sigpending_tsk+0x180/0x180 [ 355.917176] ? kasan_check_write+0x14/0x20 [ 355.921425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.926284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.931476] RIP: 0033:0x457099 [ 355.934678] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.953585] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.961300] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 355.968574] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:56 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x800000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 355.975861] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 355.983130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 355.990415] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000014 03:33:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000380)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x80, 0x3, 0x7fffffff, 'queue1\x00', 0xe6}) 03:33:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0x68) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x8dc, 0x578) sendto$inet6(r2, &(0x7f0000000040), 0x10, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getpeername(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f00000000c0)=0x80) 03:33:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x240) 03:33:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x800, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x200, 0x100, 0x3, 0x8001, 0x0, 0x6, 0x0, 0x8, 0x401, 0x8, 0x80, 0x6, 0x200, 0x7, 0xdbc1, 0x8, 0x1, 0x6, 0x40, 0x1, 0x7fff, 0x1df, 0x4562, 0x34994f6f, 0x0, 0x5, 0x1ff, 0x7, 0x2, 0x80, 0x2, 0xab, 0x2, 0x1, 0x3, 0x2, 0x0, 0x3dc4, 0x4, @perf_config_ext={0x6, 0x2}, 0x2040, 0x80, 0x5, 0x1, 0xc06, 0x5, 0x8a}, r2, 0x4, 0xffffffffffffffff, 0x1) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000000000006500000000000001000000e3ab2e20092f45f627ed68c8a75630b349572ae72b0c197ee95c3d03000000dc659cd7c448db49599eb860a503ed6000000000a32b1d4000bcf4aa5a06294401f0a5d8de9955a6a1454e436aec569520198a5f48859fb34d773b99cfcb4b91284bd12aa7bd33d3dce1a5dba8bed18926db8eb7a3fbe73a57603f588c3af129217c137afbb1a35849273ad93410cefa90d9710de810d065c4f050bc0fd5c467e4ebd0a1afdc685870c876347d697e2f455b345181dcce35b081bb8bffef38e77150df2f272212081eb33cfcbfc663ef6ea6160da7a533cb5d21154f7961133da0d808a2e01982a358b5a0811634586475828c0404469b3f8679d61d31aca70c98a54d318ca26d3eaddd82c4c91b861ee42544fb41fbe2cb89a7b958ae6f18d335aa6723ee979dbc81da1b176358851e282811bf50c51f5c8af879a5d941ec268a5f43a887d56ce107ec"]) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7, 0x100) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000140)={0x2, 0x7, 0x80000000, 0x9, 0x0, 0x3}) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) 03:33:57 executing program 5 (fault-call:4 fault-nth:21): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6e0000007d000000006700000004000000020000000000000000000000d500000000000000010000000000000001002a0a2fba807c762f70746d7800ddff29002f70726f632f7379732f6e657400000000000000072f6578706972655f6e6f646573745f636f6e6e00"], 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getdents64(r1, &(0x7f00000000c0)=""/11, 0xfc23) 03:33:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x4000000000000001) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="0005aa0a7a0000009a3367758d0b8f36f2bdff5f5d208690ecb3632b76b3cd0be3ae4305e5a6d6ccc5278f441a370008263f232452c64971395af1997446f8bf408b7c09886de247f1a67a57afbac7e2"]) 03:33:57 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x8000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:57 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x440200, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)={0x1}) 03:33:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x7, &(0x7f00000000c0), 0x2) 03:33:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x80000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000f8, 0x0) 03:33:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e22, @multicast1}}) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x3) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/245) getsockopt$sock_buf(r1, 0x1, 0x4, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=0x3a4) 03:33:57 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f00000004c0)="2400000021002551071c0165ff0ffc020200000000100f000ee1000c080018000400a000bc0000008f3943793a5ea67658cb22b79489bbdd14f6fd59b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c483daabb7e919e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7e060f433314f5a171b182deb7904", 0xe0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40, 0x200000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/40) [ 357.375165] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 357.462073] FAULT_INJECTION: forcing a failure. [ 357.462073] name failslab, interval 1, probability 0, space 0, times 0 [ 357.473466] CPU: 1 PID: 14453 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 357.481978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.491336] Call Trace: [ 357.493945] dump_stack+0x1c9/0x2b4 [ 357.497602] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.502817] ? __kernel_text_address+0xd/0x40 [ 357.507335] ? unwind_get_return_address+0x61/0xa0 [ 357.512296] should_fail.cold.4+0xa/0x11 [ 357.516379] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.521506] ? save_stack+0x43/0xd0 [ 357.525158] ? kasan_kmalloc+0xc4/0xe0 [ 357.529061] ? kmem_cache_alloc_trace+0x152/0x730 [ 357.533918] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 357.539127] ? __list_lru_init+0x4d6/0x840 [ 357.543390] ? alloc_super+0x986/0xb20 [ 357.547301] ? graph_lock+0x170/0x170 [ 357.551119] ? legacy_get_tree+0x131/0x460 [ 357.555376] ? vfs_get_tree+0x1cb/0x5c0 03:33:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x3) 03:33:57 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000005c0)=@random={'system.', '/dev/snd/timer\x00'}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d) getegid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000240)=0x4, 0xffffffffffffff88) sendmsg(r3, &(0x7f0000eeefc8)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f0000437000), 0x0, &(0x7f000056cda0)=ANY=[@ANYBLOB="20000000f2fffffffffdfffffd060000000000"], 0x13}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) syz_open_dev$sndpcmc(&(0x7f00000007c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x42) syz_open_dev$midi(&(0x7f0000000800)='/dev/midi#\x00', 0x7e81, 0x101000) connect$l2tp(r1, &(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x4, 0x4, 0x0, 0x1}}, 0xfffffffffffffe03) r5 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000500)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000004c0)=0x1e, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) r6 = add_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)="ef16ae2e69d57540b8d08419211be838f9ac27e7edb46ad3909608e877ac78fb40300abc15588c54359a6886913e8bb136e774485d5d6f8c52d52b078957803349ab7cb3f8f0fc09a32cc51b027a6cb1c7f45ccf5dc88e24f324d7fde2154e01e93bb2d4b5b10b28d1bae6412b1027451017e675c1e5608a2753135e1d7d6864a95b3cb7d5aec16d72afc062c2eafc3b3722af4f789e97c1dcd60d7c95e5eeb2850d6c987edee8a1318adc9622f3db61bcce5f32ff2013d60cfa903262f44bd0e7fb9b2e8df5d2f7b6b24231f7ddaf9dea9cf63d6c741f60ba793b7d380e38c266455a6c6eb7b1b3808e", 0xea, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000480)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000280)={0xffffffffffffffff, 0x20000008}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="020010325c0fdb00"], &(0x7f0000000540)=0x8) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000080)={0x1000000000009, 0x8001}) syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x0, 0x402000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x4, 0xfff, 0x401, 0xffffffff}, 0xc) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000380)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x401}, 0xc) [ 357.559364] ? do_mount+0x6f9/0x1e30 [ 357.563094] ? ksys_mount+0x12d/0x140 [ 357.566910] ? __x64_sys_mount+0xbe/0x150 [ 357.571074] ? find_held_lock+0x36/0x1c0 [ 357.575171] ? __lock_is_held+0xb5/0x140 [ 357.579273] ? check_same_owner+0x340/0x340 [ 357.583719] ? rcu_note_context_switch+0x680/0x680 [ 357.588687] __should_failslab+0x124/0x180 [ 357.592945] should_failslab+0x9/0x14 [ 357.596763] kmem_cache_alloc_trace+0x2b5/0x730 [ 357.601452] ? __kmalloc_node+0x33/0x70 [ 357.605444] ? __kmalloc_node+0x33/0x70 [ 357.609445] ? rcu_read_lock_sched_held+0x108/0x120 [ 357.614495] __memcg_init_list_lru_node+0x185/0x2d0 [ 357.619535] ? kvfree_rcu+0x20/0x20 [ 357.623189] ? __kmalloc_node+0x47/0x70 [ 357.627203] __list_lru_init+0x4d6/0x840 [ 357.631289] ? list_lru_destroy+0x500/0x500 [ 357.635632] ? up_write+0x7b/0x220 [ 357.639201] ? up_read+0x110/0x110 [ 357.642757] ? down_read+0x1d0/0x1d0 [ 357.646820] ? init_wait_entry+0x1c0/0x1c0 [ 357.651066] ? prealloc_shrinker+0xe5/0x330 [ 357.655414] alloc_super+0x986/0xb20 [ 357.659160] ? destroy_unused_super.part.11+0x110/0x110 [ 357.664538] ? lock_downgrade+0x8f0/0x8f0 [ 357.668714] ? kasan_check_read+0x11/0x20 [ 357.672876] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 357.677472] ? kasan_check_write+0x14/0x20 [ 357.681719] ? do_raw_spin_lock+0xc1/0x200 [ 357.685973] sget_userns+0x276/0x860 [ 357.689709] ? get_anon_bdev+0xc0/0xc0 [ 357.693615] ? vfs_get_super+0x270/0x270 [ 357.697714] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.703293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.708843] ? ns_capable_common+0x13f/0x170 [ 357.713263] ? get_anon_bdev+0xc0/0xc0 [ 357.717172] sget+0x10b/0x150 [ 357.720294] ? ovl_show_options+0x550/0x550 [ 357.724630] mount_nodev+0x38/0x120 [ 357.728283] ? ovl_own_xattr_set+0x10/0x10 [ 357.732530] ovl_mount+0x34/0x40 [ 357.735910] legacy_get_tree+0x131/0x460 [ 357.739987] vfs_get_tree+0x1cb/0x5c0 [ 357.743804] do_mount+0x6f9/0x1e30 [ 357.747361] ? copy_mount_string+0x40/0x40 [ 357.751620] ? retint_kernel+0x10/0x10 [ 357.755527] ? copy_mount_options+0x1a1/0x380 [ 357.760044] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 357.764904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.770456] ? copy_mount_options+0x285/0x380 [ 357.774997] ksys_mount+0x12d/0x140 [ 357.779128] __x64_sys_mount+0xbe/0x150 [ 357.783126] do_syscall_64+0x1b9/0x820 [ 357.787034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 357.792409] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.797356] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 357.802388] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 357.807418] ? recalc_sigpending_tsk+0x180/0x180 [ 357.812195] ? kasan_check_write+0x14/0x20 [ 357.816449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.821310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.826513] RIP: 0033:0x457099 [ 357.829715] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.848624] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.856354] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 357.863631] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 357.870914] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 357.878193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 357.885472] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000015 03:33:57 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0xff000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:58 executing program 1: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x8, 0x1, @tid=r1}, &(0x7f0000000100)) socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2103001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x3, 0x2}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) 03:33:58 executing program 5 (fault-call:4 fault-nth:22): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:58 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2106001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x28}}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x890e, &(0x7f0000000280)="153f6234488d67c4766070") r4 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x270003) read(r4, &(0x7f0000000200)=""/28, 0x1c) accept$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r4) 03:33:58 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000040)=""/222, &(0x7f0000000140)=0xde) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/214) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000002c0)={0x3, 0x9, 0x0, {r1, r2+30000000}, 0x1000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) r3 = request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)='\x00', 0xfffffffffffffffb) keyctl$clear(0x7, r3) fcntl$setflags(r0, 0x2, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x200, 0x0) recvmmsg(r4, &(0x7f0000003580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000000900)=""/232, 0xe8}], 0x8, &(0x7f0000000a80), 0x0, 0xfff}, 0x6ef1}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/231, 0xe7}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}], 0x5, &(0x7f0000001dc0)=""/153, 0x99, 0x9}, 0x81}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/135, 0x87}], 0x2, &(0x7f0000002f80)=""/150, 0x96, 0x5649}}, {{&(0x7f0000003040)=@ax25, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/31, 0x1f}], 0x1, &(0x7f0000003140)=""/61, 0x3d, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003180)=""/67, 0x43}, {&(0x7f0000003200)=""/215, 0xd7}, {&(0x7f0000003300)=""/88, 0x58}, {&(0x7f0000003380)=""/57, 0x39}, {&(0x7f00000033c0)=""/165, 0xa5}], 0x5, &(0x7f0000003500)=""/116, 0x74, 0x4768b539}, 0x17a}], 0x5, 0x40000102, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x5b) pause() socket$inet6(0xa, 0x8080e, 0x15) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000036c0)={{0x5a, 0x1}, 'port0\x00', 0x8, 0x1000, 0x8, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000003780)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x401, 0x1000, 0xd958, 0x8}, &(0x7f0000003840)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000003880)={r6, 0x8}, &(0x7f00000038c0)=0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000003900)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000003a00)=0xe8) accept4$vsock_stream(r4, &(0x7f0000003a40)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x800) r8 = semget$private(0x0, 0x4, 0x10) semctl$GETZCNT(r8, 0x3, 0xf, &(0x7f0000003a80)=""/194) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000003b80)={'filter\x00'}, &(0x7f0000003c00)=0x78) stat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000003d00)={0x78, 0xfffffffffffffffe, 0x7, {0xec92fec, 0x6, 0x0, {0x3, 0x3, 0x6, 0x6, 0x2, 0xc3d2, 0x3, 0x1000, 0x6, 0x800, 0x0, r7, r9, 0x7e3b9561, 0x40000000000000}}}, 0x78) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000003d80), 0x4) write$P9_RFSYNC(r4, &(0x7f0000003dc0)={0x7, 0x33, 0x2}, 0x7) sysinfo(&(0x7f0000003e00)=""/212) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000004140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000004100)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000004180)={0x5, 0x10, 0xfa00, {&(0x7f0000003f00), r10, 0x1}}, 0x18) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000041c0)='rxrpc_s\x00', 0x0) [ 358.136906] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 358.215387] FAULT_INJECTION: forcing a failure. [ 358.215387] name failslab, interval 1, probability 0, space 0, times 0 [ 358.226702] CPU: 0 PID: 14502 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 358.235206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.244568] Call Trace: [ 358.247199] dump_stack+0x1c9/0x2b4 [ 358.250855] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.256068] ? __kernel_text_address+0xd/0x40 [ 358.260584] ? unwind_get_return_address+0x61/0xa0 [ 358.265542] should_fail.cold.4+0xa/0x11 [ 358.269628] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.274763] ? save_stack+0x43/0xd0 [ 358.278412] ? kasan_kmalloc+0xc4/0xe0 [ 358.282318] ? kmem_cache_alloc_trace+0x152/0x730 [ 358.287200] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 358.292401] ? __list_lru_init+0x4d6/0x840 [ 358.296644] ? alloc_super+0x986/0xb20 [ 358.300542] ? graph_lock+0x170/0x170 [ 358.304355] ? legacy_get_tree+0x131/0x460 [ 358.308597] ? vfs_get_tree+0x1cb/0x5c0 [ 358.312586] ? do_mount+0x6f9/0x1e30 [ 358.316308] ? ksys_mount+0x12d/0x140 [ 358.320123] ? __x64_sys_mount+0xbe/0x150 [ 358.324305] ? find_held_lock+0x36/0x1c0 [ 358.328398] ? __lock_is_held+0xb5/0x140 [ 358.332499] ? check_same_owner+0x340/0x340 [ 358.336845] ? rcu_note_context_switch+0x680/0x680 [ 358.341803] __should_failslab+0x124/0x180 [ 358.346056] should_failslab+0x9/0x14 [ 358.349871] kmem_cache_alloc_trace+0x2b5/0x730 [ 358.354553] ? __kmalloc_node+0x33/0x70 [ 358.358541] ? __kmalloc_node+0x33/0x70 [ 358.362549] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.367598] __memcg_init_list_lru_node+0x185/0x2d0 [ 358.372639] ? kvfree_rcu+0x20/0x20 [ 358.376284] ? __kmalloc_node+0x47/0x70 [ 358.380283] __list_lru_init+0x4d6/0x840 [ 358.384365] ? list_lru_destroy+0x500/0x500 [ 358.388709] ? up_write+0x7b/0x220 [ 358.392263] ? up_read+0x110/0x110 [ 358.395822] ? down_read+0x1d0/0x1d0 [ 358.399550] ? init_wait_entry+0x1c0/0x1c0 [ 358.403796] ? prealloc_shrinker+0xe5/0x330 [ 358.408138] alloc_super+0x986/0xb20 [ 358.411883] ? destroy_unused_super.part.11+0x110/0x110 [ 358.417260] ? lock_downgrade+0x8f0/0x8f0 [ 358.421425] ? kasan_check_read+0x11/0x20 [ 358.425586] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 358.430198] ? kasan_check_write+0x14/0x20 [ 358.434445] ? do_raw_spin_lock+0xc1/0x200 [ 358.438698] sget_userns+0x276/0x860 [ 358.442422] ? get_anon_bdev+0xc0/0xc0 [ 358.446324] ? vfs_get_super+0x270/0x270 [ 358.450411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.455983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.461532] ? ns_capable_common+0x13f/0x170 [ 358.465951] ? get_anon_bdev+0xc0/0xc0 [ 358.469851] sget+0x10b/0x150 [ 358.472966] ? ovl_show_options+0x550/0x550 [ 358.477299] mount_nodev+0x38/0x120 [ 358.480946] ? ovl_own_xattr_set+0x10/0x10 [ 358.485203] ovl_mount+0x34/0x40 [ 358.488587] legacy_get_tree+0x131/0x460 [ 358.492665] vfs_get_tree+0x1cb/0x5c0 [ 358.496485] do_mount+0x6f9/0x1e30 [ 358.500033] ? rcu_is_watching+0x8c/0x150 [ 358.504193] ? trace_hardirqs_on+0xbd/0x2c0 [ 358.508533] ? copy_mount_string+0x40/0x40 [ 358.512784] ? copy_mount_options+0x5f/0x380 [ 358.517213] ? kmem_cache_alloc_trace+0x324/0x730 [ 358.522070] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.527621] ? _copy_from_user+0xdf/0x150 [ 358.531784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.537330] ? copy_mount_options+0x285/0x380 [ 358.541842] ksys_mount+0x12d/0x140 [ 358.545486] __x64_sys_mount+0xbe/0x150 [ 358.549478] do_syscall_64+0x1b9/0x820 [ 358.553380] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 358.558755] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.563698] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 358.568728] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 358.573754] ? recalc_sigpending_tsk+0x180/0x180 [ 358.578522] ? kasan_check_write+0x14/0x20 [ 358.582774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.587635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.592833] RIP: 0033:0x457099 [ 358.596038] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.614944] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.622664] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 358.629940] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 358.637245] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 358.645074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 358.652347] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000016 03:33:59 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)=']\x00'}, 0x10) write$cgroup_int(r0, &(0x7f0000000200)=0x100000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='vboxnet1!{{\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x805c900, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000140)=0xfffffffffffffd06) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="0f015c394d150e0000000fb1380f320fc72e0f9d2e66baa00066b8ceec66ef360f083e0f00d866b86d000f00d8", 0x2d}], 0x1, 0x48, &(0x7f0000000280), 0x0) 03:33:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x4001) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f00000001c0)="e6e005df38558d8f9aa6cc299fabe12e51b0b64aaa7a895bef5201fbd12642341dbc6e3f224b0788e9e75a10e3736824752949507400558ae932b300d1a9f4031769b048630946f0117607d8a6975aff0e57700bc2cd362b522d434eee49b883bb0f515851fcefc8a762d5be682fe51dccb50376e2e8bc7ce63e68f64e7f818c380e290c0fb81460eaba61b45387419186558eb7208e07624081620aa3d071194adf5583c56b2d1be11dd09b4a4824b1f5b4c699e9e8632aa58cec6a15f2e0f0dd7ac784e872c34f8295b01c61eaa4a4c73bd69c4e4a03174da352f6c2", 0xdd) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) sysfs$3(0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x80000087, 0x80000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) close(r1) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3b08, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040)=0x3) 03:33:59 executing program 5 (fault-call:4 fault-nth:23): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 03:33:59 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) 03:33:59 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x64000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) munlock(&(0x7f0000277000/0x4000)=nil, 0x4000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) dup3(r0, r0, 0x80000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000026c000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="450f01cf66ba4300b04dee660f38338f0f000000c744240000000100c744240200000000c7442406000000000f0114240fd18f10ba94c83e466d41f466b8bc008ee8f30f0159e60f01bb07000000", 0x4e}], 0xaaaaaaaaaaaaba6, 0x0, &(0x7f0000000180), 0x10000091) [ 359.454272] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 359.491389] FAULT_INJECTION: forcing a failure. [ 359.491389] name failslab, interval 1, probability 0, space 0, times 0 [ 359.502746] CPU: 0 PID: 14539 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 359.511272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.518874] IPVS: ftp: loaded support on port[0] = 21 [ 359.520626] Call Trace: [ 359.520657] dump_stack+0x1c9/0x2b4 [ 359.520685] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.520705] ? __kernel_text_address+0xd/0x40 [ 359.520727] ? unwind_get_return_address+0x61/0xa0 [ 359.520754] should_fail.cold.4+0xa/0x11 [ 359.550795] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.555921] ? save_stack+0x43/0xd0 [ 359.559560] ? kasan_kmalloc+0xc4/0xe0 [ 359.563460] ? kmem_cache_alloc_trace+0x152/0x730 [ 359.568319] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 359.573527] ? __list_lru_init+0x4d6/0x840 [ 359.577778] ? alloc_super+0x986/0xb20 [ 359.581677] ? graph_lock+0x170/0x170 [ 359.585490] ? legacy_get_tree+0x131/0x460 [ 359.589730] ? vfs_get_tree+0x1cb/0x5c0 [ 359.593709] ? do_mount+0x6f9/0x1e30 [ 359.597424] ? ksys_mount+0x12d/0x140 [ 359.601226] ? __x64_sys_mount+0xbe/0x150 [ 359.605380] ? find_held_lock+0x36/0x1c0 [ 359.609447] ? __lock_is_held+0xb5/0x140 [ 359.613512] ? binder_enqueue_work_ilocked+0xa8/0x2f0 [ 359.618724] ? check_same_owner+0x340/0x340 [ 359.623051] ? rcu_note_context_switch+0x680/0x680 [ 359.628002] __should_failslab+0x124/0x180 [ 359.632243] should_failslab+0x9/0x14 [ 359.636049] kmem_cache_alloc_trace+0x2b5/0x730 [ 359.640717] ? __kmalloc_node+0x33/0x70 [ 359.645184] ? __kmalloc_node+0x33/0x70 [ 359.649183] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.654217] __memcg_init_list_lru_node+0x185/0x2d0 [ 359.659243] ? kvfree_rcu+0x20/0x20 [ 359.662881] ? __kmalloc_node+0x47/0x70 [ 359.666877] __list_lru_init+0x4d6/0x840 [ 359.670947] ? list_lru_destroy+0x500/0x500 [ 359.675276] ? up_write+0x7b/0x220 [ 359.678821] ? up_read+0x110/0x110 [ 359.682362] ? down_read+0x1d0/0x1d0 [ 359.686076] ? init_wait_entry+0x1c0/0x1c0 [ 359.690315] ? prealloc_shrinker+0xe5/0x330 [ 359.694652] alloc_super+0x986/0xb20 [ 359.698402] ? destroy_unused_super.part.11+0x110/0x110 [ 359.703777] ? lock_downgrade+0x8f0/0x8f0 [ 359.707939] ? kasan_check_read+0x11/0x20 [ 359.712094] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 359.716683] ? kasan_check_write+0x14/0x20 [ 359.720921] ? do_raw_spin_lock+0xc1/0x200 [ 359.725186] sget_userns+0x276/0x860 [ 359.728904] ? get_anon_bdev+0xc0/0xc0 [ 359.732802] ? vfs_get_super+0x270/0x270 [ 359.736879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.742443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.747979] ? ns_capable_common+0x13f/0x170 [ 359.752389] ? get_anon_bdev+0xc0/0xc0 [ 359.756279] sget+0x10b/0x150 [ 359.759389] ? ovl_show_options+0x550/0x550 [ 359.763711] mount_nodev+0x38/0x120 [ 359.767343] ? ovl_own_xattr_set+0x10/0x10 [ 359.771579] ovl_mount+0x34/0x40 [ 359.774952] legacy_get_tree+0x131/0x460 [ 359.779349] vfs_get_tree+0x1cb/0x5c0 [ 359.783166] do_mount+0x6f9/0x1e30 [ 359.786720] ? rcu_is_watching+0x8c/0x150 [ 359.790870] ? trace_hardirqs_on+0xbd/0x2c0 [ 359.795202] ? copy_mount_string+0x40/0x40 [ 359.799444] ? copy_mount_options+0x5f/0x380 [ 359.803856] ? kmem_cache_alloc_trace+0x324/0x730 [ 359.808709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.814249] ? _copy_from_user+0xdf/0x150 [ 359.818411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.823950] ? copy_mount_options+0x285/0x380 [ 359.828451] ksys_mount+0x12d/0x140 [ 359.832085] __x64_sys_mount+0xbe/0x150 [ 359.836066] do_syscall_64+0x1b9/0x820 [ 359.839957] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.845326] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.850260] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 359.855282] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.860299] ? recalc_sigpending_tsk+0x180/0x180 [ 359.865058] ? kasan_check_write+0x14/0x20 [ 359.869300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.874162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.879360] RIP: 0033:0x457099 [ 359.882560] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 359.901461] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.909184] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 359.916451] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 359.923718] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 359.930983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 359.938250] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000017 03:34:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x8000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:00 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3d9b1a42}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0), 0x0) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xfffffffffffffd7f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/77) 03:34:00 executing program 5 (fault-call:4 fault-nth:24): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f00000001c0)=0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r2, &(0x7f0000000200)={0xfe, 0x0, "2ba40e51e4dcdf04374153af4299da02674fcbbd30f17b18547ba3e37ee879db02226b29096579a9fb011e52e5aacf0c68e7202dd52c1c037deb8d08a9c9c73dafc877171d8826e87442bfb5553152d622f677e83c1e6a56252eb3ab373ec10ad740f7720f06803896359913201c0c9073b98d109f3677db02ea246f4aba7f73c3508d533c5bd9c2179616cd5aff9320ae13e21e9b5a416acbd580418539168ef589ad5050616b1af2115f9cb0178afe0d0585a67b33c67193b009dc9666c3ba05284c79a4a621566f1f19a3f82b069683c92ca4cdc8434e29d01cfcf52faa4fc80a847b6ad8e0ffb0ace4eed89357352a3f8aa988cc"}, 0x428a00) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10000, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x187fe, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000001b80)=0x2ebb, 0x4) sendmmsg(r1, &(0x7f0000004880)=[{{&(0x7f0000000100)=@sco={0x1f, {0x80, 0x40, 0xcaa1, 0xffffffffffffff81, 0xfffffffffffffa9c, 0x9}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000300)=[{0x38, 0xff, 0x10, "9de7ef3bf7667cedf8ca17d222cc0766dc9f7c05f2bbd0acd67fd3094e98955165730d3071"}, {0xf8, 0x116, 0x3, "ec086f111e15f6a0d09bd65221a755884d0667125369c97c6a5898792060947fedb8c1305b218b64f21e0dc7c50ff3c83a5e552785e677e1b9b43f6dbee3ffeea8740dbe708133f467ab0d27fc2e0d16d5181cb2d3bf69058e1d10bfa61dc8682dba61cd44b17f067c75ba2848f80f62e93b1b1a75294dad72fb19cbe83728b342a4391e9d265634161f56153ae3d381a28440924f15654fa19f6d9f935cc826803748c923c2e472c40897b6050fc2c001f7897e306ff268737416a2ac6edc46890b35ec8aba232cbccd433610e86d7f4c90ae6ebc4fa7b24ce50160b34121d4d5d20979c7f47338"}, {0xa8, 0x10b, 0xffffffff, "ce1b945a6d5fb42bbef9ae0b7103be5bcbecb62b720bde15fb444108be0819dd9b2d2193e12dd944a01a5f561dff6524ef393bde0b3b1fadcaccf7838af7d6f5e09ab146b9189e554c89cfe634bfad6d5ba7be7dad7acdd45c794e57b87bb81444364c831e18d6f5c7a76ff25ea42955788b95d6ff1b5b780f53c6cbdc4a4b55bc0eae7d5586bdfbf43ed7ed9910398b7d85901b5e0c0e"}, {0xf8, 0x10d, 0x1, "0eb9073ef2b6bdd9f4e8fbce1b29e7b4a6848568459899a52adf91532504110c72ecb48ec1fec76155d7cd457d62625f301f9f4d624ca9f9e1991bd1329401a8e5d96f44d0f50c3f05590bd969d456825a7554248da22422016884e4a9e1a78489a719929b00a0f6ffc961c1b652f0c1df52c6e7a9b31348de6727bb137e2c19c90e16c4964e8b65fc2aaa7bc2294425c909e0193ebb8f964a26d7429d4c142b30a15af934eac49cefc48af1d37671e58c6c1766ee1e2956d7687c8525217b8c18ac08decb4209fb503743c0ebc933592dec54b9ef29166efcf840650c3ba8e254124158"}, {0x1010, 0x11e, 0xfb7, "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"}, {0xb0, 0x102, 0x10000, "f5d08db11d247427b9b59d61db82a68c0f2c0306f74b4335460e18b229234465350d86a9ccec0d3e512c9fdd70c432b626d34ce8b7cebb3928dcee5b0f8c5b94d8214c084f2a348f6639457206b3fc9ef60b63c2e4a7fd903c9568d90b68968b5afda106b2bb76c5be75bdc6bb95748e7e73241c6ffb6e667160c1ebe24e2c9f1d94a7f250b7e56aed3a1140f21fd7d4f41b83068527935ac326"}, {0x20, 0x119, 0x3, "729b16693b6d044274ceff"}, {0x40, 0x108, 0x6, "5abac1ee5131841efeedd2c5784543812332f054da22c5c202d15f0b589d093686f07669989a29ab34"}], 0x13f0, 0x4000}, 0x96}, {{&(0x7f0000001700)=@nfc_llcp={0x27, 0x0, 0x2, 0x0, 0xfff, 0x9, "92a0f5c661d1c4f81a2b39bfb0f08104a2da1a11d24c17aed027e2ae3ba4ca9682e06db57f1132fbfb698ed77617a49af91947129c2bcfcecfeec5a16c6318", 0x37}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001780)="d22e7032847f8c98a1c9c5c0a85cff2199be8e537a98155c7ab0728aa2a4e6dec16f36965fc35859e4bae48a41696c3bae1b848e5d3f626a2b60611ad1ee418f151aee1b236dd460aa28fc32ddecd024ff4246709ccce69e46f90cf5fd76f46843d0de095f4a2273b26594c6cae6d83154df2b1e22e472e24b178cd29dfb6b518954bb2dc854f889112e0056afed5669ec63786ce95128d4e5c560aeb2ff0089afb22e0fb18e23a74767f013e0c86f7f9f0c28", 0xb3}, {&(0x7f0000001840)="8601d08b7ce4de0737164be3248a9a905ad7913ce41d1d99bc542141a156d37178aabb78be5b356ee124db9b32447b8b75e0c8b86f3adbc91c968bc0ce6c9b857af553493beecbb74a3f8fbc59d7fe03ce697f1725a78b93684e686f8f4bb42a0b9bc5a4cfbd0beb924530b270b877befe4b6a01593e76afe2380b614ca65a91797e2c30a39c58fda294189d77941bb9d43a8b7769b045057ea7c95a8df5ce200cca6b0debe1dada7d0cb9681c51d83257409be7ffbfb0733bb3dd00969a9fd4d8a0e6d78203c2394d4a9116ca0d6d4e838f77f30add898265588b9a94ae4d9f29eca59435857e43481a8fd4b76163a1c5", 0xf1}, {&(0x7f0000001940)="bd6b204e1569c41db77184808d71443506f1dabe1d99d959ce1645d476a400be5d425c234ab93a7dd47864bc561dd9639cf076bba2f3db11b80aee6d9b23defd2a38054f81ce0d185b219f25c76225fa93253a166f0b1325917168708ef95d6c27487214a6d0a356c6ec78f4ca303a430f3fd3c553183fea733126cf3cdee7dc529fe5ee99ceeafa49f398e4737d5c9dfc54a805875950b0fb46c0a2a416aafcff728b1e9f0ff830ec8ec88f685ead16df88f1dab950d6398c11745ab8ad9431ce933ed9fc16cb48", 0xc8}, {&(0x7f0000001a40)="ee8fd2f00d72a1639752fd221397f55df72dbd5acb61c36c2e75fc6616a4284dcfb8aff0d80ddbcbca127a737ab6b81c21ffd315a2c712724f67485dd545542d49400c88c0bdbbe115b65939a22716bba6f440d7d9fcd1d8b3ef71780478f0fbb7b6c2bc8c90fa3dc875d30ef6ab9ccd5d46674bdab94bdecd248e56537ea15c174180e93eabdd3706d931813c280db0c3cc0fca150e73eeaa950e183c183463ee725f85da500550aa2bf1b3c7e0607dd2cb5b6d1f612dd88f197459e14147a39e7af756a637870ec61275691c3fc47e0ec53c36ccd7d81ec59b13191e1c97cb3a97f760e6eaca2ad55d", 0xea}], 0x4, &(0x7f0000004980)=ANY=[@ANYBLOB="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"], 0x398, 0x4}, 0x1525}, {{&(0x7f0000001f40)=@llc={0x1a, 0x33a, 0x2, 0x0, 0x9, 0x1, @dev={[], 0xa}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001fc0)="775e55c72b0e020d3e786dcc43aeb53c980475955c740b421d19a18054a8cf89c6bf87445af4d2e168c60b818ccec3d500c12f4989e0187911c2961ef13f18fa514e3a020f8411ee2c27ff39326ae77b0bfb95f416b79dadeb1a2b1a0171c02c9cce4edcfa4fb139da83d24a164be10f7a9a1da00fb4cc", 0x77}, {&(0x7f0000002040)="5c90869e73b4e1aae4", 0x9}, {&(0x7f0000002080)="e6cb9069bc67e6a58bc4a86c56ea847a45d75388ddcb4c06174f74c97fd1ef94520ca96d7e886c917fc52439b87a05937811b5644657d19e52e7754954c883a4343f1be974247643c4227294a4f13b60b5a4a12ec9017a70099bfe1109cfeb3184caee501308170882903e377639fbfafafc2cb838cca3b641ab9834004119a522e5c741833216c59094a39aac5d08e3a8cc44cd637c93b5abc084cbfbffadcf72e098db73501af6f7335fd6", 0xac}, {&(0x7f0000002140)="e306647d7e956feb2d34be1d11edf47fd95c424df03bf080d58b892fc38cd81143636b9f39e3417b1fb8693a465127842c3b1c05570dc105aba5a932447aaeec60cf721df2a291fbde354ac3d9bdd4d5834575fae109d60ec3d7704d3d404b79dc59ec66336ebbeeadba582296bf6c524cd6426df165f2cb5f671c3dc2003cb0a17866996ada67875088eab30f410bbc731ddbc50575966234fd7fbe3de35fcfb21320400fee4463242c94285e6b41dd9e16cf0f1160ab0b268197de5088493351cee96f2eb9f13e9537fc9d219cab9bc9", 0xd1}, {&(0x7f0000002240)="27d40530e87534c4607268969b3c6f710166e701c4be6c7fc5218093a579133c7ce1e0cada0805930028799a57", 0x2d}, {&(0x7f0000002280)="56a5019760a9bff5143fb6543335319523bb7503eee76321fbbaea58aa17b00c41dc0f005f4c03", 0x27}, {&(0x7f00000022c0)="b7e71350a2e30d0526ef305b516eb0dcad9b8f6f5936a6d7616ad4346c69b988d5a3be42383929732e60beb4350cf22247b5edfd573790fffb1626be29be87404fd08bca8513666da126d529c554b78ad624f0f9c15c980c67638b8c04eb8b9efb8b62da53e96cb4f1b368600285d0af50c088c288e42295fc34d6e8df2aa2eebf0cb67da489fd77d5e9ef", 0x8b}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="684d00e5b04844cf5c683446061beced07e7104b3f57ae72d7", 0x19}, {&(0x7f00000033c0)="1dffc7141bd62cbd28f7488fc8c4fe88f745b39e078c608985f9874ea1791068949826b74fa9da2b2a4f38990dcd15cb2f004cca9d858110632e88e3f5a8d6bc172b472d23e6d5ba85975991acf43a77a0486f9fe0d04f8c9699356581853d79134de8f64f4b3be8629d530ad9a3cb7b355a150ce02ecb2444606e5d07e6724cdb77f9e2b0ef95583b02b4237a64544fd3bbf12497af0bef929471d0b1cfe18ddba2ce2ae2a6262ea1dbe235653f54c5d19ed9b69b4ce1608bb06b6c465b", 0xbe}], 0xa, &(0x7f0000003540)=[{0xa0, 0x29, 0x2, "47865af6dd539e824bcf324e69db2620b9e40381afad677614053530a20c0b2cd948bfebbc0aea9c51faf6e018979460a13491d530680da73b182f64ff29f6c492a68212e2cce19ee45307c8079c23f89b1ef7d39364f9c91ae5a79b677cefe94173b380ada260707c655801c2a9de4fbf25ad1f4ef54a4dc5c56aa2b32cff3694e3be66a03692bb99"}], 0xa0, 0x8080}, 0x6}, {{&(0x7f0000003600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x1, 0x1, 0x1, {0xa, 0x4e20, 0xfffffffffffffffd, @ipv4={[], [], @local}, 0x1}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)="04c40b05a018ef70b1354ea955224cda5ad892119b2361719cca246c77fb3ccfb42a72e0bb8dbfa74ab062a6900a18ccddf0eb9fb95cf40e35d38b09e094a5b053b599149dda54089d62676e37428b1486ed946e3d9a26f5847f44eed429b9a33ce0046b87629adbca03d091634b36d5010801fa74b606c0de559937d291c9509e5ab58090a3c01053620b846e0d95e249b9a5e55400b380ef296468be6078aad03eb7c376d302374d246eec7889e5b359e672f1221f1c8de2665410363acdad7aeef384ada86be6", 0xc8}], 0x1, &(0x7f00000037c0)=[{0x1010, 0x0, 0x3ff, "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"}, {0xb0, 0x104, 0x8, "8c9937cde30f86cadc4e6faea5f964209cddb156393a6fbc9abcbc58e5712995a50d98790b9341e4721bf92b43c03e53d2913409fafe29d1e491e36b2c49332ddbca551a6f914518f32147f7cb3693c67cdb2016ef39330e1c93ff0cd583b6951a18beca75c769bf95b84c72e6f845fc95b1351d2f16e15bbcf59bf98b571062f89e7f098e03fdba66e4fc8e79f2fd306991898845b6b2580bf8e4"}], 0x10c0, 0x80}, 0x8}], 0x4, 0x4000000) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000080)) [ 360.268021] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:34:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x6, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) fcntl$setstatus(r1, 0x4, 0x4000) 03:34:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = dup3(r1, r1, 0x80000) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x76) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000380)={0x0, 0xffffffff}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5, 0xfffffffffffff801}, &(0x7f00000004c0)=0x8) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000040)=0x80000001) close(r0) 03:34:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 360.387380] IPVS: ftp: loaded support on port[0] = 21 [ 360.401347] FAULT_INJECTION: forcing a failure. [ 360.401347] name failslab, interval 1, probability 0, space 0, times 0 [ 360.412736] CPU: 0 PID: 14573 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 360.421241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.430604] Call Trace: [ 360.433225] dump_stack+0x1c9/0x2b4 03:34:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fsync(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x15620fea8e356232}, 0x20000810) [ 360.436882] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.442093] ? __kernel_text_address+0xd/0x40 [ 360.446608] ? unwind_get_return_address+0x61/0xa0 [ 360.451570] should_fail.cold.4+0xa/0x11 [ 360.455655] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.460788] ? save_stack+0x43/0xd0 [ 360.464422] ? kasan_kmalloc+0xc4/0xe0 [ 360.468315] ? kmem_cache_alloc_trace+0x152/0x730 [ 360.473181] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 360.478379] ? __list_lru_init+0x4d6/0x840 [ 360.482618] ? alloc_super+0x986/0xb20 [ 360.486513] ? graph_lock+0x170/0x170 [ 360.490322] ? legacy_get_tree+0x131/0x460 [ 360.494563] ? vfs_get_tree+0x1cb/0x5c0 [ 360.498543] ? do_mount+0x6f9/0x1e30 [ 360.502262] ? ksys_mount+0x12d/0x140 [ 360.506064] ? __x64_sys_mount+0xbe/0x150 [ 360.510225] ? find_held_lock+0x36/0x1c0 [ 360.514296] ? __lock_is_held+0xb5/0x140 [ 360.518365] ? tls_set_sw_offload+0x11a8/0x14e0 [ 360.523055] ? check_same_owner+0x340/0x340 [ 360.527389] ? rcu_note_context_switch+0x680/0x680 [ 360.532333] __should_failslab+0x124/0x180 [ 360.536580] should_failslab+0x9/0x14 [ 360.540389] kmem_cache_alloc_trace+0x2b5/0x730 [ 360.545060] ? __kmalloc_node+0x33/0x70 [ 360.549036] ? __kmalloc_node+0x33/0x70 [ 360.553020] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.558050] __memcg_init_list_lru_node+0x185/0x2d0 [ 360.563082] ? kvfree_rcu+0x20/0x20 [ 360.566714] ? __kmalloc_node+0x47/0x70 [ 360.570704] __list_lru_init+0x4d6/0x840 [ 360.574781] ? list_lru_destroy+0x500/0x500 [ 360.579111] ? up_write+0x7b/0x220 [ 360.582656] ? up_read+0x110/0x110 [ 360.586202] ? down_read+0x1d0/0x1d0 [ 360.589921] ? init_wait_entry+0x1c0/0x1c0 [ 360.594179] ? prealloc_shrinker+0xe5/0x330 [ 360.598513] alloc_super+0x986/0xb20 [ 360.602241] ? destroy_unused_super.part.11+0x110/0x110 [ 360.607611] ? lock_downgrade+0x8f0/0x8f0 [ 360.611769] ? kasan_check_read+0x11/0x20 [ 360.615924] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 360.620513] ? kasan_check_write+0x14/0x20 [ 360.624756] ? do_raw_spin_lock+0xc1/0x200 [ 360.628999] sget_userns+0x276/0x860 [ 360.632719] ? get_anon_bdev+0xc0/0xc0 [ 360.636613] ? vfs_get_super+0x270/0x270 [ 360.640695] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.646263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.651802] ? ns_capable_common+0x13f/0x170 [ 360.656218] ? get_anon_bdev+0xc0/0xc0 [ 360.660108] sget+0x10b/0x150 [ 360.663221] ? ovl_show_options+0x550/0x550 [ 360.667548] mount_nodev+0x38/0x120 [ 360.671200] ? ovl_own_xattr_set+0x10/0x10 [ 360.675441] ovl_mount+0x34/0x40 [ 360.678818] legacy_get_tree+0x131/0x460 [ 360.682894] vfs_get_tree+0x1cb/0x5c0 [ 360.686706] do_mount+0x6f9/0x1e30 [ 360.690252] ? rcu_is_watching+0x8c/0x150 [ 360.694399] ? trace_hardirqs_on+0xbd/0x2c0 [ 360.698727] ? copy_mount_string+0x40/0x40 [ 360.702968] ? copy_mount_options+0x5f/0x380 [ 360.707381] ? kmem_cache_alloc_trace+0x324/0x730 [ 360.712239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.717903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.723457] ? copy_mount_options+0x285/0x380 [ 360.727961] ksys_mount+0x12d/0x140 [ 360.731597] __x64_sys_mount+0xbe/0x150 [ 360.736044] do_syscall_64+0x1b9/0x820 [ 360.739953] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.745331] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.750275] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 360.755306] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.760328] ? recalc_sigpending_tsk+0x180/0x180 [ 360.765088] ? kasan_check_write+0x14/0x20 [ 360.769333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.774205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.779397] RIP: 0033:0x457099 [ 360.782594] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.801497] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.809217] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 360.816483] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 360.823751] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 360.831016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 360.838286] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000018 03:34:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000280)=0x1) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x9a2, 0x7}) mknod(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, &(0x7f00000002c0), 0x1000007ffff000) 03:34:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0xff000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r2, 0x3}, 0xffffffffffffffbe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0x4, 0x1022, 0x7, 0x2010000}) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r4) openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) clock_gettime(0x7, &(0x7f0000000600)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000500)={{0xd7, 0xaf}, {0x7fffffff, 0x2}, 0x0, 0x4, 0x157c}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x80) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/mixer\x00', 0x400000, 0x0) connect$bt_sco(r8, &(0x7f0000000b80)={0x1f, {0x0, 0x10000, 0x0, 0x0, 0x6, 0x5}}, 0x8) 03:34:01 executing program 5 (fault-call:4 fault-nth:25): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x2, 0x2259, 0x0, 0x9, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:34:01 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000003f000000040000000000000000000000000200000300000000000000000000000000000000000000000000000000000001000000030000000000060000000000080000003b630000000000000000000000000000000000005e0000000000000008000000040000000000000000000000030000000000000000000000000000000000000000000000000000"]) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) [ 361.154229] IPVS: ftp: loaded support on port[0] = 21 [ 361.182855] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 361.244356] FAULT_INJECTION: forcing a failure. [ 361.244356] name failslab, interval 1, probability 0, space 0, times 0 [ 361.255763] CPU: 1 PID: 14619 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 361.264268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.273637] Call Trace: [ 361.276262] dump_stack+0x1c9/0x2b4 [ 361.279916] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.285126] ? __kernel_text_address+0xd/0x40 [ 361.289650] ? unwind_get_return_address+0x61/0xa0 [ 361.294618] should_fail.cold.4+0xa/0x11 [ 361.298716] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.303841] ? save_stack+0x43/0xd0 [ 361.307474] ? kasan_kmalloc+0xc4/0xe0 [ 361.311370] ? kmem_cache_alloc_trace+0x152/0x730 [ 361.316219] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 361.321412] ? __list_lru_init+0x4d6/0x840 [ 361.325654] ? alloc_super+0x986/0xb20 [ 361.329551] ? graph_lock+0x170/0x170 [ 361.333359] ? legacy_get_tree+0x131/0x460 [ 361.337596] ? vfs_get_tree+0x1cb/0x5c0 [ 361.341577] ? do_mount+0x6f9/0x1e30 [ 361.345294] ? ksys_mount+0x12d/0x140 [ 361.349096] ? __x64_sys_mount+0xbe/0x150 [ 361.353252] ? find_held_lock+0x36/0x1c0 [ 361.357322] ? __lock_is_held+0xb5/0x140 [ 361.361406] ? check_same_owner+0x340/0x340 [ 361.365740] ? rcu_note_context_switch+0x680/0x680 [ 361.370690] __should_failslab+0x124/0x180 [ 361.374938] should_failslab+0x9/0x14 [ 361.378744] kmem_cache_alloc_trace+0x2b5/0x730 [ 361.383415] ? __kmalloc_node+0x33/0x70 [ 361.387392] ? __kmalloc_node+0x33/0x70 [ 361.391379] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.396411] __memcg_init_list_lru_node+0x185/0x2d0 [ 361.401438] ? kvfree_rcu+0x20/0x20 [ 361.405068] ? __kmalloc_node+0x47/0x70 [ 361.409054] __list_lru_init+0x4d6/0x840 [ 361.413125] ? list_lru_destroy+0x500/0x500 [ 361.417465] ? up_write+0x7b/0x220 [ 361.421009] ? up_read+0x110/0x110 [ 361.424555] ? down_read+0x1d0/0x1d0 [ 361.428275] ? init_wait_entry+0x1c0/0x1c0 [ 361.432515] ? prealloc_shrinker+0xe5/0x330 [ 361.436856] alloc_super+0x986/0xb20 [ 361.440577] ? destroy_unused_super.part.11+0x110/0x110 [ 361.445945] ? lock_downgrade+0x8f0/0x8f0 [ 361.450105] ? kasan_check_read+0x11/0x20 [ 361.454259] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 361.458848] ? kasan_check_write+0x14/0x20 [ 361.463087] ? do_raw_spin_lock+0xc1/0x200 [ 361.467333] sget_userns+0x276/0x860 [ 361.471048] ? get_anon_bdev+0xc0/0xc0 [ 361.474943] ? vfs_get_super+0x270/0x270 [ 361.479022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.484585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.490121] ? ns_capable_common+0x13f/0x170 [ 361.494541] ? get_anon_bdev+0xc0/0xc0 [ 361.498433] sget+0x10b/0x150 [ 361.501544] ? ovl_show_options+0x550/0x550 [ 361.505869] mount_nodev+0x38/0x120 [ 361.509505] ? ovl_own_xattr_set+0x10/0x10 [ 361.513745] ovl_mount+0x34/0x40 [ 361.517116] legacy_get_tree+0x131/0x460 [ 361.521221] vfs_get_tree+0x1cb/0x5c0 [ 361.525030] do_mount+0x6f9/0x1e30 [ 361.528570] ? rcu_is_watching+0x8c/0x150 [ 361.532720] ? trace_hardirqs_on+0xbd/0x2c0 [ 361.537047] ? copy_mount_string+0x40/0x40 [ 361.541286] ? copy_mount_options+0x5f/0x380 [ 361.545706] ? kmem_cache_alloc_trace+0x324/0x730 [ 361.550560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.556106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.561646] ? copy_mount_options+0x285/0x380 [ 361.566161] ksys_mount+0x12d/0x140 [ 361.569796] __x64_sys_mount+0xbe/0x150 [ 361.573776] do_syscall_64+0x1b9/0x820 [ 361.577679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.583046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.587978] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 361.593019] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.598039] ? recalc_sigpending_tsk+0x180/0x180 [ 361.602800] ? kasan_check_write+0x14/0x20 [ 361.607040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.611894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.617081] RIP: 0033:0x457099 [ 361.620284] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x64000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 361.639196] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.647192] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 361.654463] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 361.661737] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 361.669006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 361.676277] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000019 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1}) close(r1) 03:34:01 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000200)=0x5) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r1) 03:34:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 361.950377] IPVS: ftp: loaded support on port[0] = 21 03:34:02 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x3ff, 0x0, @link_local}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) 03:34:02 executing program 5 (fault-call:4 fault-nth:26): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x81}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x103100, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 03:34:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x19) accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) [ 362.238629] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 362.329034] FAULT_INJECTION: forcing a failure. [ 362.329034] name failslab, interval 1, probability 0, space 0, times 0 [ 362.340520] CPU: 1 PID: 14679 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 362.349021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.358377] Call Trace: [ 362.360978] dump_stack+0x1c9/0x2b4 [ 362.364622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.369828] ? graph_lock+0x170/0x170 [ 362.373652] should_fail.cold.4+0xa/0x11 [ 362.377736] ? __list_lru_init+0x4d6/0x840 [ 362.381993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.387111] ? find_held_lock+0x36/0x1c0 [ 362.391189] ? graph_lock+0x170/0x170 [ 362.394982] ? lock_downgrade+0x8f0/0x8f0 [ 362.399138] ? find_held_lock+0x36/0x1c0 [ 362.403222] ? __lock_is_held+0xb5/0x140 [ 362.407286] ? check_same_owner+0x340/0x340 [ 362.411614] ? rcu_note_context_switch+0x680/0x680 [ 362.416572] __should_failslab+0x124/0x180 [ 362.420817] should_failslab+0x9/0x14 [ 362.424630] __kmalloc+0x2b2/0x720 [ 362.428196] ? kvfree_rcu+0x20/0x20 [ 362.431837] ? __list_lru_init+0x151/0x840 [ 362.436069] __list_lru_init+0x151/0x840 [ 362.440142] ? list_lru_destroy+0x500/0x500 [ 362.444524] ? up_write+0x7b/0x220 [ 362.448082] ? down_read+0x1d0/0x1d0 [ 362.451810] ? init_wait_entry+0x1c0/0x1c0 [ 362.456080] ? prealloc_shrinker+0xe5/0x330 [ 362.460411] alloc_super+0x9b6/0xb20 [ 362.464141] ? destroy_unused_super.part.11+0x110/0x110 [ 362.469550] ? lock_downgrade+0x8f0/0x8f0 [ 362.473726] ? kasan_check_read+0x11/0x20 [ 362.477871] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 362.482458] ? kasan_check_write+0x14/0x20 [ 362.486710] ? do_raw_spin_lock+0xc1/0x200 [ 362.490978] sget_userns+0x276/0x860 [ 362.494710] ? get_anon_bdev+0xc0/0xc0 [ 362.498622] ? vfs_get_super+0x270/0x270 [ 362.502699] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.508261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.513805] ? ns_capable_common+0x13f/0x170 [ 362.518220] ? get_anon_bdev+0xc0/0xc0 [ 362.522114] sget+0x10b/0x150 [ 362.525272] ? ovl_show_options+0x550/0x550 [ 362.529588] mount_nodev+0x38/0x120 [ 362.533218] ? ovl_own_xattr_set+0x10/0x10 [ 362.537460] ovl_mount+0x34/0x40 [ 362.540838] legacy_get_tree+0x131/0x460 [ 362.544915] vfs_get_tree+0x1cb/0x5c0 [ 362.548735] do_mount+0x6f9/0x1e30 [ 362.552289] ? rcu_is_watching+0x8c/0x150 [ 362.556443] ? trace_hardirqs_on+0xbd/0x2c0 [ 362.560785] ? copy_mount_string+0x40/0x40 [ 362.565037] ? copy_mount_options+0x5f/0x380 [ 362.569454] ? kmem_cache_alloc_trace+0x324/0x730 [ 362.574315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.579861] ? _copy_from_user+0xdf/0x150 [ 362.584026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.589570] ? copy_mount_options+0x285/0x380 [ 362.594081] ksys_mount+0x12d/0x140 [ 362.597718] __x64_sys_mount+0xbe/0x150 [ 362.601709] do_syscall_64+0x1b9/0x820 [ 362.605605] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 362.610976] ? syscall_return_slowpath+0x5e0/0x5e0 [ 362.615941] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 362.620970] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 362.625995] ? recalc_sigpending_tsk+0x180/0x180 [ 362.630761] ? kasan_check_write+0x14/0x20 [ 362.635008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.639874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.645065] RIP: 0033:0x457099 [ 362.648274] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.667186] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:34:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:02 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x8}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 362.674892] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 362.682179] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 362.689457] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 362.696725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 362.703993] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001a 03:34:02 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x833, r0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x208000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) 03:34:02 executing program 0: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x0, 0x0, [0x5ea2]}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002800030014000200007064647030000000000000000000000800040000000000080001000000000014000100080009"], 0x3}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/215, &(0x7f0000000280)=0xd7) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x0, @ipv4}]}]}, 0xffce}}, 0x0) [ 362.965115] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 362.972898] netlink: 65342 bytes leftover after parsing attributes in process `syz-executor0'. 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x8000, {{0xa, 0x4e22, 0x5, @empty, 0x4}}}, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x701000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)="400e283a76626f786e65743000", r1}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x9) 03:34:04 executing program 0: personality(0x1bb2baf3005ac137) r0 = socket$inet6(0xa, 0x1080000000002, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0xffffffffffff7fff, 0x6) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") mprotect(&(0x7f0000305000/0x3000)=nil, 0x3000, 0x5) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x200000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0xffffffffffffff01, 0x4) 03:34:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80, 0xfffffffffffffffc}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:34:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) 03:34:04 executing program 5 (fault-call:4 fault-nth:27): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:04 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x0) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0xa, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0xffff, 0x1}}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f9122d5bfa7d3c72368a9250c212817b000000000000003e56cc4b6df0872ac4b9b61cc016dc9c3a42"], 0x1}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fchdir(r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 03:34:04 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x800000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 364.271058] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 364.352757] FAULT_INJECTION: forcing a failure. [ 364.352757] name failslab, interval 1, probability 0, space 0, times 0 [ 364.364106] CPU: 0 PID: 14745 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 364.372621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.381984] Call Trace: [ 364.384593] dump_stack+0x1c9/0x2b4 [ 364.388242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.393468] should_fail.cold.4+0xa/0x11 [ 364.397557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.402699] ? graph_lock+0x170/0x170 [ 364.406520] ? save_stack+0x43/0xd0 [ 364.410167] ? kasan_kmalloc+0xc4/0xe0 [ 364.414067] ? __kmalloc+0x14e/0x720 [ 364.417790] ? find_held_lock+0x36/0x1c0 [ 364.421869] ? __lock_is_held+0xb5/0x140 [ 364.425956] ? check_same_owner+0x340/0x340 [ 364.430315] ? rcu_note_context_switch+0x680/0x680 [ 364.435259] __should_failslab+0x124/0x180 [ 364.439504] should_failslab+0x9/0x14 [ 364.443338] kmem_cache_alloc_node_trace+0x259/0x720 [ 364.448465] __kmalloc_node+0x33/0x70 [ 364.452278] kvmalloc_node+0x65/0xf0 [ 364.456019] __list_lru_init+0x5d9/0x840 [ 364.460092] ? list_lru_destroy+0x500/0x500 [ 364.464437] ? up_write+0x7b/0x220 [ 364.467985] ? down_read+0x1d0/0x1d0 [ 364.471710] ? init_wait_entry+0x1c0/0x1c0 [ 364.475953] ? prealloc_shrinker+0xe5/0x330 [ 364.480290] alloc_super+0x9b6/0xb20 [ 364.484020] ? destroy_unused_super.part.11+0x110/0x110 [ 364.489395] ? lock_downgrade+0x8f0/0x8f0 [ 364.493561] ? kasan_check_read+0x11/0x20 [ 364.497722] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 364.502314] ? kasan_check_write+0x14/0x20 [ 364.506555] ? do_raw_spin_lock+0xc1/0x200 [ 364.510802] sget_userns+0x276/0x860 [ 364.514523] ? get_anon_bdev+0xc0/0xc0 [ 364.518426] ? vfs_get_super+0x270/0x270 [ 364.522514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.528089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.533630] ? ns_capable_common+0x13f/0x170 [ 364.538041] ? get_anon_bdev+0xc0/0xc0 [ 364.541927] sget+0x10b/0x150 [ 364.545049] ? ovl_show_options+0x550/0x550 [ 364.549375] mount_nodev+0x38/0x120 [ 364.553045] ? ovl_own_xattr_set+0x10/0x10 [ 364.557284] ovl_mount+0x34/0x40 [ 364.560659] legacy_get_tree+0x131/0x460 [ 364.564743] vfs_get_tree+0x1cb/0x5c0 [ 364.568551] do_mount+0x6f9/0x1e30 [ 364.572096] ? rcu_is_watching+0x8c/0x150 [ 364.576254] ? copy_mount_string+0x40/0x40 [ 364.580503] ? retint_kernel+0x10/0x10 [ 364.584406] ? copy_mount_options+0x1f0/0x380 [ 364.588906] ? copy_mount_options+0x206/0x380 [ 364.593408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.598952] ? copy_mount_options+0x285/0x380 [ 364.603456] ksys_mount+0x12d/0x140 [ 364.607087] __x64_sys_mount+0xbe/0x150 [ 364.611073] do_syscall_64+0x1b9/0x820 [ 364.614966] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.620337] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.625272] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 364.630310] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 364.635359] ? recalc_sigpending_tsk+0x180/0x180 [ 364.640117] ? kasan_check_write+0x14/0x20 [ 364.644821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.649675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.654866] RIP: 0033:0x457099 [ 364.658067] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.676968] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.684684] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 364.691952] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:34:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}}, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31b9b7a7597c93649c2e31139927b62d5f6b2872540a4b3363223ecf4d9e1d3fa3e4bdfb41838206c17a8cb1604a95fc06672f3461b8c1de32d183f568e571324ff4a062ee93b30e9a6ab44bc01bbd"], 0x1a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") writev(r0, &(0x7f0000002a40)=[{&(0x7f0000007380)="580000001200852a1e00add463323b470c458c5603067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa800000000ff000080000efffeffe809000000fff5dd00001210000100090a100041040000", 0x58}], 0x1) 03:34:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$inet_dccp(0x2, 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000700b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x2, &(0x7f0000000380), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0xffff, 0x3}, &(0x7f0000000200)=0x8) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1) [ 364.699224] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 364.706495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 364.713765] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001b 03:34:04 executing program 5 (fault-call:4 fault-nth:28): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:04 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x5a010000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0xfffffffffffffffa) sched_setscheduler(r1, 0x5, &(0x7f0000000140)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x3, &(0x7f00000002c0)=""/99}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) accept$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000100)=0x60) 03:34:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) 03:34:05 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x0) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0xa, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0xffff, 0x1}}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f9122d5bfa7d3c72368a9250c212817b000000000000003e56cc4b6df0872ac4b9b61cc016dc9c3a42"], 0x1}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fchdir(r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0xff00}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:34:05 executing program 0: add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf73505bb401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000080), &(0x7f0000000000), 0xfffff, 0xfffffffffffffffd) r0 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0xfc, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x101, 0xf1}, &(0x7f0000000240)=0xc) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x220001) 03:34:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000580)={0x8, &(0x7f0000000480)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x26, @time}) r3 = socket(0x4, 0x2, 0x707) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x1f, r5, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x800, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'port1\x00'}}, {@access_any='access=any'}, {@fscache='fscache'}, {@mmap='mmap'}, {@afid={'afid', 0x3d, 0x400}}, {@privport='privport'}, {@posixacl='posixacl'}, {@version_u='version=9p2000.u'}]}}) clock_adjtime(0x0, &(0x7f0000000380)={0x3, 0x80000000, 0x400, 0x20, 0x5, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb7, 0xce03, 0x0, 0x81, 0x8, 0x100, 0x2, 0x1, 0x0, 0x1351c9d7, 0x80000001, 0x1ff, 0x1, 0x5, 0x8, 0x4, 0x7fff, 0x7fff, 0x1}) close(r1) dup(r2) [ 365.105667] attempt to access beyond end of device [ 365.110706] loop3: rw=1, want=114, limit=112 [ 365.115198] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 365.216040] attempt to access beyond end of device [ 365.221287] loop3: rw=1, want=115, limit=112 [ 365.225824] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 365.254830] attempt to access beyond end of device [ 365.260051] loop3: rw=1, want=116, limit=112 [ 365.263834] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 365.264555] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 365.307782] FAULT_INJECTION: forcing a failure. [ 365.307782] name failslab, interval 1, probability 0, space 0, times 0 [ 365.318097] attempt to access beyond end of device [ 365.319120] CPU: 1 PID: 14815 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 365.324068] loop3: rw=1, want=117, limit=112 [ 365.332523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.332531] Call Trace: [ 365.332559] dump_stack+0x1c9/0x2b4 [ 365.332584] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.337013] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 365.346339] ? __kernel_text_address+0xd/0x40 [ 365.346358] ? unwind_get_return_address+0x61/0xa0 [ 365.346387] should_fail.cold.4+0xa/0x11 [ 365.350999] attempt to access beyond end of device [ 365.352574] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.352600] ? save_stack+0x43/0xd0 [ 365.352615] ? kasan_kmalloc+0xc4/0xe0 [ 365.352631] ? kmem_cache_alloc_trace+0x152/0x730 [ 365.352650] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 365.352666] ? __list_lru_init+0x4d6/0x840 [ 365.352690] ? alloc_super+0x986/0xb20 [ 365.357886] loop3: rw=1, want=130, limit=112 [ 365.365647] ? graph_lock+0x170/0x170 [ 365.365663] ? legacy_get_tree+0x131/0x460 [ 365.365687] ? vfs_get_tree+0x1cb/0x5c0 [ 365.370198] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 365.375083] ? do_mount+0x6f9/0x1e30 [ 365.375096] ? ksys_mount+0x12d/0x140 [ 365.375114] ? __x64_sys_mount+0xbe/0x150 [ 365.379420] attempt to access beyond end of device [ 365.384088] ? find_held_lock+0x36/0x1c0 [ 365.384109] ? __lock_is_held+0xb5/0x140 [ 365.384142] ? check_same_owner+0x340/0x340 [ 365.384174] ? rcu_note_context_switch+0x680/0x680 [ 365.384199] __should_failslab+0x124/0x180 [ 365.384218] should_failslab+0x9/0x14 [ 365.389330] loop3: rw=1, want=131, limit=112 [ 365.392933] kmem_cache_alloc_trace+0x2b5/0x730 [ 365.392948] ? __kmalloc_node+0x33/0x70 [ 365.392965] ? __kmalloc_node+0x33/0x70 [ 365.396861] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 365.401678] ? rcu_read_lock_sched_held+0x108/0x120 [ 365.401702] __memcg_init_list_lru_node+0x185/0x2d0 [ 365.407127] attempt to access beyond end of device [ 365.411102] ? kvfree_rcu+0x20/0x20 [ 365.411117] ? __kmalloc_node+0x47/0x70 [ 365.411142] __list_lru_init+0x4d6/0x840 [ 365.411174] ? list_lru_destroy+0x500/0x500 [ 365.411198] ? up_write+0x7b/0x220 [ 365.411214] ? up_read+0x110/0x110 [ 365.411233] ? down_read+0x1d0/0x1d0 [ 365.415129] loop3: rw=1, want=132, limit=112 [ 365.419514] ? init_wait_entry+0x1c0/0x1c0 [ 365.419533] ? prealloc_shrinker+0xe5/0x330 [ 365.419558] alloc_super+0x986/0xb20 [ 365.423361] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 365.427566] ? destroy_unused_super.part.11+0x110/0x110 [ 365.427589] ? lock_downgrade+0x8f0/0x8f0 [ 365.431796] attempt to access beyond end of device [ 365.439360] ? kasan_check_read+0x11/0x20 [ 365.439379] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 365.439398] ? kasan_check_write+0x14/0x20 [ 365.439414] ? do_raw_spin_lock+0xc1/0x200 [ 365.439436] sget_userns+0x276/0x860 [ 365.439449] ? get_anon_bdev+0xc0/0xc0 [ 365.439469] ? vfs_get_super+0x270/0x270 [ 365.443203] loop3: rw=1, want=133, limit=112 [ 365.446981] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.447023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.451162] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 365.456056] ? ns_capable_common+0x13f/0x170 [ 365.456073] ? get_anon_bdev+0xc0/0xc0 [ 365.456090] sget+0x10b/0x150 [ 365.463748] attempt to access beyond end of device [ 365.464214] ? ovl_show_options+0x550/0x550 [ 365.464231] mount_nodev+0x38/0x120 [ 365.464253] ? ovl_own_xattr_set+0x10/0x10 [ 365.464268] ovl_mount+0x34/0x40 [ 365.464288] legacy_get_tree+0x131/0x460 [ 365.468647] loop3: rw=1, want=2174, limit=112 [ 365.473523] vfs_get_tree+0x1cb/0x5c0 [ 365.473548] do_mount+0x6f9/0x1e30 [ 365.686606] ? rcu_is_watching+0x8c/0x150 [ 365.690759] ? trace_hardirqs_on+0xbd/0x2c0 [ 365.695094] ? copy_mount_string+0x40/0x40 [ 365.699337] ? copy_mount_options+0x5f/0x380 [ 365.703752] ? kmem_cache_alloc_trace+0x324/0x730 [ 365.708608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.714164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.719722] ? copy_mount_options+0x285/0x380 [ 365.724227] ksys_mount+0x12d/0x140 [ 365.727862] __x64_sys_mount+0xbe/0x150 [ 365.731845] do_syscall_64+0x1b9/0x820 [ 365.735738] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 365.741126] ? syscall_return_slowpath+0x5e0/0x5e0 [ 365.746067] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 365.751091] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 365.756109] ? recalc_sigpending_tsk+0x180/0x180 [ 365.760867] ? kasan_check_write+0x14/0x20 [ 365.765111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.769966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.775161] RIP: 0033:0x457099 [ 365.778873] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.797771] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:34:05 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) rmdir(&(0x7f0000000080)='./file0/bus\x00') write$cgroup_pid(r1, &(0x7f0000000340), 0x12) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x800004, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000013c0)=""/4096) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r4, 0x15) 03:34:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4a082, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000180)={0x4c, 0x3, 0x0, {0x6, 0x2b, 0x0, '-wlan0-posix_acl_access-md5sumnodev-trusted'}}, 0x4c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x47038b05}, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/241, &(0x7f0000000040)=0xf1) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e24, 0x7, @loopback, 0x9}, {0xa, 0x4e22, 0x9, @mcast2, 0x3}, 0x5f8f, [0x1000, 0x6, 0x7f, 0x1f, 0x6, 0x7, 0x2, 0x5]}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28, &(0x7f0000000200)}, 0x10) 03:34:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) [ 365.805486] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 365.812757] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 365.820022] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 365.827289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 365.834556] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001c 03:34:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x5a01}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x26f, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000015c0)='keyring\x00', &(0x7f0000001600)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001540)=[{&(0x7f0000000280)="1a9d9ec1af51a2f936eeef8bf8c5fe3b0a6c6e15dcecbeee89249d92ec9e3bf4d99db3a53cac19c31faae3cd49af62709acc0bc5a95bb998614430cff2d9588dc8fbb17438f0d66a5d8afb4e73c3a4fbf187c5cd8a8b55bf69eebaadf27471fe4a95b762b18c8a679e09283e18248ea17b94a7a7e2dadc4095fb0292f354bcbf7cfa66728c0d26fa8f183252cd", 0x8d}, {&(0x7f0000000340)="b21695339503ba4a509432f3edd6c406cf1bb7ab9e4045a4a8d4157eaef8a455ab5fc28ecae5c563e7a8f2c86376e710be289c7f19a2ce62226b8b712edd01651957", 0x42}, {&(0x7f00000003c0)="04c1d967332a6e166bd16e2b61be0727a9c1c49a8317274e43391adf8019eed2c0b3f95d29fe8c510ff3c42cbc9121c7eaf147313771df58696885c673e359fcf500b7667dcbc3a65e5f89747b9a45fae97d53db9532fb3474f1001c35966023e83c23b56729159a805700df98dc1c11dd44271dacdfda5c737ccc40ebaf9d2679940ac1f36a5a01dd4a29a7bdda09695058ee93096f670f6295de4149c322bc867c03bef012f27a560fb782501bfb665d15f9f221bead772285eecbf2b4af748fbed1f316dcb5753564beba8937274a", 0xd0}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="75087b0cd6193945ee6dc1c46dc5331cc1bde011e221020755bdc264a73145bdf3d6f147492ea98c25a31dc608ca40928e3eacb8943819631bce1012e7c20b588ca8b823c9c4ae9d92c8e3fe132be7add76cdc3aab15605d61931974060fac22dc3f0595a551b70f87c670d5a65dc32d30a1", 0x72}], 0x5, r2) 03:34:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x8, 0xffffffffffffff88}, 'port1\x00', 0xb4617dbc23d4fa3e, 0x40, 0xfc60, 0x5, 0x7f, 0x9, 0x7fff, 0x0, 0x7, 0x676}) r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:34:06 executing program 5 (fault-call:4 fault-nth:29): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getpid() sched_setscheduler(0x0, 0x4, &(0x7f0000000080)=0x1000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000ac0)={@loopback, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003200)={@local, @rand_addr, 0x0}, &(0x7f0000003240)=0xc) sendmmsg(r1, &(0x7f0000003640)=[{{&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="637097edbaa56df43d2bc0bb320da26dfc6aa3e5c2644f8d30b00ae540436020e57b4e6bcf5aaab28254517403b36212f07bcf57be9b70d74b50f3962d49fd1a8c12dc781298527c2944078d57c19a3c83dbaf9307269a9fa79dd83f114b62947ca40cb26c4f14824bfdec3f7e43c29f0ac921398f7a93eec9fb7ac0d9b2016a7006125b5e01d25ec0ec1b4de17471f1f548e03bf315f9aac461440f87862df0ae6e2ac4c6c81140e7c6131149c46902ceeab1911b9741f0d54768f85ac52e3b20a043eb86ba418086b0405ccb517cc9da91c8cee48f69c93e6b57c23b9e7eb31f05da489155a57ea02294f1c5f1a236b0b0fee2de862c4e6b", 0xf9}, {&(0x7f0000000040)="a09c686eb5", 0x5}], 0x2, &(0x7f00000002c0)=[{0x110, 0x110, 0x5, "87855af0637038f40e3ffe62fcfbac6b4962a6bc24752b0042d7d48b7fb889669cbaebb190138d58df927933ebbd29811faf716df685f53e8696178a6f8b8121991e71c525f61bade102ed9705ae50aea9bcf6d202af73fb85cbaf5194d4c52a13206e28a97e40e9254ad7f22b652dff7c421debb43413c88215dff0c1076d324fba7c7747204ca04d6f94232eb24f6aa2325103d86ae34248d3bb0e6c928acd7b5d1f37f79cd450eb6b2e06ef9054a4d70316bb6323caf537655202bc0a7351e66ee75ee965f1891883247e9adb270aa2be590486a6292b4523823e457b03e518dd8348c4579157181b15544680581ff5933baf75ca5b6fced45ee2"}, {0xe0, 0x118, 0x0, "5f6c63d533204a309732485aeb99668cea2ddf2f73d0d8a5ae06e73497cd36babe94b9ff32d18db2771bf2c334eddcaa7ebf0a792412b787a2f6e836e687ac1a476fa2680cf8242490aee19282e25c13b0c11ad5401857c1e15e5116b86076e771d74b12fb605b7914088b3306e977144d9a94d7cd2c449f69e1618f3398ba0bf2ae3959612fe45735b6306a478f53bf33e4f3ca98d82abb0a1005dfb62db26b720adde87b59e7aca4d52f10d9c443a90923656db72cf22f0f9766770de0dd9cb34488252f4d7c7ce3265251deed71"}, {0x50, 0x197, 0x73bf, "24f0e8e38255028a12088cf272891d5a685903db6857c91d89f861266007e5f2b0bea9a54aee1c3f314c40848f9e551aade35ce460a6fce9af11357c623570"}, {0x60, 0x0, 0x6, "849b549da77e4b1439389f55667f7769be2874e4ebbe8805ec59e59022bd283e5e56eb705c00635b9712feacb0992118333b82e5529507bf0019383d14042d2ac0f8d2ddd5a1e7b3af1f9d7a19"}], 0x2a0, 0x14}, 0x2}, {{&(0x7f0000000580)=@sco={0x1f, {0x2, 0xff, 0x7, 0x1a338e7a, 0x5, 0x8}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000680)="877a6ab3cdfbb1b8dc2567f7d58d39102dacd6b7f59d39824284922f6e3c5fe292202e8cda8462c214f065365a6815f055eaaf33e0cfc8260dbde51162ef9a72c3ea525fcecd978b0cc804e312e0fe54760d227ee73240838f47da08c5975ff36cbcfba1209fb3c4492bfd1c5803c166b0be3f02ad18ab29e981286e9dd262f6bf88b09fa70816bb238b60b69e1ae6b3592a81f92b08e318f439d564304e", 0x9e}, {&(0x7f0000000740)="bf9e6dfdf9d8eaaf472e56d94b3cdb529bbf395e42a29f3fbc6cc731cb3348dd48cc69731ed5e9723dc3e6ee73e911e2c30a155f58c509989436a1b3e2f12b2d9001d275f764c1417ac578a6511fc33f8c6409be775aa943651fece1514a09f54b145a6058848c7f363087e927f9b96068d8bbc9865b28a04efdb20ad1ee958942b562ebfc87b0978f1e26073c68a482fb01901c0d1c1cce069e9e90bb97fa488aa1e09d275e1ce640a2d9dbfbc8c52ecefb573e85fb49f77ed2e2cb8e39e6001ae2528ec1f6842c986b3f767cc452227c5362182e", 0xd5}, {&(0x7f0000000840)="fc70854188513ee393e492548c051d6ead7483e5e2e4fdde7b242c335baafb7dbdcb85a686fe69085cb59402b7fa56a212933ebd332af43d9fdc27655e1f39f1943ade1583f187c96fdaf1869ec7323d95d61aaa8daf93eeda317b7ba89b381fe3", 0x61}, {&(0x7f00000008c0)="5c5210acc3108fb0b3f56c87e3a870d9533758aaa4fac0fbeadc4f80c97fb1d18ce2418068cac260aae7b6a9a7c1b6fedffefba316644896e33ed72287f630a022650ebd8d9399b39c6331c98802add1a74b077b69f378d9d09383b505bd4c3412f45212a483926319363bcc187fe3f0748c5260c1587782cc94e48b535489ba3d9a4f409881c853f03dd76f5e76a7", 0x8f}], 0x4, &(0x7f0000000980)=[{0xf0, 0x189, 0x10000, "7cd65f567351082de67af19381c632cbed5778a62893c7c5611cb213da54bfd6738054a7e731daf3facae7b7c481a0de65a5da74762bdb9cc6423a8a9d7c1b58d61d2796b03940fdc619236965eeb192e2d6eaa1450972870931c8b1b3660374ed0c846e1c9f79d9839164bec37f995675750fac3b2dbd3c9893cceaa65d48d8be65390d174812f7b9d4d48b96ae2059fc0d6735dd40a1290503492772166ff2813228dc436f80d7666cccb014e56de4a48a3347d1c8a2f3f178a5fbc60029b58fc3d379987c3c69703d91d5fd7a7d639e53d534de77ae420a"}, {0x50, 0x107, 0x5, "7e829d751cb8cf0759141bbcda3eb1b4f6fab819534b4eaf18de256c1180785e9a28a94739bdd47778dbc727e6cf16e47ae25175e1253b0397bf"}], 0x140, 0x4008004}, 0x7}, {{&(0x7f0000000b40)=@can={0x1d, r2}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000000bc0)="8bda8f597d6a5dbcc6672309bc91d59a704a13049b592b46aa8566d674f31b3315cd352a9cc6140f4f375f28eae956d10a63e940cbac342d8de17c8e053fdc73df1809f1c1bff493ea6efc399b060ce95a77acf46f7755d90dc620d18d35dded9430a4b73127c8cd3687bd4831198030c516b675ebfb8002a4eb93cc40fc40f79adf0be25752a6e7e52ddf6e700309c71c7d1e923c38534c8d119f7d2c4ef0", 0x9f}, {&(0x7f0000000c80)="9ca9390fecf2736d2262a204403335219802bdb29c0dde7b9b11ed7b6016c2b4884cb207e7b2e1e2672719e228c46516929dc0128e68fa2ee085731ae10a378d86d508443e723e64d81903553713d7b3838841f631", 0x55}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="db6c89d5877f08ceee59d98f25b7eaebb477c8cca7274617dee4e159c02b8108604221fdbee4db211fa5657b3069fe7df0d553bf8a7b0c5a0098478872460a2698ac3c424f41ae8e972aaf090c52de57ae93c4961d67b0eb58bcfce0225fc16ba7c89dd29c1a0fc71cb385743ea170c9d246e3a3b07bf926aaa37137547e96e3ecd38ca0156833e403a1", 0x8a}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="6a380eebf0a92eff711698fdae1d43a147c2b737aca54dcb4286377411624c5129658d1b7a83465b7b8ad403259b25ba7651278e787ab467dfdcdcb52035fef6459153e6be3691d12cbc6f27929b98a52f178345e530097ebe4d1fc186d9c6ca41672d9dd3f6a1c89b30b62380b976fc88cca82a14e56cba540aa3140e51717c5ba37b4c3380101c466fbaf042d6b684140fa597b8a3fc33eee7fa7e85df2fe46634f4cb7adea3a66e92b70c0c4222b27f893aa40b061c3bfeab3906b81d8dccda3071e5df01962ea2b9b56d77488b28df4109ba11484195", 0xd8}, {&(0x7f0000002ec0)="4b6e1546aeab014b3360a3a4296aee54e210d4d1b6838f18e6604c928b0153519e0682bb3de6e6bfddf6d312b6831bc4209bbdcfa1f093f65941932303377e21fb128090b28dcfe723aa2fd13632663d7c283ec47be7681873c86322eae249dd309ad95f1bc6a7298b24", 0x6a}, {&(0x7f0000002f40)="47ba4a984ff7826c0adc89852bb6df7211b62a5e2574fb2db9ce7bea45e0ab7b32447dda1a8374417fcb1f55aed2dc4f941eb642", 0x34}], 0x8, &(0x7f0000003000)=[{0x30, 0x115, 0xffd7885, "1574a15640194eb3c0759406b2918e25430249f3c31768a37b65d2042be5cb"}, {0xe0, 0x10d, 0x7, "f356122d975e0ef6fb0bb86c69e5aa12d5e73d913367acfc27cb3118c0b115aa6b883a655ce9bc6d621401af0fb118ce92abbdaa1700a2a5ce7b1fc8dc586e28a21c7cdb21328c73a97fab35d76c61e42791794d231b4e2736bd0dd707aee79661ee232e5c9ff511fb32f55a3b4af6562f319d897ae72e6d03913149dfa632f7f6ecc376488153fc42b28e33cc4c6bfe50ed61dc4d8a594a7c8129185b4a7fc2960d31230dfe3eb5d0eda519c77a2e5ab65189a9b3d87c691642f07105278f93acee016ab98e3d67d49d"}, {0x38, 0x11e, 0x5, "dcde35e3de559f96f5c0b95208c91792985f8b155b06f43cfe50e084ec32032d44"}, {0x58, 0x112, 0x3, "72213ab2f2c5b2bf9204ef7a390cadacb1928e86c851171884f384d860967dca17cd2af2e1a641b81e78836fad64f33225c6b1f8f4559fbf72f27624a746c85514028093b7299cdf"}, {0x48, 0x10b, 0x20000, "e72d74af262909e5d9e3737d20263db254dc38dcf411ee7ebde6b07ec404a7d89bd3e8803ada73fe154c9338ebe64508d4e8fd"}], 0x1e8, 0x24000884}, 0x9}, {{&(0x7f0000003280)=@can={0x1d, r3}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003300)="43a9bc0d57c0809c72090d525dedd0aaa5c6590d1ba412d795b05760c9df543fe6e1cd02e3bc05bf80affefadf10a1b79abbb53d50aa857f2abacbb3ee99c314afe28fe1f820378f7968b5305296a35c6253b92754834095b77e89f4ed547e30cce03533d384ba9a8eba7f890027ac3d0b604180886b8b54a79b69f4040807690a3360ce9319d9afc7b3a6f29a5bb7aa85e4c403753b6ae8beae6bd07ad584bf9df4d78de495a489caa3212a68e13d4692f62470badf9572cb84f648655db8711901d860a8252aae30d2911b06fe6904c258414a943c8a83b02d1b25e4a9905c08768eccf03b786fd6eb68ebf39d3cfc4ae5cdfea4", 0xf5}, {&(0x7f0000003400)="137b12c190029f64ceca7b43d294396f98dce87e809c48859538", 0x1a}], 0x2, &(0x7f0000003480)=[{0x110, 0x112, 0x2, "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"}, {0x90, 0x112, 0x4, "b9f692b34b30097aa24b23c8034b338f484f0d31ca6b31c79ec8af28a6aff5165e91d5f7180affa6eb37a028f469424e088d942764b733e63df67cea160179cefbf01f5039ac0817fa21585286e41d8eebd7737c1c8af714a6db15362da5198c0c2bc6d53b115133608fbe83912b89cf26e7cfe45d36dc151b4455c0e1cf"}], 0x1a0}, 0x401}], 0x4, 0x20004000) ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556e, &(0x7f0000000000)) 03:34:06 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x15a}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r2 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @loopback}, &(0x7f00000006c0)=0xc) r4 = getpgrp(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002000)='/dev/audio\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001b80)=""/117, 0x75}], 0x6, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x5, r2, &(0x7f00000004c0), 0x7fffffff) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x2e, 0x2d, 0x10, 0x9, 0x2, 0xfffffffffffffffa, 0x1, 0xf2, 0xffffffffffffffff}}) close(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) 03:34:06 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x0) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0xa, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0xffff, 0x1}}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f9122d5bfa7d3c72368a9250c212817b000000000000003e56cc4b6df0872ac4b9b61cc016dc9c3a42"], 0x1}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fchdir(r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e23}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) listen(0xffffffffffffffff, 0x0) 03:34:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x200000020000, 0x0) 03:34:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 366.484375] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 366.753299] FAULT_INJECTION: forcing a failure. [ 366.753299] name failslab, interval 1, probability 0, space 0, times 0 [ 366.764729] CPU: 0 PID: 14884 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 366.773229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.782586] Call Trace: [ 366.785204] dump_stack+0x1c9/0x2b4 [ 366.788854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.794059] ? graph_lock+0x170/0x170 [ 366.797888] should_fail.cold.4+0xa/0x11 [ 366.801967] ? __list_lru_init+0x4d6/0x840 [ 366.806245] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.811367] ? find_held_lock+0x36/0x1c0 [ 366.815451] ? graph_lock+0x170/0x170 [ 366.819270] ? lock_downgrade+0x8f0/0x8f0 [ 366.823441] ? find_held_lock+0x36/0x1c0 [ 366.827530] ? __lock_is_held+0xb5/0x140 [ 366.831629] ? check_same_owner+0x340/0x340 [ 366.835975] ? rcu_note_context_switch+0x680/0x680 [ 366.840925] __should_failslab+0x124/0x180 [ 366.845193] should_failslab+0x9/0x14 [ 366.849003] __kmalloc+0x2b2/0x720 [ 366.852554] ? kvfree_rcu+0x20/0x20 [ 366.856204] ? __list_lru_init+0x151/0x840 [ 366.860457] __list_lru_init+0x151/0x840 [ 366.864544] ? list_lru_destroy+0x500/0x500 [ 366.868890] ? up_write+0x7b/0x220 [ 366.872448] ? down_read+0x1d0/0x1d0 [ 366.876195] ? init_wait_entry+0x1c0/0x1c0 [ 366.880446] ? prealloc_shrinker+0xe5/0x330 [ 366.884796] alloc_super+0x9b6/0xb20 [ 366.888553] ? destroy_unused_super.part.11+0x110/0x110 [ 366.893935] ? lock_downgrade+0x8f0/0x8f0 [ 366.898113] ? kasan_check_read+0x11/0x20 [ 366.902299] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.906903] ? kasan_check_write+0x14/0x20 [ 366.911161] ? do_raw_spin_lock+0xc1/0x200 [ 366.915427] sget_userns+0x276/0x860 [ 366.919181] ? get_anon_bdev+0xc0/0xc0 [ 366.923090] ? vfs_get_super+0x270/0x270 [ 366.927200] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.932784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.938332] ? ns_capable_common+0x13f/0x170 [ 366.942752] ? get_anon_bdev+0xc0/0xc0 [ 366.946653] sget+0x10b/0x150 [ 366.949774] ? ovl_show_options+0x550/0x550 [ 366.954106] mount_nodev+0x38/0x120 [ 366.957745] ? ovl_own_xattr_set+0x10/0x10 [ 366.961989] ovl_mount+0x34/0x40 [ 366.965469] legacy_get_tree+0x131/0x460 [ 366.969548] vfs_get_tree+0x1cb/0x5c0 [ 366.973366] do_mount+0x6f9/0x1e30 [ 366.976923] ? rcu_is_watching+0x8c/0x150 [ 366.981097] ? trace_hardirqs_on+0xbd/0x2c0 [ 366.985437] ? copy_mount_string+0x40/0x40 [ 366.989691] ? copy_mount_options+0x5f/0x380 [ 366.994111] ? kmem_cache_alloc_trace+0x324/0x730 [ 366.998973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.004526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.010071] ? copy_mount_options+0x285/0x380 [ 367.014580] ksys_mount+0x12d/0x140 [ 367.018224] __x64_sys_mount+0xbe/0x150 [ 367.022218] do_syscall_64+0x1b9/0x820 [ 367.026126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 367.031514] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.036455] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 367.041484] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 367.046510] ? recalc_sigpending_tsk+0x180/0x180 [ 367.051278] ? kasan_check_write+0x14/0x20 [ 367.055526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.060392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.065589] RIP: 0033:0x457099 [ 367.068794] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.087704] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 367.095419] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 367.102693] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 367.109971] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 367.117250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 367.124527] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001d 03:34:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x443fc) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 03:34:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) timer_create(0x0, &(0x7f0000000340)={0x0, 0x4, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000000300)) r2 = getpid() read(0xffffffffffffffff, &(0x7f00000001c0)=""/105, 0x69) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x900, 0x0) ptrace(0x4208, r2) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000240)={0xa, 0x1, {0x53, 0xdcdd, 0xc3, {0x8, 0x6edf}, {0x0, 0x7f}, @const={0x7ff, {0x5, 0x7, 0x7ff, 0x10001}}}, {0x55, 0x615eb8df, 0x696, {0x7, 0x7}, {0x401, 0x8a}, @period={0x5f, 0xdf3, 0x7ff, 0x3, 0x7fff, {0x7, 0x0, 0x1, 0x40}, 0x2, &(0x7f0000000100)=[0x3ff, 0x1c9]}}}) tkill(r2, 0x13) ptrace$getenv(0x4201, r2, 0x7ff, &(0x7f0000000140)) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x492492492492a59, 0x0) 03:34:07 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x6400000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f0000000040)={0x0, r2}, &(0x7f0000000240)={0x1, 0x5, 0x1, 0x100000000, 0x834, 0x4}) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:34:07 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000240)="a08a768a0c20c0af54d611aeb32e4d525654de9bc10bd0", 0x17}, {&(0x7f0000000340)="ebdc7a6b3fc1dcc48392d98b88dd0a737459aafe35e6393a7737dec4dc1d4fb39fa4a70b371b7c69b3cf60ef3ffef98aef5be4ac38f205814c420b5653f551e36acbe2c4adad5c8b840fb58131950534904a89e338b5aaafd36bfdd78bcacd6935268c45304be0423e0e15052f4dd523448f1225356525c40842287e763b02dcd49daa8b80e23ef7a0b1449bf8554fae4f269439b77e86f3", 0x98}], 0x2) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r3) 03:34:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:07 executing program 5 (fault-call:4 fault-nth:30): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x3de, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000100), &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000796800000000000000000000000000ffffffff020000000300000020000000dbdf6272696467655f736c6176655f30000079616d300000000000000000000000006272696467655f736c6176655f31000062726964676530000000000000000000aaaaaaaaaa0dffff00ff0000aaaaaaaaaabb00ffff00ffff00001001000040010000700100006172700000000000000000000000000000000000000000000000000000000000380000000000000000010a010000000000000000ffffffffe0000002ffffff00bdc64e1d8202ffffffffffffaaaaaaaaaabbffffffffff00802000000000000074696d65000000000000000000000000000000000000000000000000000000001800000000000000ff00000003000000e8f500009526010001040000040100004e465155455545000000000000000000000000000000000000000000000000000800000000000000060000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fdffffff000000000f000000020000000a1b626f6e64300000000000000000000000626f6e645f736c6176655f3100000000697036746e6c3000000000000000000069666230000000000000000000000000aaaaaaaaaa19ff0000ff00ffaaaaaaaaaaaa00ffffff00ff0000a0000000a0000000e8000000766c616e00000000000000000000000000000000000000000000000000000000080000000000000004000700e8ff05025241544545535400000000000000000000000000000000000000000000000000200000000000000073797a300000000000000000000000000601000000000000f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff010000001b00000008000000601f69726c616e300000000000000000000079616d300000000000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa21ff00ff00ffffaaaaaaaaaaaa0000ffffff0000007000000008010000380100004552524f5200000000000000000000000000000000000000000000000000000020000000000000007e51c21f2f08a7c5675c713fea0fd4b0dec9db81f31a9deb791d88232e5e00006c6f67000000000000000000000000000000000000000000000000000000000028000000000000000027245946f15fb346fce898c2cde1f15611e631e975"]}, 0x456) 03:34:07 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x0) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0xa, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0xffff, 0x1}}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f9122d5bfa7d3c72368a9250c212817b000000000000003e56cc4b6df0872ac4b9b61cc016dc9c3a42"], 0x1}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fchdir(r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000008601"]) [ 367.432564] attempt to access beyond end of device [ 367.437606] loop3: rw=1, want=114, limit=112 [ 367.442126] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 367.501211] attempt to access beyond end of device [ 367.506297] loop3: rw=1, want=115, limit=112 [ 367.510795] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 367.522875] kernel msg: ebtables bug: please report to author: entries_size too small [ 367.553538] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 367.583459] attempt to access beyond end of device [ 367.585202] kernel msg: ebtables bug: please report to author: entries_size too small [ 367.588616] loop3: rw=1, want=116, limit=112 [ 367.602963] attempt to access beyond end of device [ 367.608054] loop3: rw=1, want=117, limit=112 [ 367.613401] attempt to access beyond end of device [ 367.615143] FAULT_INJECTION: forcing a failure. [ 367.615143] name failslab, interval 1, probability 0, space 0, times 0 [ 367.618587] loop3: rw=1, want=130, limit=112 [ 367.629655] CPU: 1 PID: 14968 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 367.642521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.652116] Call Trace: [ 367.654728] dump_stack+0x1c9/0x2b4 [ 367.658369] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.663576] should_fail.cold.4+0xa/0x11 [ 367.667651] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.672777] ? graph_lock+0x170/0x170 [ 367.676588] ? save_stack+0x43/0xd0 [ 367.680237] ? kasan_kmalloc+0xc4/0xe0 [ 367.684126] ? __kmalloc+0x14e/0x720 [ 367.687857] ? find_held_lock+0x36/0x1c0 [ 367.691937] ? __lock_is_held+0xb5/0x140 [ 367.696019] ? __netif_receive_skb_core+0x12e8/0x39f0 [ 367.701235] ? check_same_owner+0x340/0x340 [ 367.705569] ? rcu_note_context_switch+0x680/0x680 [ 367.710509] __should_failslab+0x124/0x180 [ 367.714753] should_failslab+0x9/0x14 [ 367.718575] kmem_cache_alloc_node_trace+0x259/0x720 [ 367.723702] __kmalloc_node+0x33/0x70 [ 367.727513] kvmalloc_node+0x65/0xf0 [ 367.731243] __list_lru_init+0x5d9/0x840 [ 367.735316] ? list_lru_destroy+0x500/0x500 [ 367.739650] ? up_write+0x7b/0x220 [ 367.743202] ? down_read+0x1d0/0x1d0 [ 367.746924] ? init_wait_entry+0x1c0/0x1c0 [ 367.751172] ? prealloc_shrinker+0xe5/0x330 [ 367.755513] alloc_super+0x9b6/0xb20 [ 367.759240] ? destroy_unused_super.part.11+0x110/0x110 [ 367.764610] ? lock_downgrade+0x8f0/0x8f0 [ 367.768771] ? kasan_check_read+0x11/0x20 [ 367.772928] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 367.778014] ? kasan_check_write+0x14/0x20 [ 367.782253] ? do_raw_spin_lock+0xc1/0x200 [ 367.786502] sget_userns+0x276/0x860 [ 367.790221] ? get_anon_bdev+0xc0/0xc0 [ 367.794118] ? vfs_get_super+0x270/0x270 [ 367.798209] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.803779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.809321] ? ns_capable_common+0x13f/0x170 [ 367.813738] ? get_anon_bdev+0xc0/0xc0 [ 367.817628] sget+0x10b/0x150 [ 367.820742] ? ovl_show_options+0x550/0x550 [ 367.825068] mount_nodev+0x38/0x120 [ 367.828714] ? ovl_own_xattr_set+0x10/0x10 [ 367.832954] ovl_mount+0x34/0x40 [ 367.836330] legacy_get_tree+0x131/0x460 [ 367.840404] vfs_get_tree+0x1cb/0x5c0 [ 367.844213] do_mount+0x6f9/0x1e30 [ 367.847759] ? rcu_is_watching+0x8c/0x150 [ 367.851928] ? copy_mount_string+0x40/0x40 [ 367.856183] ? retint_kernel+0x10/0x10 [ 367.860089] ? copy_mount_options+0x1f0/0x380 [ 367.864594] ? copy_mount_options+0x1fa/0x380 [ 367.869098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.874642] ? copy_mount_options+0x285/0x380 [ 367.879149] ksys_mount+0x12d/0x140 [ 367.882796] __x64_sys_mount+0xbe/0x150 [ 367.886782] do_syscall_64+0x1b9/0x820 [ 367.890682] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 367.896050] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.900986] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 367.906008] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 367.911028] ? recalc_sigpending_tsk+0x180/0x180 [ 367.915788] ? kasan_check_write+0x14/0x20 [ 367.920035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.924912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.930107] RIP: 0033:0x457099 [ 367.933307] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000180)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1}, 0x48) [ 367.952212] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 367.959925] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 367.967196] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 367.974465] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 367.981735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 367.989004] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001e 03:34:08 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0xff00000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:08 executing program 5 (fault-call:4 fault-nth:31): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @in6={0xa, 0x4e23, 0x401, @ipv4={[], [], @remote}, 0x7ff}}}, 0x90) r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r3) 03:34:08 executing program 0: r0 = memfd_create(&(0x7f0000000300), 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x16) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0'}, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000140)) capset(&(0x7f0000000240)={0x0, r2}, &(0x7f0000000280)={0x80000000, 0x5, 0x7fc000000, 0x0, 0x4}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 368.104710] attempt to access beyond end of device [ 368.109851] loop3: rw=1, want=131, limit=112 [ 368.143653] attempt to access beyond end of device [ 368.148804] loop3: rw=1, want=132, limit=112 [ 368.189757] attempt to access beyond end of device [ 368.194802] loop3: rw=1, want=133, limit=112 03:34:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000240)=0xe3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:34:08 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8994, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "c9fd23d02e0d9f245c49f8f85845c6ef85d347cc0db398d4c1da50a7f5d97760", "04cff7b4020d0ec33079e5d0abb5fac5f7b12e738b5e5e8a3823cdc8e7d6c93a", "5280483b25e18e3aaf66faa57ffd0bfddc3508a008bddff2eeba6a2438ae9631", "fce711475ea0357ff0b76627b174971f4deea52629ab299cfcfb018113240324", "bcd7203d334f280417876cfb0be93eed10eb050e1650ff8ae2d703c0d82d99c4", "42f916963975d07cecc52574"}}) [ 368.242176] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 368.251117] attempt to access beyond end of device [ 368.256176] loop3: rw=1, want=581, limit=112 [ 368.276874] FAULT_INJECTION: forcing a failure. [ 368.276874] name failslab, interval 1, probability 0, space 0, times 0 03:34:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80003, 0x400002000000084) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f00000000c0)=""/46, &(0x7f0000000000)=0x2e) [ 368.288324] CPU: 1 PID: 14992 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 368.296826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.306191] Call Trace: [ 368.308799] dump_stack+0x1c9/0x2b4 [ 368.312457] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.317670] ? kasan_check_read+0x11/0x20 [ 368.321847] ? rcu_is_watching+0x8c/0x150 [ 368.326028] should_fail.cold.4+0xa/0x11 [ 368.330125] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.335257] ? is_bpf_text_address+0xd7/0x170 [ 368.339774] ? kernel_text_address+0x79/0xf0 [ 368.344218] ? unwind_get_return_address+0x61/0xa0 [ 368.349198] ? __save_stack_trace+0x8d/0xf0 [ 368.353542] ? graph_lock+0x170/0x170 [ 368.357367] ? find_held_lock+0x36/0x1c0 [ 368.361451] ? __lock_is_held+0xb5/0x140 [ 368.365545] ? check_same_owner+0x340/0x340 [ 368.369891] ? kmem_cache_alloc_node_trace+0x219/0x720 [ 368.375204] ? rcu_note_context_switch+0x680/0x680 [ 368.380181] __should_failslab+0x124/0x180 [ 368.384439] should_failslab+0x9/0x14 [ 368.388256] kmem_cache_alloc_trace+0x2b5/0x730 03:34:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:34:08 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0x0, @mcast1, 0x34}, {0xa, 0x4e21, 0xffffffff80000000, @dev={0xfe, 0x80, [], 0x20}}, 0x7f, [0x0, 0xf3, 0x10000, 0x80000001, 0x10001, 0x8, 0x1, 0x8]}, 0x5c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200006000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xd00, &(0x7f0000000200), 0x0) ioctl$int_in(r2, 0x5473, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) fgetxattr(r1, &(0x7f0000000300)=@known='trusted.overlay.redirect\x00', &(0x7f0000000340)=""/93, 0x5d) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x26) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 368.392949] ? __kmalloc_node+0x33/0x70 [ 368.396938] ? __kmalloc_node+0x33/0x70 [ 368.400935] ? rcu_read_lock_sched_held+0x108/0x120 [ 368.405976] __memcg_init_list_lru_node+0x185/0x2d0 [ 368.411014] ? kvfree_rcu+0x20/0x20 [ 368.414663] ? __kmalloc_node+0x47/0x70 [ 368.418686] __list_lru_init+0x4d6/0x840 [ 368.422780] ? list_lru_destroy+0x500/0x500 [ 368.427128] ? up_write+0x7b/0x220 [ 368.430708] ? down_read+0x1d0/0x1d0 [ 368.434446] ? init_wait_entry+0x1c0/0x1c0 [ 368.438710] ? prealloc_shrinker+0xe5/0x330 03:34:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 368.443059] alloc_super+0x9b6/0xb20 [ 368.446796] ? destroy_unused_super.part.11+0x110/0x110 [ 368.452211] ? lock_downgrade+0x8f0/0x8f0 [ 368.456389] ? kasan_check_read+0x11/0x20 [ 368.460549] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 368.465137] ? kasan_check_write+0x14/0x20 [ 368.469396] ? do_raw_spin_lock+0xc1/0x200 [ 368.473649] sget_userns+0x276/0x860 [ 368.477379] ? get_anon_bdev+0xc0/0xc0 [ 368.481280] ? vfs_get_super+0x270/0x270 [ 368.485372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 03:34:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 368.490953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.496503] ? ns_capable_common+0x13f/0x170 [ 368.500924] ? get_anon_bdev+0xc0/0xc0 [ 368.504820] sget+0x10b/0x150 [ 368.507942] ? ovl_show_options+0x550/0x550 [ 368.512278] mount_nodev+0x38/0x120 [ 368.515912] ? ovl_own_xattr_set+0x10/0x10 [ 368.520147] ovl_mount+0x34/0x40 [ 368.523529] legacy_get_tree+0x131/0x460 [ 368.527596] vfs_get_tree+0x1cb/0x5c0 [ 368.531399] do_mount+0x6f9/0x1e30 [ 368.534945] ? copy_mount_string+0x40/0x40 [ 368.539192] ? retint_kernel+0x10/0x10 [ 368.543097] ? __sanitizer_cov_trace_const_cmp4+0x20/0x20 [ 368.548636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.554180] ? copy_mount_options+0x285/0x380 [ 368.558687] ksys_mount+0x12d/0x140 [ 368.562319] __x64_sys_mount+0xbe/0x150 [ 368.566301] do_syscall_64+0x1b9/0x820 [ 368.570191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 368.575559] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.580489] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 368.585508] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 368.590529] ? recalc_sigpending_tsk+0x180/0x180 [ 368.595290] ? kasan_check_write+0x14/0x20 [ 368.599532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.604386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.609575] RIP: 0033:0x457099 [ 368.612769] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.631664] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.639381] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 368.646652] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 368.653923] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 368.661205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 368.668470] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000001f 03:34:08 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x6400}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:09 executing program 3: 03:34:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:34:09 executing program 5 (fault-call:4 fault-nth:32): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:34:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:09 executing program 0: 03:34:09 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) 03:34:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() clock_gettime(0x0, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) lseek(r1, 0x0, 0x0) [ 369.118177] attempt to access beyond end of device [ 369.123239] loop3: rw=1, want=114, limit=112 [ 369.136695] attempt to access beyond end of device [ 369.141754] loop3: rw=1, want=115, limit=112 [ 369.158560] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:34:09 executing program 0: [ 369.172623] attempt to access beyond end of device [ 369.177669] loop3: rw=1, want=116, limit=112 [ 369.203640] attempt to access beyond end of device [ 369.207148] FAULT_INJECTION: forcing a failure. [ 369.207148] name failslab, interval 1, probability 0, space 0, times 0 [ 369.208647] loop3: rw=1, want=117, limit=112 [ 369.208730] attempt to access beyond end of device [ 369.219926] CPU: 0 PID: 15061 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 369.219940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.219950] Call Trace: [ 369.224398] loop3: rw=1, want=130, limit=112 [ 369.229296] dump_stack+0x1c9/0x2b4 [ 369.229317] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.229338] ? __kernel_text_address+0xd/0x40 [ 369.238166] attempt to access beyond end of device [ 369.247183] ? unwind_get_return_address+0x61/0xa0 [ 369.247210] should_fail.cold.4+0xa/0x11 [ 369.247232] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.247260] ? save_stack+0x43/0xd0 [ 369.249867] loop3: rw=1, want=131, limit=112 [ 369.254237] ? kasan_kmalloc+0xc4/0xe0 [ 369.254251] ? kmem_cache_alloc_trace+0x152/0x730 [ 369.254270] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 369.254286] ? __list_lru_init+0x4d6/0x840 [ 369.254306] ? alloc_super+0x9b6/0xb20 [ 369.316303] attempt to access beyond end of device [ 369.316593] ? graph_lock+0x170/0x170 [ 369.316611] ? legacy_get_tree+0x131/0x460 [ 369.316627] ? vfs_get_tree+0x1cb/0x5c0 [ 369.316642] ? do_mount+0x6f9/0x1e30 [ 369.316655] ? ksys_mount+0x12d/0x140 [ 369.316669] ? __x64_sys_mount+0xbe/0x150 [ 369.316694] ? find_held_lock+0x36/0x1c0 [ 369.321806] loop3: rw=1, want=132, limit=112 [ 369.325420] ? __lock_is_held+0xb5/0x140 [ 369.325452] ? check_same_owner+0x340/0x340 [ 369.325476] ? rcu_note_context_switch+0x680/0x680 [ 369.367053] __should_failslab+0x124/0x180 [ 369.371306] should_failslab+0x9/0x14 [ 369.372978] attempt to access beyond end of device [ 369.375118] kmem_cache_alloc_trace+0x2b5/0x730 [ 369.375134] ? __kmalloc_node+0x33/0x70 [ 369.375148] ? __kmalloc_node+0x33/0x70 [ 369.375187] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.375213] __memcg_init_list_lru_node+0x185/0x2d0 [ 369.375234] ? kvfree_rcu+0x20/0x20 [ 369.375250] ? __kmalloc_node+0x47/0x70 [ 369.375274] __list_lru_init+0x4d6/0x840 [ 369.375295] ? list_lru_destroy+0x500/0x500 [ 369.380256] loop3: rw=1, want=133, limit=112 [ 369.384886] ? up_write+0x7b/0x220 [ 369.384905] ? down_read+0x1d0/0x1d0 [ 369.384922] ? init_wait_entry+0x1c0/0x1c0 [ 369.384945] ? prealloc_shrinker+0xe5/0x330 [ 369.438836] attempt to access beyond end of device [ 369.439055] alloc_super+0x9b6/0xb20 [ 369.439079] ? destroy_unused_super.part.11+0x110/0x110 [ 369.439099] ? lock_downgrade+0x8f0/0x8f0 [ 369.444135] loop3: rw=1, want=2174, limit=112 [ 369.447743] ? kasan_check_read+0x11/0x20 [ 369.447762] ? do_raw_spin_trylock+0x1c0/0x1c0 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x2, 0x401}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x8, 0x8, 0x1, 0x2, 0x100, 0x1}) close(r1) [ 369.447780] ? kasan_check_write+0x14/0x20 [ 369.447799] ? do_raw_spin_lock+0xc1/0x200 [ 369.478937] sget_userns+0x276/0x860 [ 369.482654] ? get_anon_bdev+0xc0/0xc0 [ 369.486559] ? vfs_get_super+0x270/0x270 [ 369.490649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 369.496229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.501781] ? ns_capable_common+0x13f/0x170 [ 369.506202] ? get_anon_bdev+0xc0/0xc0 [ 369.510099] sget+0x10b/0x150 [ 369.513217] ? ovl_show_options+0x550/0x550 [ 369.517551] mount_nodev+0x38/0x120 [ 369.521210] ? ovl_own_xattr_set+0x10/0x10 [ 369.525455] ovl_mount+0x34/0x40 [ 369.528837] legacy_get_tree+0x131/0x460 [ 369.532913] vfs_get_tree+0x1cb/0x5c0 [ 369.536729] do_mount+0x6f9/0x1e30 [ 369.540283] ? rcu_is_watching+0x8c/0x150 [ 369.544446] ? trace_hardirqs_on+0xbd/0x2c0 [ 369.548790] ? copy_mount_string+0x40/0x40 [ 369.553038] ? copy_mount_options+0x5f/0x380 [ 369.557461] ? kmem_cache_alloc_trace+0x324/0x730 [ 369.562326] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.567919] ? _copy_from_user+0xdf/0x150 [ 369.572093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.577643] ? copy_mount_options+0x285/0x380 [ 369.582146] ksys_mount+0x12d/0x140 [ 369.585796] __x64_sys_mount+0xbe/0x150 [ 369.589781] do_syscall_64+0x1b9/0x820 [ 369.593674] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 369.599046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 369.603979] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 369.608998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 369.614014] ? recalc_sigpending_tsk+0x180/0x180 [ 369.618773] ? kasan_check_write+0x14/0x20 [ 369.623017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.627873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.633062] RIP: 0033:0x457099 [ 369.636260] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.655591] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.663304] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 03:34:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() clock_gettime(0x0, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) lseek(r1, 0x0, 0x0) [ 369.671194] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 369.678465] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 369.685733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 369.693000] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000020 03:34:09 executing program 0: 03:34:09 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x5a01000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:34:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:34:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() clock_gettime(0x0, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) lseek(r1, 0x0, 0x0) 03:34:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000440)=""/120, 0x4fce}], 0x1) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}}, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 03:34:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000000)=""/42, 0x57) 03:33:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:20 executing program 5 (fault-call:4 fault-nth:33): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x11}) [ 370.310778] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 370.330172] FAULT_INJECTION: forcing a failure. [ 370.330172] name failslab, interval 1, probability 0, space 0, times 0 [ 370.341617] CPU: 1 PID: 15139 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 370.350116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.359468] Call Trace: [ 370.362069] dump_stack+0x1c9/0x2b4 [ 370.365717] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.370922] ? __kernel_text_address+0xd/0x40 [ 370.375431] ? unwind_get_return_address+0x61/0xa0 [ 370.380380] should_fail.cold.4+0xa/0x11 [ 370.384460] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.389592] ? save_stack+0x43/0xd0 [ 370.393229] ? kasan_kmalloc+0xc4/0xe0 [ 370.397124] ? kmem_cache_alloc_trace+0x152/0x730 [ 370.401990] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 370.407203] ? __list_lru_init+0x4d6/0x840 [ 370.411460] ? alloc_super+0x9b6/0xb20 [ 370.415372] ? graph_lock+0x170/0x170 [ 370.419200] ? legacy_get_tree+0x131/0x460 [ 370.423457] ? vfs_get_tree+0x1cb/0x5c0 [ 370.427458] ? do_mount+0x6f9/0x1e30 [ 370.431189] ? ksys_mount+0x12d/0x140 [ 370.434991] ? __x64_sys_mount+0xbe/0x150 [ 370.439144] ? find_held_lock+0x36/0x1c0 [ 370.443219] ? __lock_is_held+0xb5/0x140 [ 370.447290] ? check_same_owner+0x340/0x340 [ 370.451622] ? rcu_note_context_switch+0x680/0x680 [ 370.456564] __should_failslab+0x124/0x180 [ 370.460815] should_failslab+0x9/0x14 [ 370.464615] kmem_cache_alloc_trace+0x2b5/0x730 [ 370.469282] ? __kmalloc_node+0x33/0x70 [ 370.473253] ? __kmalloc_node+0x33/0x70 [ 370.477221] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.482236] __memcg_init_list_lru_node+0x185/0x2d0 [ 370.487262] ? kvfree_rcu+0x20/0x20 [ 370.490907] ? __kmalloc_node+0x47/0x70 [ 370.494888] __list_lru_init+0x4d6/0x840 [ 370.498962] ? list_lru_destroy+0x500/0x500 [ 370.503285] ? up_write+0x7b/0x220 [ 370.506815] ? down_read+0x1d0/0x1d0 [ 370.510526] ? init_wait_entry+0x1c0/0x1c0 [ 370.514773] ? prealloc_shrinker+0xe5/0x330 [ 370.519113] alloc_super+0x9b6/0xb20 [ 370.522830] ? destroy_unused_super.part.11+0x110/0x110 [ 370.528199] ? lock_downgrade+0x8f0/0x8f0 [ 370.532368] ? kasan_check_read+0x11/0x20 [ 370.536540] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 370.541124] ? kasan_check_write+0x14/0x20 [ 370.545353] ? do_raw_spin_lock+0xc1/0x200 [ 370.549584] sget_userns+0x276/0x860 [ 370.553289] ? get_anon_bdev+0xc0/0xc0 [ 370.557187] ? vfs_get_super+0x270/0x270 [ 370.561263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.566804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.572329] ? ns_capable_common+0x13f/0x170 [ 370.576723] ? get_anon_bdev+0xc0/0xc0 [ 370.580599] sget+0x10b/0x150 [ 370.583700] ? ovl_show_options+0x550/0x550 [ 370.588008] mount_nodev+0x38/0x120 [ 370.591633] ? ovl_own_xattr_set+0x10/0x10 [ 370.595867] ovl_mount+0x34/0x40 [ 370.599222] legacy_get_tree+0x131/0x460 [ 370.603275] vfs_get_tree+0x1cb/0x5c0 [ 370.607066] do_mount+0x6f9/0x1e30 [ 370.610602] ? copy_mount_string+0x40/0x40 [ 370.614843] ? retint_kernel+0x10/0x10 [ 370.618750] ? copy_mount_options+0x1f0/0x380 [ 370.623266] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 370.628111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.633634] ? copy_mount_options+0x285/0x380 [ 370.638118] ksys_mount+0x12d/0x140 [ 370.641731] __x64_sys_mount+0xbe/0x150 [ 370.645713] do_syscall_64+0x1b9/0x820 [ 370.649597] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 370.654951] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.659869] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 370.664881] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 370.669908] ? recalc_sigpending_tsk+0x180/0x180 [ 370.674674] ? kasan_check_write+0x14/0x20 [ 370.678932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.683795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.688985] RIP: 0033:0x457099 [ 370.692188] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:20 executing program 2: r0 = socket$inet6(0xa, 0x807, 0xa88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, r2, 0x820, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x93}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xac}}, 0x4840) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, {0x3, 0xb7dd, 0x0, 0x5, 0x1, 0x3}}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000003c0)={0x49c, 0x7ff, 0x7fffffff, 0x1657, 0x86, 0x401}) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240), &(0x7f00000002c0)=0x4) close(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000300)={0x0, 0xd9, 0x0, 'queue1\x00', 0x4}) 03:33:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() clock_gettime(0x0, &(0x7f00000001c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 3: r0 = inotify_init1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) rt_sigqueueinfo(r2, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4208, r2) [ 370.711098] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.718807] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 370.726075] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 370.733352] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 370.740626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 370.747899] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000021 03:33:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x6, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) setsockopt(r0, 0xd9, 0x4, &(0x7f0000000240)="adc2064acbf9e71b159d", 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'loselinuxcpuset[wlan1'}, {0x20, '/dev/snd/seq\x00'}, {}], 0xa, "043515cf70e5d03e86ffef653d398550b8e2106e53e9953f084a9ef9a4218486d213d5847acc93140055e02a0b6c4bca9b244233d4b196d96c36c47aad7ba6ffa9a8f2d7993c39b63b0682b37681281ec38bff720d1e9d442bb5cd44a269923e8265103829d83ef381857c509b3b775c043a2c7caa0740b141c5baeb1e2fdd8f"}, 0xb0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) close(r1) 03:33:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:20 executing program 0: 03:33:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:20 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x1000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:20 executing program 5 (fault-call:4 fault-nth:34): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:20 executing program 3: 03:33:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:20 executing program 0: [ 370.926476] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 370.974089] FAULT_INJECTION: forcing a failure. [ 370.974089] name failslab, interval 1, probability 0, space 0, times 0 [ 370.985490] CPU: 1 PID: 15173 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 370.994002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.003362] Call Trace: [ 371.005976] dump_stack+0x1c9/0x2b4 [ 371.009631] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.014840] ? __kernel_text_address+0xd/0x40 [ 371.019357] ? unwind_get_return_address+0x61/0xa0 [ 371.024321] should_fail.cold.4+0xa/0x11 [ 371.028416] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.033551] ? save_stack+0x43/0xd0 [ 371.037201] ? kasan_kmalloc+0xc4/0xe0 [ 371.041114] ? kmem_cache_alloc_trace+0x152/0x730 [ 371.045989] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 371.051206] ? __list_lru_init+0x4d6/0x840 [ 371.055464] ? alloc_super+0x9b6/0xb20 [ 371.059366] ? graph_lock+0x170/0x170 [ 371.063191] ? legacy_get_tree+0x131/0x460 [ 371.067443] ? vfs_get_tree+0x1cb/0x5c0 [ 371.071433] ? do_mount+0x6f9/0x1e30 [ 371.075175] ? ksys_mount+0x12d/0x140 [ 371.078997] ? __x64_sys_mount+0xbe/0x150 [ 371.083180] ? find_held_lock+0x36/0x1c0 [ 371.087272] ? __lock_is_held+0xb5/0x140 [ 371.091371] ? check_same_owner+0x340/0x340 [ 371.095723] ? rcu_note_context_switch+0x680/0x680 [ 371.100700] __should_failslab+0x124/0x180 [ 371.104962] should_failslab+0x9/0x14 [ 371.108781] kmem_cache_alloc_trace+0x2b5/0x730 [ 371.113464] ? __kmalloc_node+0x33/0x70 [ 371.117449] ? __kmalloc_node+0x33/0x70 [ 371.121443] ? rcu_read_lock_sched_held+0x108/0x120 [ 371.126487] __memcg_init_list_lru_node+0x185/0x2d0 [ 371.131529] ? kvfree_rcu+0x20/0x20 [ 371.135183] ? __kmalloc_node+0x47/0x70 [ 371.139201] __list_lru_init+0x4d6/0x840 [ 371.143291] ? list_lru_destroy+0x500/0x500 [ 371.147637] ? up_write+0x7b/0x220 [ 371.151206] ? down_read+0x1d0/0x1d0 [ 371.154938] ? init_wait_entry+0x1c0/0x1c0 [ 371.159200] ? prealloc_shrinker+0xe5/0x330 [ 371.163545] alloc_super+0x9b6/0xb20 [ 371.167280] ? destroy_unused_super.part.11+0x110/0x110 [ 371.172652] ? lock_downgrade+0x8f0/0x8f0 [ 371.176825] ? kasan_check_read+0x11/0x20 [ 371.180992] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 371.185591] ? kasan_check_write+0x14/0x20 [ 371.189841] ? do_raw_spin_lock+0xc1/0x200 [ 371.194099] sget_userns+0x276/0x860 [ 371.197823] ? get_anon_bdev+0xc0/0xc0 [ 371.201725] ? vfs_get_super+0x270/0x270 [ 371.205814] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.211388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.216939] ? ns_capable_common+0x13f/0x170 [ 371.221364] ? get_anon_bdev+0xc0/0xc0 [ 371.225264] sget+0x10b/0x150 [ 371.228385] ? ovl_show_options+0x550/0x550 [ 371.232723] mount_nodev+0x38/0x120 [ 371.236364] ? ovl_own_xattr_set+0x10/0x10 [ 371.240611] ovl_mount+0x34/0x40 [ 371.243997] legacy_get_tree+0x131/0x460 [ 371.248073] vfs_get_tree+0x1cb/0x5c0 [ 371.251890] do_mount+0x6f9/0x1e30 [ 371.255436] ? rcu_is_watching+0x8c/0x150 [ 371.259596] ? trace_hardirqs_on+0xbd/0x2c0 [ 371.263935] ? copy_mount_string+0x40/0x40 [ 371.268194] ? copy_mount_options+0x5f/0x380 [ 371.272618] ? kmem_cache_alloc_trace+0x324/0x730 [ 371.277485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.283039] ? _copy_from_user+0xdf/0x150 [ 371.287205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.292755] ? copy_mount_options+0x285/0x380 [ 371.297268] ksys_mount+0x12d/0x140 [ 371.300915] __x64_sys_mount+0xbe/0x150 [ 371.304912] do_syscall_64+0x1b9/0x820 [ 371.308813] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 371.314207] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.319152] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 371.324206] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 371.329237] ? recalc_sigpending_tsk+0x180/0x180 [ 371.334009] ? kasan_check_write+0x14/0x20 [ 371.338262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.343123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.348332] RIP: 0033:0x457099 [ 371.351538] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:20 executing program 3: 03:33:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:21 executing program 3: 03:33:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) [ 371.370448] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.378171] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 371.385445] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 371.392723] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 371.400001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 371.407276] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000022 03:33:21 executing program 2: r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) getsockopt(r0, 0x39e1, 0x0, &(0x7f00000002c0)=""/250, &(0x7f0000000040)=0xfa) r1 = socket$inet6(0xa, 0x1000000040002, 0x6ee) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = socket(0x6, 0x5, 0xaa1) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0xbfc2, 0x80000000, 0x9, 0x2ce, 0x100, 0x3, 0x40, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1, 0x81, 0x535, 0x3, 0x5bf}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x9}}, 0x1000000000000000, 0x5, 0x9ed980b, 0x1ff, 0x10}, &(0x7f0000000440)=0x98) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x204002001, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000003c0)={0x18, 0x1d, 0x13, 0x8, 0x4, 0x0, 0x6, 0x10e, 0x1}) read(r2, &(0x7f0000000200)=""/28, 0x1c) getuid() ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) write$FUSE_WRITE(r5, &(0x7f0000000400)={0x18, 0x0, 0x7, {0xfffffffffffffffe}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:21 executing program 3: 03:33:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x280, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x1000}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:21 executing program 0: 03:33:21 executing program 5 (fault-call:4 fault-nth:35): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:21 executing program 3: 03:33:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:21 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x64}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:21 executing program 3: 03:33:21 executing program 0: [ 371.799209] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 371.851573] FAULT_INJECTION: forcing a failure. [ 371.851573] name failslab, interval 1, probability 0, space 0, times 0 [ 371.862911] CPU: 0 PID: 15244 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 371.871417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.880778] Call Trace: [ 371.883388] dump_stack+0x1c9/0x2b4 [ 371.887039] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.892256] ? __kernel_text_address+0xd/0x40 [ 371.896743] ? unwind_get_return_address+0x61/0xa0 [ 371.901685] should_fail.cold.4+0xa/0x11 [ 371.905755] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.910876] ? save_stack+0x43/0xd0 [ 371.914516] ? kasan_kmalloc+0xc4/0xe0 [ 371.918494] ? kmem_cache_alloc_trace+0x152/0x730 [ 371.923349] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 371.928540] ? __list_lru_init+0x4d6/0x840 [ 371.932786] ? alloc_super+0x9b6/0xb20 [ 371.936691] ? graph_lock+0x170/0x170 [ 371.940492] ? legacy_get_tree+0x131/0x460 [ 371.944725] ? vfs_get_tree+0x1cb/0x5c0 [ 371.948701] ? do_mount+0x6f9/0x1e30 [ 371.952424] ? ksys_mount+0x12d/0x140 [ 371.956214] ? __x64_sys_mount+0xbe/0x150 [ 371.960354] ? find_held_lock+0x36/0x1c0 [ 371.964407] ? __lock_is_held+0xb5/0x140 [ 371.968469] ? check_same_owner+0x340/0x340 [ 371.972805] ? rcu_note_context_switch+0x680/0x680 [ 371.977737] __should_failslab+0x124/0x180 [ 371.981980] should_failslab+0x9/0x14 [ 371.985801] kmem_cache_alloc_trace+0x2b5/0x730 [ 371.990473] ? __kmalloc_node+0x33/0x70 [ 371.994438] ? __kmalloc_node+0x33/0x70 [ 371.998409] ? rcu_read_lock_sched_held+0x108/0x120 [ 372.003420] __memcg_init_list_lru_node+0x185/0x2d0 [ 372.008431] ? kvfree_rcu+0x20/0x20 [ 372.012044] ? __kmalloc_node+0x47/0x70 [ 372.016010] __list_lru_init+0x4d6/0x840 [ 372.020060] ? list_lru_destroy+0x500/0x500 [ 372.024371] ? up_write+0x7b/0x220 [ 372.027900] ? down_read+0x1d0/0x1d0 [ 372.031604] ? init_wait_entry+0x1c0/0x1c0 [ 372.035846] ? prealloc_shrinker+0xe5/0x330 [ 372.040189] alloc_super+0x9b6/0xb20 [ 372.043940] ? destroy_unused_super.part.11+0x110/0x110 [ 372.049292] ? lock_downgrade+0x8f0/0x8f0 [ 372.053431] ? kasan_check_read+0x11/0x20 [ 372.057579] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 372.062152] ? kasan_check_write+0x14/0x20 [ 372.066392] ? do_raw_spin_lock+0xc1/0x200 [ 372.070629] sget_userns+0x276/0x860 [ 372.074331] ? get_anon_bdev+0xc0/0xc0 [ 372.078216] ? vfs_get_super+0x270/0x270 [ 372.082290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.087828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.093351] ? ns_capable_common+0x13f/0x170 [ 372.097748] ? get_anon_bdev+0xc0/0xc0 [ 372.101624] sget+0x10b/0x150 [ 372.104730] ? ovl_show_options+0x550/0x550 [ 372.109037] mount_nodev+0x38/0x120 [ 372.112664] ? ovl_own_xattr_set+0x10/0x10 [ 372.116898] ovl_mount+0x34/0x40 [ 372.120254] legacy_get_tree+0x131/0x460 [ 372.124317] vfs_get_tree+0x1cb/0x5c0 [ 372.128122] do_mount+0x6f9/0x1e30 [ 372.131663] ? copy_mount_string+0x40/0x40 [ 372.135901] ? retint_kernel+0x10/0x10 [ 372.139780] ? copy_mount_options+0x213/0x380 [ 372.144264] ? write_comp_data+0x6c/0x70 [ 372.148336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.153882] ? copy_mount_options+0x285/0x380 [ 372.158393] ksys_mount+0x12d/0x140 [ 372.162021] __x64_sys_mount+0xbe/0x150 [ 372.166001] do_syscall_64+0x1b9/0x820 [ 372.169915] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 372.175272] ? syscall_return_slowpath+0x5e0/0x5e0 [ 372.180192] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 372.185205] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 372.190211] ? recalc_sigpending_tsk+0x180/0x180 [ 372.194956] ? kasan_check_write+0x14/0x20 [ 372.199193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.204028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.209206] RIP: 0033:0x457099 [ 372.212403] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.231292] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.238984] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 372.246239] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 372.253493] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 372.260756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 372.268008] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000023 03:33:22 executing program 5 (fault-call:4 fault-nth:36): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:22 executing program 3: 03:33:22 executing program 0: [ 372.480046] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 372.519432] FAULT_INJECTION: forcing a failure. [ 372.519432] name failslab, interval 1, probability 0, space 0, times 0 [ 372.530886] CPU: 0 PID: 15272 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 372.539395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.548758] Call Trace: [ 372.551362] dump_stack+0x1c9/0x2b4 [ 372.555012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.560227] ? __kernel_text_address+0xd/0x40 [ 372.564742] ? unwind_get_return_address+0x61/0xa0 [ 372.569699] should_fail.cold.4+0xa/0x11 [ 372.573786] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 372.578918] ? save_stack+0x43/0xd0 [ 372.582563] ? kasan_kmalloc+0xc4/0xe0 [ 372.586473] ? kmem_cache_alloc_trace+0x152/0x730 [ 372.591343] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 372.596554] ? __list_lru_init+0x4d6/0x840 [ 372.600811] ? alloc_super+0x9b6/0xb20 [ 372.604722] ? graph_lock+0x170/0x170 [ 372.608539] ? legacy_get_tree+0x131/0x460 [ 372.612797] ? vfs_get_tree+0x1cb/0x5c0 [ 372.616788] ? do_mount+0x6f9/0x1e30 [ 372.620517] ? ksys_mount+0x12d/0x140 [ 372.624327] ? __x64_sys_mount+0xbe/0x150 [ 372.628486] ? find_held_lock+0x36/0x1c0 [ 372.632559] ? __lock_is_held+0xb5/0x140 [ 372.636645] ? check_same_owner+0x340/0x340 [ 372.640979] ? rcu_note_context_switch+0x680/0x680 [ 372.646406] __should_failslab+0x124/0x180 [ 372.650650] should_failslab+0x9/0x14 [ 372.654460] kmem_cache_alloc_trace+0x2b5/0x730 [ 372.659134] ? __kmalloc_node+0x33/0x70 [ 372.663121] ? __kmalloc_node+0x33/0x70 [ 372.667113] ? rcu_read_lock_sched_held+0x108/0x120 [ 372.672147] __memcg_init_list_lru_node+0x185/0x2d0 [ 372.677203] ? kvfree_rcu+0x20/0x20 [ 372.680841] ? __kmalloc_node+0x47/0x70 [ 372.684833] __list_lru_init+0x4d6/0x840 [ 372.688905] ? list_lru_destroy+0x500/0x500 [ 372.693238] ? up_write+0x7b/0x220 [ 372.696785] ? down_read+0x1d0/0x1d0 [ 372.700506] ? init_wait_entry+0x1c0/0x1c0 [ 372.704752] ? prealloc_shrinker+0xe5/0x330 [ 372.709087] alloc_super+0x9b6/0xb20 [ 372.712810] ? destroy_unused_super.part.11+0x110/0x110 [ 372.718192] ? lock_downgrade+0x8f0/0x8f0 [ 372.722356] ? kasan_check_read+0x11/0x20 [ 372.726517] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 372.731107] ? kasan_check_write+0x14/0x20 [ 372.735345] ? do_raw_spin_lock+0xc1/0x200 [ 372.739587] sget_userns+0x276/0x860 [ 372.743303] ? get_anon_bdev+0xc0/0xc0 [ 372.747207] ? vfs_get_super+0x270/0x270 [ 372.751287] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.756939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.762479] ? ns_capable_common+0x13f/0x170 [ 372.766892] ? get_anon_bdev+0xc0/0xc0 [ 372.770780] sget+0x10b/0x150 [ 372.773895] ? ovl_show_options+0x550/0x550 [ 372.778219] mount_nodev+0x38/0x120 [ 372.781854] ? ovl_own_xattr_set+0x10/0x10 [ 372.786091] ovl_mount+0x34/0x40 [ 372.789462] legacy_get_tree+0x131/0x460 [ 372.793530] vfs_get_tree+0x1cb/0x5c0 [ 372.797360] do_mount+0x6f9/0x1e30 [ 372.800911] ? copy_mount_string+0x40/0x40 [ 372.805154] ? retint_kernel+0x10/0x10 [ 372.809068] ? copy_mount_options+0x1a1/0x380 [ 372.813572] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 372.818422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.823959] ? copy_mount_options+0x285/0x380 [ 372.828462] ksys_mount+0x12d/0x140 [ 372.832095] __x64_sys_mount+0xbe/0x150 [ 372.836079] do_syscall_64+0x1b9/0x820 [ 372.839973] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 372.845344] ? syscall_return_slowpath+0x5e0/0x5e0 [ 372.850280] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 372.855301] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 372.860319] ? recalc_sigpending_tsk+0x180/0x180 [ 372.865077] ? kasan_check_write+0x14/0x20 [ 372.869320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.874189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.879379] RIP: 0033:0x457099 [ 372.882577] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.901477] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.909196] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 372.916468] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 372.923735] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 03:33:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x1, 0x8000f, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3f, 0x7}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x7f36, 0x8, 0x2, 0x2, 0x81, 0x9, 0x61, 0x3, r2}, &(0x7f0000000300)=0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r3) 03:33:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:22 executing program 3: [ 372.931009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 372.938280] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000024 03:33:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/28, 0x1c) sync() ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x20be, 0x100) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x3, @mcast1, 0x1df}}}, 0x3a) 03:33:23 executing program 0: 03:33:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:23 executing program 3: 03:33:23 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0x100000000000000}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:23 executing program 5 (fault-call:4 fault-nth:37): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:23 executing program 0: 03:33:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) [ 373.141748] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:23 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) [ 373.192339] FAULT_INJECTION: forcing a failure. [ 373.192339] name failslab, interval 1, probability 0, space 0, times 0 [ 373.203691] CPU: 1 PID: 15309 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 373.212194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.221548] Call Trace: [ 373.224171] dump_stack+0x1c9/0x2b4 [ 373.227823] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.233036] ? __kernel_text_address+0xd/0x40 [ 373.237553] ? unwind_get_return_address+0x61/0xa0 [ 373.242511] should_fail.cold.4+0xa/0x11 [ 373.246601] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.251735] ? save_stack+0x43/0xd0 [ 373.255380] ? kasan_kmalloc+0xc4/0xe0 [ 373.259282] ? kmem_cache_alloc_trace+0x152/0x730 [ 373.264146] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 373.269375] ? __list_lru_init+0x4d6/0x840 [ 373.273626] ? alloc_super+0x9b6/0xb20 [ 373.277527] ? graph_lock+0x170/0x170 [ 373.281340] ? legacy_get_tree+0x131/0x460 [ 373.285591] ? vfs_get_tree+0x1cb/0x5c0 03:33:23 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x500, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:23 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) [ 373.289583] ? do_mount+0x6f9/0x1e30 [ 373.293311] ? ksys_mount+0x12d/0x140 [ 373.297135] ? __x64_sys_mount+0xbe/0x150 [ 373.301310] ? find_held_lock+0x36/0x1c0 [ 373.305397] ? __lock_is_held+0xb5/0x140 [ 373.309501] ? check_same_owner+0x340/0x340 [ 373.313851] ? rcu_note_context_switch+0x680/0x680 [ 373.318819] __should_failslab+0x124/0x180 [ 373.323075] should_failslab+0x9/0x14 [ 373.326896] kmem_cache_alloc_trace+0x2b5/0x730 [ 373.331584] ? __kmalloc_node+0x33/0x70 [ 373.335577] ? __kmalloc_node+0x33/0x70 [ 373.339576] ? rcu_read_lock_sched_held+0x108/0x120 [ 373.344627] __memcg_init_list_lru_node+0x185/0x2d0 [ 373.349671] ? kvfree_rcu+0x20/0x20 [ 373.353329] ? __kmalloc_node+0x47/0x70 [ 373.357331] __list_lru_init+0x4d6/0x840 [ 373.361418] ? list_lru_destroy+0x500/0x500 [ 373.365765] ? up_write+0x7b/0x220 [ 373.369329] ? down_read+0x1d0/0x1d0 [ 373.373069] ? prealloc_shrinker+0xe5/0x330 [ 373.377417] alloc_super+0x9b6/0xb20 [ 373.381152] ? destroy_unused_super.part.11+0x110/0x110 [ 373.386556] ? lock_downgrade+0x8f0/0x8f0 [ 373.390731] ? kasan_check_read+0x11/0x20 [ 373.394899] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 373.399494] ? kasan_check_write+0x14/0x20 [ 373.403742] ? do_raw_spin_lock+0xc1/0x200 [ 373.407995] sget_userns+0x276/0x860 [ 373.411722] ? get_anon_bdev+0xc0/0xc0 [ 373.415627] ? vfs_get_super+0x270/0x270 [ 373.419715] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 373.425289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.430832] ? ns_capable_common+0x13f/0x170 [ 373.435256] ? get_anon_bdev+0xc0/0xc0 [ 373.439151] sget+0x10b/0x150 [ 373.442283] ? ovl_show_options+0x550/0x550 [ 373.446609] mount_nodev+0x38/0x120 [ 373.450252] ? ovl_own_xattr_set+0x10/0x10 [ 373.454494] ovl_mount+0x34/0x40 [ 373.457875] legacy_get_tree+0x131/0x460 [ 373.461948] vfs_get_tree+0x1cb/0x5c0 [ 373.465759] do_mount+0x6f9/0x1e30 [ 373.469313] ? copy_mount_string+0x40/0x40 [ 373.473556] ? retint_kernel+0x10/0x10 [ 373.477461] ? copy_mount_options+0x1e3/0x380 [ 373.481965] ? write_comp_data+0x1/0x70 [ 373.485952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.491491] ? copy_mount_options+0x285/0x380 [ 373.495997] ksys_mount+0x12d/0x140 [ 373.499634] __x64_sys_mount+0xbe/0x150 [ 373.503622] do_syscall_64+0x1b9/0x820 [ 373.507516] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 373.512893] ? syscall_return_slowpath+0x5e0/0x5e0 [ 373.517834] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 373.522857] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 373.527878] ? recalc_sigpending_tsk+0x180/0x180 [ 373.532643] ? kasan_check_write+0x14/0x20 [ 373.536891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.541758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.546949] RIP: 0033:0x457099 [ 373.550153] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.569078] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 373.576809] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 373.584088] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 03:33:23 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x2, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 373.591366] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 373.598641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 373.605916] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000025 03:33:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:23 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x5}, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") fcntl$setpipe(r1, 0x407, 0x9) r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:23 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2f, 0x4, 0x0, {0x0, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7, 0x8}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3c181ade, 0x8209, 0x101, 0x5, r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f00000000c0)="1402010000000000ee", 0x9) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local}, 0x8) sendto$inet(r4, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9518f00637fc7cf6757fd3157", 0x5b5, 0x804, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) 03:33:23 executing program 5 (fault-call:4 fault-nth:38): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0xcb61e2f2288a4153, 0x0) 03:33:23 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:23 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:24 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:24 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 374.032303] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15366] [ 374.069110] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:33:24 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) [ 374.141974] FAULT_INJECTION: forcing a failure. [ 374.141974] name failslab, interval 1, probability 0, space 0, times 0 [ 374.153281] CPU: 0 PID: 15384 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 374.161784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.171148] Call Trace: [ 374.173771] dump_stack+0x1c9/0x2b4 [ 374.177426] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.182637] ? __kernel_text_address+0xd/0x40 [ 374.187149] ? unwind_get_return_address+0x61/0xa0 03:33:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 374.192119] should_fail.cold.4+0xa/0x11 [ 374.196218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.201350] ? save_stack+0x43/0xd0 [ 374.204996] ? kasan_kmalloc+0xc4/0xe0 [ 374.208902] ? kmem_cache_alloc_trace+0x152/0x730 [ 374.213767] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 374.218976] ? __list_lru_init+0x4d6/0x840 [ 374.223230] ? alloc_super+0x9b6/0xb20 [ 374.227139] ? graph_lock+0x170/0x170 [ 374.230978] ? legacy_get_tree+0x131/0x460 [ 374.235238] ? vfs_get_tree+0x1cb/0x5c0 03:33:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 374.239233] ? do_mount+0x6f9/0x1e30 [ 374.242961] ? ksys_mount+0x12d/0x140 [ 374.246782] ? __x64_sys_mount+0xbe/0x150 [ 374.249758] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15393] [ 374.250947] ? find_held_lock+0x36/0x1c0 [ 374.250973] ? __lock_is_held+0xb5/0x140 [ 374.251009] ? check_same_owner+0x340/0x340 [ 374.251036] ? rcu_note_context_switch+0x680/0x680 [ 374.251077] __should_failslab+0x124/0x180 [ 374.282064] should_failslab+0x9/0x14 [ 374.285873] kmem_cache_alloc_trace+0x2b5/0x730 [ 374.290544] ? __kmalloc_node+0x33/0x70 [ 374.294521] ? __kmalloc_node+0x33/0x70 [ 374.298513] ? rcu_read_lock_sched_held+0x108/0x120 [ 374.303546] __memcg_init_list_lru_node+0x185/0x2d0 [ 374.308572] ? kvfree_rcu+0x20/0x20 [ 374.312203] ? __kmalloc_node+0x47/0x70 [ 374.316201] __list_lru_init+0x4d6/0x840 [ 374.320294] ? list_lru_destroy+0x500/0x500 [ 374.324626] ? up_write+0x7b/0x220 [ 374.328222] ? down_read+0x1d0/0x1d0 [ 374.331959] ? init_wait_entry+0x1c0/0x1c0 [ 374.336206] ? prealloc_shrinker+0xe5/0x330 [ 374.340543] alloc_super+0x9b6/0xb20 [ 374.344270] ? destroy_unused_super.part.11+0x110/0x110 [ 374.349638] ? lock_downgrade+0x8f0/0x8f0 [ 374.353795] ? kasan_check_read+0x11/0x20 [ 374.357949] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 374.362535] ? kasan_check_write+0x14/0x20 [ 374.366772] ? do_raw_spin_lock+0xc1/0x200 [ 374.371029] sget_userns+0x276/0x860 [ 374.374740] ? get_anon_bdev+0xc0/0xc0 [ 374.378638] ? vfs_get_super+0x270/0x270 [ 374.382721] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.388291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.393829] ? ns_capable_common+0x13f/0x170 [ 374.398241] ? get_anon_bdev+0xc0/0xc0 [ 374.402129] sget+0x10b/0x150 [ 374.405251] ? ovl_show_options+0x550/0x550 [ 374.409574] mount_nodev+0x38/0x120 [ 374.413216] ? ovl_own_xattr_set+0x10/0x10 [ 374.417456] ovl_mount+0x34/0x40 [ 374.420829] legacy_get_tree+0x131/0x460 [ 374.424900] vfs_get_tree+0x1cb/0x5c0 [ 374.428705] do_mount+0x6f9/0x1e30 [ 374.432248] ? rcu_is_watching+0x8c/0x150 [ 374.436395] ? trace_hardirqs_on+0xbd/0x2c0 [ 374.440721] ? copy_mount_string+0x40/0x40 [ 374.444961] ? copy_mount_options+0x5f/0x380 [ 374.449376] ? kmem_cache_alloc_trace+0x324/0x730 [ 374.454230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.459779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.465319] ? copy_mount_options+0x285/0x380 [ 374.469819] ksys_mount+0x12d/0x140 [ 374.473452] __x64_sys_mount+0xbe/0x150 [ 374.477485] do_syscall_64+0x1b9/0x820 [ 374.481378] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 374.486761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 374.491693] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 374.496717] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 374.501759] ? recalc_sigpending_tsk+0x180/0x180 [ 374.506533] ? kasan_check_write+0x14/0x20 [ 374.510777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.515638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.520828] RIP: 0033:0x457099 [ 374.524023] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.542942] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.553022] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 374.560294] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 374.567912] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 374.575192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 374.582468] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000026 03:33:24 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x8, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 374.605998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:33:24 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 374.648438] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 374.683357] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 374.741442] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15421] 03:33:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88201, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000200)=0x9) renameat2(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/28, 0xfffffffffffffec7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='&self)\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x7, 0x7, &(0x7f0000000240)=0xbc84}) close(r1) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:33:24 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:24 executing program 5 (fault-call:4 fault-nth:39): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) close(r1) 03:33:24 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 374.979019] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 375.076904] FAULT_INJECTION: forcing a failure. [ 375.076904] name failslab, interval 1, probability 0, space 0, times 0 [ 375.088252] CPU: 0 PID: 15470 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 375.096758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.106120] Call Trace: [ 375.108744] dump_stack+0x1c9/0x2b4 [ 375.112399] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.117602] ? __kernel_text_address+0xd/0x40 [ 375.122119] ? unwind_get_return_address+0x61/0xa0 [ 375.127088] should_fail.cold.4+0xa/0x11 [ 375.131200] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.136334] ? save_stack+0x43/0xd0 [ 375.139979] ? kasan_kmalloc+0xc4/0xe0 [ 375.143887] ? kmem_cache_alloc_trace+0x152/0x730 [ 375.148757] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 375.153963] ? __list_lru_init+0x4d6/0x840 [ 375.158222] ? alloc_super+0x9b6/0xb20 [ 375.162134] ? graph_lock+0x170/0x170 [ 375.165979] ? legacy_get_tree+0x131/0x460 [ 375.170228] ? vfs_get_tree+0x1cb/0x5c0 03:33:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ptrace(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001080], 0x0, &(0x7f0000000100), &(0x7f0000001080)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x108) 03:33:25 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 375.174223] ? do_mount+0x6f9/0x1e30 [ 375.177953] ? ksys_mount+0x12d/0x140 [ 375.181776] ? __x64_sys_mount+0xbe/0x150 [ 375.185951] ? find_held_lock+0x36/0x1c0 [ 375.190039] ? __lock_is_held+0xb5/0x140 [ 375.194141] ? check_same_owner+0x340/0x340 [ 375.198505] ? rcu_note_context_switch+0x680/0x680 [ 375.203470] __should_failslab+0x124/0x180 [ 375.207728] should_failslab+0x9/0x14 [ 375.211547] kmem_cache_alloc_trace+0x2b5/0x730 [ 375.216232] ? __kmalloc_node+0x33/0x70 [ 375.220230] ? __kmalloc_node+0x33/0x70 [ 375.224236] ? rcu_read_lock_sched_held+0x108/0x120 [ 375.229288] __memcg_init_list_lru_node+0x185/0x2d0 [ 375.234324] ? kvfree_rcu+0x20/0x20 [ 375.237966] ? __kmalloc_node+0x47/0x70 [ 375.241977] __list_lru_init+0x4d6/0x840 [ 375.246066] ? list_lru_destroy+0x500/0x500 [ 375.250411] ? up_write+0x7b/0x220 [ 375.253971] ? down_read+0x1d0/0x1d0 [ 375.257708] ? init_wait_entry+0x1c0/0x1c0 [ 375.261960] ? prealloc_shrinker+0xe5/0x330 [ 375.266309] alloc_super+0x9b6/0xb20 [ 375.270045] ? destroy_unused_super.part.11+0x110/0x110 03:33:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x7, &(0x7f00000016c0)=[{&(0x7f00000002c0)="687b80a264f61a6885b872f56b9f0f6d22751536b55f3123b419ed207f6ae2070d0040eeaf294efd6abfb33b3eb9c371aef71d566f8e8c49cafb62c165d780df369702cf978afbfeba31f0c3c58c5590bd3c46ec2e6e9c48e453b3c7d94b87ed767b6047a92b0ea3c650b2aecf75a94c9710ba6674414c0dce41094a34d863a22d367eefa38cdbe7f40860d33ebcda09a9b119d5d3cb06bc7135c49544c4c516960e136f068c78716c8e6c94", 0xac, 0x401}, {&(0x7f0000000380)="594ec605e38285546611561b6a0e8023a30bfe17cba7de2a5000ff728336c8ce07963aabc7acd07e736a7560de536bb298e9183d046ff8f31c43c16188ab4b0fd4bd1703ad3b59f44fc92512b1279787b59e8bd24f304a2b7de879bf0f19a0f0c712c3cbd40e06d37e63e6b807f4fb440b2d45dc28a6d2bcc8e0daab597b029331d941924c050173efd14d7611429b617369fe8eda16bc94db652804ec417d02057af69f1255414d00881ebd6ccc808d91ed698d494258d732e5a9a9c834474f22653d4230bd9bdb3a0685f327d8caa90e0ab4e38bca1368c4f2afad619680378e32cebadbfb", 0xe6, 0x3}, {&(0x7f0000000480)="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", 0x1000, 0x1}, {&(0x7f0000000240)="9d3f13eb25fe", 0x6, 0x100}, {&(0x7f0000001480)="feb966d59c7c387b7d23fbb1ad109e484b4da52bdb21e688c24e6e8cf9a05df25fcc6e5078c281c0cb0698e5cab53fa10495ceceef7099ed1209719e1be2a9fad9269dcb596ce001db7d20a3eafbf5e73e74bd17f9f33549e4e6d9589e1a3c75fc39", 0x62, 0x10001}, {&(0x7f0000001500)="a4f3f94d0a0acd5083f604c2bafe58974d6ee00c1c1884be3d2b6091ffff110ebbf6815392f1703e24f326b370d9001f417ffa1a3e8d6825b3883ad9e0cc3884c2b98de0c86e1d753305304c2650457a0cd557002232392b679a0dfb528c0363200e9a25bcdec553eec94ee8c46bbec5d5e7949bbde83428b15e12f461f4631437501b6f28a0cf9cc7b1b047d93fba596551058a05d50070da85c0926d2358df1ffb4bd79a7eae07ed555ef363b01996b856257ce6cf757002506c2ef169a18f65a753f49503380777", 0xc9, 0x3}, {&(0x7f0000001600)="b5c4fcc1251f9f59741aa5cfb6500880ad52aa47d21fa6ef8009777dde4f0942bbec22f414f43aa8d158ea870edc08c78a9dbb8d796a9bc704b248f7611041205d9b593082a3aa93e007876820348e767d75cb2691a788c163824232dd8483218021a50b2174490c2619a54b2f966415a071e515b67744c0ba61bc26afa4fde1146bd4109cd8e882b8fc5bb2a45864cf52792715cf0714307d87f6740da074293c7f11c6a67285b3eb60955888037753253e92ed177dc7abffb7e6", 0xbb, 0x4c}], 0x100448, &(0x7f0000001800)={[{@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x2}}, {@gid={'gid', 0x3d, r2}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f7274314000009f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) [ 375.275427] ? lock_downgrade+0x8f0/0x8f0 [ 375.279598] ? kasan_check_read+0x11/0x20 [ 375.283763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 375.288361] ? kasan_check_write+0x14/0x20 [ 375.292609] ? do_raw_spin_lock+0xc1/0x200 [ 375.296857] sget_userns+0x276/0x860 [ 375.300577] ? get_anon_bdev+0xc0/0xc0 [ 375.304484] ? vfs_get_super+0x270/0x270 [ 375.308578] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 375.314153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.319722] ? ns_capable_common+0x13f/0x170 [ 375.324146] ? get_anon_bdev+0xc0/0xc0 [ 375.328079] sget+0x10b/0x150 [ 375.331217] ? ovl_show_options+0x550/0x550 [ 375.335555] mount_nodev+0x38/0x120 [ 375.339219] ? ovl_own_xattr_set+0x10/0x10 [ 375.343468] ovl_mount+0x34/0x40 [ 375.346852] legacy_get_tree+0x131/0x460 [ 375.350949] vfs_get_tree+0x1cb/0x5c0 [ 375.354771] do_mount+0x6f9/0x1e30 [ 375.358323] ? rcu_is_watching+0x8c/0x150 [ 375.362490] ? copy_mount_string+0x40/0x40 [ 375.366743] ? retint_kernel+0x10/0x10 [ 375.370656] ? copy_mount_options+0x1f0/0x380 [ 375.375177] ? copy_mount_options+0x1f6/0x380 [ 375.379699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.385252] ? copy_mount_options+0x285/0x380 [ 375.389770] ksys_mount+0x12d/0x140 [ 375.393416] __x64_sys_mount+0xbe/0x150 [ 375.397420] do_syscall_64+0x1b9/0x820 [ 375.401329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 375.406706] ? syscall_return_slowpath+0x5e0/0x5e0 [ 375.411651] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 375.416682] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 375.421710] ? recalc_sigpending_tsk+0x180/0x180 [ 375.426482] ? kasan_check_write+0x14/0x20 [ 375.430737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.435603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.440801] RIP: 0033:0x457099 [ 375.444004] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.462941] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.470666] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 03:33:25 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0xf, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200), 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:25 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 375.477940] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 375.485223] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 375.492501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 375.499781] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000027 03:33:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000002c0)={{0x1ff, 0x1}, 'port1\x00', 0x20, 0x5, 0xee, 0x800, 0x4, 0x3227, 0x5, 0x0, 0x6, 0x100000001}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:25 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:25 executing program 5 (fault-call:4 fault-nth:40): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 375.949621] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 376.023742] FAULT_INJECTION: forcing a failure. [ 376.023742] name failslab, interval 1, probability 0, space 0, times 0 [ 376.035309] CPU: 1 PID: 15544 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 376.043828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.053201] Call Trace: [ 376.055813] dump_stack+0x1c9/0x2b4 [ 376.059463] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.064701] should_fail.cold.4+0xa/0x11 [ 376.068784] ? save_stack+0xa9/0xd0 [ 376.072438] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 376.077556] ? kmem_cache_alloc+0x12e/0x710 [ 376.081893] ? prepare_creds+0x80/0x3e0 [ 376.085887] ? ovl_fill_super+0x146/0x3ff9 [ 376.090137] ? mount_nodev+0x73/0x120 [ 376.093967] ? ovl_mount+0x34/0x40 [ 376.097524] ? legacy_get_tree+0x131/0x460 [ 376.101777] ? vfs_get_tree+0x1cb/0x5c0 [ 376.105780] ? do_syscall_64+0x1b9/0x820 [ 376.109894] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.115278] ? graph_lock+0x170/0x170 [ 376.119099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.124655] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 376.130132] ? find_held_lock+0x36/0x1c0 [ 376.134224] ? __lock_is_held+0xb5/0x140 [ 376.138334] ? check_same_owner+0x340/0x340 [ 376.142679] ? apparmor_cred_transfer+0x590/0x590 [ 376.146729] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15563] [ 376.147546] ? rcu_note_context_switch+0x680/0x680 [ 376.147569] ? rcu_read_lock_sched_held+0x108/0x120 [ 376.147597] __should_failslab+0x124/0x180 [ 376.147621] should_failslab+0x9/0x14 [ 376.147644] __kmalloc_track_caller+0x2ae/0x720 [ 376.179707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.185264] ? prepare_creds+0x31f/0x3e0 [ 376.189335] ? abort_creds+0x180/0x180 [ 376.193224] ? ovl_fill_super+0x297/0x3ff9 [ 376.197469] kstrdup+0x39/0x70 [ 376.200672] ? ovl_show_options+0x550/0x550 [ 376.205010] ovl_fill_super+0x297/0x3ff9 [ 376.209088] ? vfs_get_super+0x270/0x270 [ 376.213179] ? ovl_show_options+0x550/0x550 [ 376.217545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.223092] ? ns_capable_common+0x13f/0x170 [ 376.227511] ? get_anon_bdev+0xc0/0xc0 [ 376.231410] ? sget+0x113/0x150 [ 376.234710] ? ovl_show_options+0x550/0x550 [ 376.239047] mount_nodev+0x73/0x120 [ 376.242700] ? ovl_own_xattr_set+0x10/0x10 [ 376.246947] ovl_mount+0x34/0x40 [ 376.249376] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15568] [ 376.250335] legacy_get_tree+0x131/0x460 [ 376.250359] vfs_get_tree+0x1cb/0x5c0 [ 376.250379] do_mount+0x6f9/0x1e30 [ 376.250395] ? rcu_is_watching+0x8c/0x150 [ 376.250416] ? trace_hardirqs_on+0xbd/0x2c0 [ 376.279717] ? copy_mount_string+0x40/0x40 [ 376.283968] ? copy_mount_options+0x5f/0x380 [ 376.288393] ? kmem_cache_alloc_trace+0x324/0x730 [ 376.293258] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.298808] ? _copy_from_user+0xdf/0x150 [ 376.302978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.308528] ? copy_mount_options+0x285/0x380 [ 376.313480] ksys_mount+0x12d/0x140 [ 376.317127] __x64_sys_mount+0xbe/0x150 [ 376.321129] do_syscall_64+0x1b9/0x820 [ 376.325044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 376.330434] ? syscall_return_slowpath+0x5e0/0x5e0 [ 376.335387] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 376.340419] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 376.345454] ? recalc_sigpending_tsk+0x180/0x180 [ 376.350229] ? kasan_check_write+0x14/0x20 [ 376.354486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.359351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.364548] RIP: 0033:0x457099 [ 376.367752] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.386656] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.394361] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 376.401630] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 376.408915] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 376.416188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 03:33:26 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 2: r0 = socket$inet6(0xa, 0x6, 0xff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x151042) prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x3000)=nil) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x80) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000002c0)="8251a1747b29a52c915f1fc6ffb845541ad063430d5ba4270c7c168c4995326005194fee2f166fbcb4baae5b11f0faf5f0c048da0b396ea1d40db8de1b6a296b79bdbf15b1fdefb23e3285442d54c5525bde18f5741eae3020bdd3a4b816b1a9a7111405318822b9d22059d07a80a27a343a90c717dff263", 0x78) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:26 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x64}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:26 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 3: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 3: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 376.423458] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000028 03:33:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{r3, r4/1000+10000}, {0x77359400}}) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000800)=0xc) r7 = getegid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) r9 = getuid() getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) r11 = fcntl$getown(r0, 0x9) r12 = geteuid() getgroups(0x9, &(0x7f0000000940)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@ipv4={[], [], @multicast2}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000ac0)=0xe8) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)) r20 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000e00)=0xe8) getresgid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) sendmsg$unix(r2, &(0x7f0000001040)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="19c88969cbe386b5043ae77a62", 0xd}, {&(0x7f00000003c0)="223aec79e378570acaabedfd8fa2bdcaaca7374374c8c4873d43d100d609901e8f64f610497333434abcc9eb529ca6204e74dc8f5cbeebdac5f2b8fccb3304cdb6f5033d64561312c57848e084", 0x4d}, {&(0x7f0000000440)="dbe4a9587e939d013f0e890c68a6143be6d153fe377ec1f3c6b561e9ba1009ba1839b23c86f63b20c19282127a861f4ee0dcc1b1be54bf9ef344ab494cc9802f66c8c64660bdd8e0b2fbe6c59081bc411e1005803741a95256a01db6a8e48e1283c0ce9797da9f4351f5609e8fa937c3b380b2e958a82a9787b88c2f66271e02f77d72f61adc6e0e5127ccde9c1e247620b1a76fc39a21ea", 0x98}, {&(0x7f0000000500)="eae1e7292590604f3d2c2755a2f81d6e2ecdc8d1ce559615bd12b60dc2b0d5dbeb493a14d1a04eb08785a0f4f31e026c80451111da69035242497733d0a9eb056ee5147128c6a5e55a48937e788d68d988b95196d1658b8af3d06f599383bdee2825ef7e01c6ae53ff44d3", 0x6b}, {&(0x7f0000000580)="becdbe22a431ff1edd93b731e7a10342413922a4d5314c1e01cede40167b1c5dd5562ebaa56572eae58f265c67d512c3204d72d9329ffe7a51df8aace0ce9e96f8d247c5e63433b0fe012ec83c0fcfa782e3d4188f8cb774e2b753705fb47a2f091b0fbcd171648008c75ebf46d88032dd99638576591774b4c281fc05a671eaf736a44b447a4917cbc9909da132f277972febc3d605788e2cd14baaee0eb9c18003", 0xa2}, {&(0x7f0000000640)="d6a95d88a3cd0c6b04fdde82685105273ccef1dc1dad8fb545598430788fc59d8b74d4077a7c03bc68dcdafed65255c169318de2c63511ca28", 0x39}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x4}, 0x20044001) 03:33:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 3: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r0}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)) 03:33:26 executing program 2: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:26 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x5a010000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:26 executing program 5 (fault-call:4 fault-nth:41): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:26 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 376.868273] ptrace attach of "/root/syz-executor0"[4267] was attempted by "/root/syz-executor0"[15608] [ 376.919076] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r0}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)) 03:33:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 376.978860] FAULT_INJECTION: forcing a failure. [ 376.978860] name failslab, interval 1, probability 0, space 0, times 0 [ 376.990333] CPU: 0 PID: 15635 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 376.998843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.008211] Call Trace: [ 377.010824] dump_stack+0x1c9/0x2b4 [ 377.014481] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.019692] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 377.024396] should_fail.cold.4+0xa/0x11 [ 377.028483] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.033608] ? unwind_get_return_address+0x61/0xa0 [ 377.038562] ? __save_stack_trace+0x8d/0xf0 [ 377.042913] ? graph_lock+0x170/0x170 [ 377.046737] ? save_stack+0xa9/0xd0 [ 377.050386] ? find_held_lock+0x36/0x1c0 [ 377.054470] ? __lock_is_held+0xb5/0x140 [ 377.058567] ? check_same_owner+0x340/0x340 [ 377.062913] ? rcu_note_context_switch+0x680/0x680 [ 377.067870] __should_failslab+0x124/0x180 [ 377.072126] should_failslab+0x9/0x14 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 377.075956] kmem_cache_alloc+0x29c/0x710 [ 377.080132] prepare_creds+0x80/0x3e0 [ 377.083957] ? abort_creds+0x180/0x180 [ 377.087863] ? memcpy+0x45/0x50 [ 377.091178] ? ovl_show_options+0x550/0x550 [ 377.095530] ovl_fill_super+0x146/0x3ff9 [ 377.098387] ptrace attach of "/root/syz-executor0"[4267] was attempted by "/root/syz-executor0"[15646] [ 377.099617] ? vfs_get_super+0x270/0x270 [ 377.099652] ? ovl_show_options+0x550/0x550 [ 377.099708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.099725] ? ns_capable_common+0x13f/0x170 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 377.099746] ? get_anon_bdev+0xc0/0xc0 [ 377.131408] ? sget+0x113/0x150 [ 377.134705] ? ovl_show_options+0x550/0x550 [ 377.139041] mount_nodev+0x73/0x120 [ 377.142683] ? ovl_own_xattr_set+0x10/0x10 [ 377.146928] ovl_mount+0x34/0x40 [ 377.150311] legacy_get_tree+0x131/0x460 [ 377.154393] vfs_get_tree+0x1cb/0x5c0 [ 377.155650] ptrace attach of "/root/syz-executor0"[4267] was attempted by "/root/syz-executor0"[15650] [ 377.158211] do_mount+0x6f9/0x1e30 [ 377.158229] ? rcu_is_watching+0x8c/0x150 [ 377.158244] ? trace_hardirqs_on+0xbd/0x2c0 03:33:27 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 377.158265] ? copy_mount_string+0x40/0x40 [ 377.158285] ? copy_mount_options+0x5f/0x380 [ 377.158304] ? kmem_cache_alloc_trace+0x324/0x730 [ 377.158327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.158346] ? _copy_from_user+0xdf/0x150 [ 377.158369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.158389] ? copy_mount_options+0x285/0x380 [ 377.212958] ksys_mount+0x12d/0x140 [ 377.216604] __x64_sys_mount+0xbe/0x150 [ 377.220598] do_syscall_64+0x1b9/0x820 [ 377.224498] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 377.229880] ? syscall_return_slowpath+0x5e0/0x5e0 [ 377.234823] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 377.239857] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 377.244888] ? recalc_sigpending_tsk+0x180/0x180 [ 377.249666] ? kasan_check_write+0x14/0x20 [ 377.253920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.258785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.263989] RIP: 0033:0x457099 [ 377.267215] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.286132] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.293877] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 377.301169] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 377.308453] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 377.315729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 377.323006] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000029 03:33:27 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x200000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:27 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:27 executing program 5 (fault-call:4 fault-nth:42): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r0}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)) 03:33:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r0) 03:33:27 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x6400}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:27 executing program 3: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 377.891043] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 377.940835] FAULT_INJECTION: forcing a failure. [ 377.940835] name failslab, interval 1, probability 0, space 0, times 0 [ 377.952246] CPU: 0 PID: 15710 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 377.960749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.970112] Call Trace: [ 377.972724] dump_stack+0x1c9/0x2b4 [ 377.976375] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.981586] ? __kernel_text_address+0xd/0x40 [ 377.986100] ? unwind_get_return_address+0x61/0xa0 03:33:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 377.991059] should_fail.cold.4+0xa/0x11 [ 377.995147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.000301] ? save_stack+0x43/0xd0 [ 378.003946] ? kasan_kmalloc+0xc4/0xe0 [ 378.007860] ? __kmalloc+0x14e/0x720 [ 378.011596] ? match_strdup+0x5e/0xa0 [ 378.015420] ? ovl_fill_super+0x460/0x3ff9 [ 378.019677] ? mount_nodev+0x73/0x120 [ 378.023500] ? graph_lock+0x170/0x170 [ 378.027334] ? ksys_mount+0x12d/0x140 [ 378.031150] ? __x64_sys_mount+0xbe/0x150 [ 378.035347] ? do_syscall_64+0x1b9/0x820 [ 378.039431] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.044822] ? find_held_lock+0x36/0x1c0 [ 378.048907] ? __lock_is_held+0xb5/0x140 [ 378.053001] ? check_same_owner+0x340/0x340 [ 378.057346] ? rcu_note_context_switch+0x680/0x680 [ 378.062306] __should_failslab+0x124/0x180 [ 378.066568] should_failslab+0x9/0x14 [ 378.070393] __kmalloc+0x2b2/0x720 [ 378.073958] ? match_strdup+0x5e/0xa0 [ 378.077787] match_strdup+0x5e/0xa0 [ 378.081442] ovl_fill_super+0x16fe/0x3ff9 [ 378.085620] ? vfs_get_super+0x270/0x270 [ 378.089700] ? ovl_show_options+0x550/0x550 [ 378.094032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.099570] ? get_anon_bdev+0xc0/0xc0 [ 378.103446] ? sget+0x113/0x150 [ 378.106716] ? ovl_show_options+0x550/0x550 [ 378.111045] mount_nodev+0x73/0x120 [ 378.114666] ? ovl_own_xattr_set+0x10/0x10 [ 378.118889] ovl_mount+0x34/0x40 [ 378.122245] legacy_get_tree+0x131/0x460 [ 378.126296] vfs_get_tree+0x1cb/0x5c0 [ 378.130106] do_mount+0x6f9/0x1e30 [ 378.133633] ? rcu_is_watching+0x8c/0x150 [ 378.137771] ? copy_mount_string+0x40/0x40 [ 378.142007] ? retint_kernel+0x10/0x10 [ 378.145899] ? copy_mount_options+0x1f0/0x380 [ 378.150381] ? copy_mount_options+0x1fa/0x380 [ 378.154880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.160429] ? copy_mount_options+0x285/0x380 [ 378.164932] ksys_mount+0x12d/0x140 [ 378.168556] __x64_sys_mount+0xbe/0x150 [ 378.172538] do_syscall_64+0x1b9/0x820 [ 378.176420] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 378.181772] ? syscall_return_slowpath+0x5e0/0x5e0 [ 378.186692] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 378.191725] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 378.196732] ? recalc_sigpending_tsk+0x180/0x180 [ 378.201486] ? kasan_check_write+0x14/0x20 [ 378.205722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.210566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.215746] RIP: 0033:0x457099 [ 378.218927] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.237820] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.245522] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 378.252789] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 378.260041] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 378.267296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 378.274556] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002a 03:33:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1400}, {r0, 0x2003}, {r0, 0x1000}, {r0, 0x418}], 0x4, &(0x7f0000000040), &(0x7f0000000240)={0x9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000002c0)={0x77359400}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$unix(0x1, 0x1, 0x0) close(r1) 03:33:28 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d76") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:28 executing program 3: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r1}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)) 03:33:28 executing program 5 (fault-call:4 fault-nth:43): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:28 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0x1, 0x6, 0x47, 0x4, 0x4, 0x2, 0xb38d, 0x6dd, 0x1ff, 0x1, 0x2, 0x6, 0x2, 0x6, 0x39ab6d1]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0xbae}, &(0x7f00000003c0)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000400)=""/240, 0xf0) close(r3) 03:33:28 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0xff000000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:28 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d76") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:28 executing program 3: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r1}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)) 03:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d76") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:28 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:28 executing program 3: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 378.911273] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 03:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d7660") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 378.980779] ptrace attach of "/root/syz-executor0"[4267] was attempted by "/root/syz-executor0"[15805] [ 379.012354] FAULT_INJECTION: forcing a failure. [ 379.012354] name failslab, interval 1, probability 0, space 0, times 0 [ 379.023663] CPU: 1 PID: 15792 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 379.032178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.041550] Call Trace: [ 379.044176] dump_stack+0x1c9/0x2b4 [ 379.047833] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.053043] ? __kernel_text_address+0xd/0x40 [ 379.057552] ? unwind_get_return_address+0x61/0xa0 [ 379.062510] should_fail.cold.4+0xa/0x11 [ 379.066613] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.071748] ? save_stack+0x43/0xd0 [ 379.075482] ? kasan_kmalloc+0xc4/0xe0 [ 379.079392] ? __kmalloc_track_caller+0x14a/0x720 [ 379.084248] ? kstrdup+0x39/0x70 [ 379.087635] ? ovl_fill_super+0x297/0x3ff9 [ 379.091893] ? mount_nodev+0x73/0x120 [ 379.095730] ? graph_lock+0x170/0x170 [ 379.099553] ? ksys_mount+0x12d/0x140 [ 379.103371] ? __x64_sys_mount+0xbe/0x150 [ 379.107540] ? do_syscall_64+0x1b9/0x820 [ 379.111634] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.117019] ? find_held_lock+0x36/0x1c0 [ 379.121105] ? __lock_is_held+0xb5/0x140 [ 379.125216] ? check_same_owner+0x340/0x340 [ 379.129562] ? rcu_note_context_switch+0x680/0x680 [ 379.134519] __should_failslab+0x124/0x180 [ 379.138775] should_failslab+0x9/0x14 [ 379.142594] __kmalloc+0x2b2/0x720 [ 379.146180] ? match_strdup+0x5e/0xa0 [ 379.150006] match_strdup+0x5e/0xa0 [ 379.153651] ovl_fill_super+0x460/0x3ff9 [ 379.157731] ? vfs_get_super+0x270/0x270 [ 379.161788] ? ovl_show_options+0x550/0x550 [ 379.166145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.171704] ? get_anon_bdev+0xc0/0xc0 [ 379.175595] ? sget+0x113/0x150 [ 379.178882] ? ovl_show_options+0x550/0x550 [ 379.183209] mount_nodev+0x73/0x120 [ 379.186846] ? ovl_own_xattr_set+0x10/0x10 [ 379.191080] ovl_mount+0x34/0x40 [ 379.194456] legacy_get_tree+0x131/0x460 [ 379.198513] vfs_get_tree+0x1cb/0x5c0 [ 379.202331] do_mount+0x6f9/0x1e30 [ 379.205876] ? copy_mount_string+0x40/0x40 [ 379.210117] ? retint_kernel+0x10/0x10 [ 379.214008] ? copy_mount_options+0x1a1/0x380 [ 379.218510] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 379.223356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.228881] ? copy_mount_options+0x285/0x380 [ 379.233382] ksys_mount+0x12d/0x140 [ 379.237049] __x64_sys_mount+0xbe/0x150 [ 379.241040] do_syscall_64+0x1b9/0x820 [ 379.244925] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 379.250283] ? syscall_return_slowpath+0x5e0/0x5e0 [ 379.255203] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 379.260225] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 379.265249] ? recalc_sigpending_tsk+0x180/0x180 [ 379.270010] ? kasan_check_write+0x14/0x20 [ 379.274247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.279087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.284272] RIP: 0033:0x457099 [ 379.287468] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.306371] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.314095] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 379.321373] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 379.328647] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 379.335920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 379.343190] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002b 03:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d7660") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:29 executing program 3: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r1}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)) 03:33:29 executing program 5 (fault-call:4 fault-nth:44): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:29 executing program 0: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:29 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0xff00}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40a000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}}, 0x804) socketpair(0xf, 0x0, 0x67, &(0x7f0000002380)={0xffffffffffffffff}) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f00000023c0)=0x40, 0x4) close(r1) 03:33:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80502, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:29 executing program 3: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:29 executing program 0: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 379.685719] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 379.726734] FAULT_INJECTION: forcing a failure. [ 379.726734] name failslab, interval 1, probability 0, space 0, times 0 [ 379.738068] CPU: 1 PID: 15847 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 379.746579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.755948] Call Trace: [ 379.758561] dump_stack+0x1c9/0x2b4 [ 379.762207] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.767392] ? __kernel_text_address+0xd/0x40 [ 379.771880] ? unwind_get_return_address+0x61/0xa0 [ 379.777344] should_fail.cold.4+0xa/0x11 [ 379.781419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.786537] ? save_stack+0x43/0xd0 [ 379.790190] ? kasan_kmalloc+0xc4/0xe0 [ 379.794071] ? __kmalloc_track_caller+0x14a/0x720 [ 379.798913] ? kstrdup+0x39/0x70 [ 379.802286] ? ovl_fill_super+0x297/0x3ff9 [ 379.806537] ? mount_nodev+0x73/0x120 [ 379.810355] ? graph_lock+0x170/0x170 [ 379.814159] ? ksys_mount+0x12d/0x140 [ 379.817960] ? __x64_sys_mount+0xbe/0x150 [ 379.822096] ? do_syscall_64+0x1b9/0x820 [ 379.826197] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.831573] ? find_held_lock+0x36/0x1c0 [ 379.835634] ? __lock_is_held+0xb5/0x140 [ 379.839727] ? check_same_owner+0x340/0x340 [ 379.844067] ? rcu_note_context_switch+0x680/0x680 [ 379.849009] __should_failslab+0x124/0x180 [ 379.853259] should_failslab+0x9/0x14 [ 379.857075] __kmalloc+0x2b2/0x720 [ 379.860613] ? match_strdup+0x5e/0xa0 [ 379.864425] match_strdup+0x5e/0xa0 [ 379.868072] ovl_fill_super+0x460/0x3ff9 [ 379.872171] ? vfs_get_super+0x270/0x270 [ 379.876269] ? ovl_show_options+0x550/0x550 [ 379.880638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.886204] ? get_anon_bdev+0xc0/0xc0 [ 379.890104] ? sget+0x113/0x150 [ 379.893400] ? ovl_show_options+0x550/0x550 [ 379.897735] mount_nodev+0x73/0x120 [ 379.901386] ? ovl_own_xattr_set+0x10/0x10 [ 379.905645] ovl_mount+0x34/0x40 [ 379.909034] legacy_get_tree+0x131/0x460 [ 379.913110] vfs_get_tree+0x1cb/0x5c0 [ 379.916924] do_mount+0x6f9/0x1e30 [ 379.920484] ? rcu_is_watching+0x8c/0x150 [ 379.924642] ? trace_hardirqs_on+0xbd/0x2c0 [ 379.928979] ? copy_mount_string+0x40/0x40 [ 379.933233] ? copy_mount_options+0x5f/0x380 [ 379.937657] ? kmem_cache_alloc_trace+0x324/0x730 [ 379.942530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.948086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.953632] ? copy_mount_options+0x285/0x380 [ 379.958143] ksys_mount+0x12d/0x140 [ 379.961800] __x64_sys_mount+0xbe/0x150 [ 379.965805] do_syscall_64+0x1b9/0x820 [ 379.969716] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 379.975095] ? syscall_return_slowpath+0x5e0/0x5e0 [ 379.980043] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 379.985076] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 379.990102] ? recalc_sigpending_tsk+0x180/0x180 [ 379.994875] ? kasan_check_write+0x14/0x20 [ 379.999128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.004005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.009205] RIP: 0033:0x457099 03:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d7660") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:29 executing program 0: socket(0x10, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:29 executing program 3: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:30 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 380.012412] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.031324] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.039043] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 380.046322] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 380.053627] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 380.060902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 380.068184] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002c 03:33:30 executing program 3: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r1}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)) 03:33:30 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 5 (fault-call:4 fault-nth:45): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:30 executing program 0: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 380.323463] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 380.349150] FAULT_INJECTION: forcing a failure. [ 380.349150] name failslab, interval 1, probability 0, space 0, times 0 [ 380.360491] CPU: 1 PID: 15905 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 380.368994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.378361] Call Trace: [ 380.380944] dump_stack+0x1c9/0x2b4 [ 380.384587] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.389794] should_fail.cold.4+0xa/0x11 [ 380.393878] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.399001] ? graph_lock+0x170/0x170 [ 380.402797] ? save_stack+0x43/0xd0 [ 380.406419] ? kasan_kmalloc+0xc4/0xe0 [ 380.410318] ? __kmalloc_track_caller+0x14a/0x720 [ 380.415174] ? find_held_lock+0x36/0x1c0 [ 380.419251] ? __lock_is_held+0xb5/0x140 [ 380.423317] ? check_same_owner+0x340/0x340 [ 380.427669] ? rcu_note_context_switch+0x680/0x680 [ 380.432619] __should_failslab+0x124/0x180 [ 380.436868] should_failslab+0x9/0x14 [ 380.440674] kmem_cache_alloc+0x29c/0x710 [ 380.444843] ? rcu_read_lock_sched_held+0x108/0x120 [ 380.449853] getname_kernel+0x54/0x370 [ 380.453761] kern_path+0x1e/0x40 [ 380.457148] ovl_mount_dir_noesc+0x6b/0x190 [ 380.461497] ovl_mount_dir+0x10a/0x1c0 [ 380.465407] ovl_fill_super+0x9a8/0x3ff9 [ 380.469474] ? vfs_get_super+0x270/0x270 03:33:30 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x5a01}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 380.473553] ? ovl_show_options+0x550/0x550 [ 380.477889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.483425] ? get_anon_bdev+0xc0/0xc0 [ 380.487308] ? sget+0x113/0x150 [ 380.490594] ? ovl_show_options+0x550/0x550 [ 380.494928] mount_nodev+0x73/0x120 [ 380.498566] ? ovl_own_xattr_set+0x10/0x10 [ 380.502817] ovl_mount+0x34/0x40 [ 380.506213] legacy_get_tree+0x131/0x460 [ 380.510300] vfs_get_tree+0x1cb/0x5c0 [ 380.514117] do_mount+0x6f9/0x1e30 [ 380.517673] ? rcu_is_watching+0x8c/0x150 [ 380.521835] ? trace_hardirqs_on+0xbd/0x2c0 [ 380.526181] ? copy_mount_string+0x40/0x40 [ 380.530441] ? copy_mount_options+0x5f/0x380 [ 380.534866] ? kmem_cache_alloc_trace+0x324/0x730 [ 380.539735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.545297] ? _copy_from_user+0xdf/0x150 [ 380.549451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.554973] ? copy_mount_options+0x285/0x380 [ 380.559470] ksys_mount+0x12d/0x140 [ 380.563113] __x64_sys_mount+0xbe/0x150 [ 380.567107] do_syscall_64+0x1b9/0x820 [ 380.571008] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.576388] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.581337] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 380.586367] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 380.591389] ? recalc_sigpending_tsk+0x180/0x180 [ 380.596174] ? kasan_check_write+0x14/0x20 [ 380.600427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.605294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.610492] RIP: 0033:0x457099 03:33:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:30 executing program 3: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r1}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)) 03:33:30 executing program 0: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x480080, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x0) close(r1) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r3, 0x3, 0x1, 0x4cd6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) [ 380.613700] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.632611] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.640331] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 380.647608] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 380.654886] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 380.662173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 03:33:30 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 0: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 380.669445] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002d [ 380.677081] overlayfs: failed to resolve './file0': -12 03:33:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x80000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:30 executing program 5 (fault-call:4 fault-nth:46): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:30 executing program 0: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 380.846345] ptrace attach of "/root/syz-executor3"[4274] was attempted by "/root/syz-executor3"[15948] 03:33:30 executing program 0: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:30 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 380.899542] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 380.933371] FAULT_INJECTION: forcing a failure. [ 380.933371] name failslab, interval 1, probability 0, space 0, times 0 03:33:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) [ 380.944732] CPU: 1 PID: 15961 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 380.953233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.962599] Call Trace: [ 380.965226] dump_stack+0x1c9/0x2b4 [ 380.968882] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.974095] ? __kernel_text_address+0xd/0x40 [ 380.978614] ? unwind_get_return_address+0x61/0xa0 [ 380.983576] should_fail.cold.4+0xa/0x11 [ 380.987670] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.992807] ? save_stack+0x43/0xd0 [ 380.996451] ? kasan_kmalloc+0xc4/0xe0 [ 381.000357] ? __kmalloc+0x14e/0x720 [ 381.004093] ? match_strdup+0x5e/0xa0 [ 381.007912] ? ovl_fill_super+0x16fe/0x3ff9 [ 381.012254] ? mount_nodev+0x73/0x120 [ 381.016069] ? graph_lock+0x170/0x170 [ 381.019887] ? ksys_mount+0x12d/0x140 [ 381.023719] ? __x64_sys_mount+0xbe/0x150 [ 381.027888] ? do_syscall_64+0x1b9/0x820 [ 381.031975] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.037366] ? find_held_lock+0x36/0x1c0 [ 381.041458] ? __lock_is_held+0xb5/0x140 [ 381.045538] ? binder_enqueue_work_ilocked+0xa8/0x2f0 [ 381.050764] ? check_same_owner+0x340/0x340 [ 381.055112] ? rcu_note_context_switch+0x680/0x680 [ 381.060101] __should_failslab+0x124/0x180 [ 381.064356] should_failslab+0x9/0x14 [ 381.068191] __kmalloc+0x2b2/0x720 [ 381.071764] ? match_strdup+0x5e/0xa0 [ 381.075590] match_strdup+0x5e/0xa0 [ 381.079240] ovl_fill_super+0x16a9/0x3ff9 [ 381.083414] ? vfs_get_super+0x270/0x270 [ 381.087509] ? ovl_show_options+0x550/0x550 [ 381.091885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.097454] ? get_anon_bdev+0xc0/0xc0 [ 381.101361] ? sget+0x113/0x150 [ 381.104662] ? ovl_show_options+0x550/0x550 [ 381.109007] mount_nodev+0x73/0x120 [ 381.112657] ? ovl_own_xattr_set+0x10/0x10 [ 381.116913] ovl_mount+0x34/0x40 [ 381.120293] legacy_get_tree+0x131/0x460 [ 381.124372] vfs_get_tree+0x1cb/0x5c0 [ 381.128199] do_mount+0x6f9/0x1e30 [ 381.131752] ? rcu_is_watching+0x8c/0x150 [ 381.135911] ? trace_hardirqs_on+0xbd/0x2c0 [ 381.140252] ? copy_mount_string+0x40/0x40 [ 381.144505] ? copy_mount_options+0x5f/0x380 [ 381.148934] ? kmem_cache_alloc_trace+0x324/0x730 [ 381.153801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.159358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.164911] ? copy_mount_options+0x285/0x380 [ 381.169428] ksys_mount+0x12d/0x140 [ 381.173073] __x64_sys_mount+0xbe/0x150 [ 381.177066] do_syscall_64+0x1b9/0x820 [ 381.180970] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 381.186351] ? syscall_return_slowpath+0x5e0/0x5e0 [ 381.191317] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 381.196348] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 381.201379] ? recalc_sigpending_tsk+0x180/0x180 [ 381.206149] ? kasan_check_write+0x14/0x20 [ 381.210420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.215283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.220479] RIP: 0033:0x457099 [ 381.223719] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.242626] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:33:31 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x800000000000000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) [ 381.250347] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 381.257625] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 381.264905] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 381.272195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 381.279470] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002e 03:33:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:31 executing program 0: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:31 executing program 5 (fault-call:4 fault-nth:47): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0xfffffffffffffc9a) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:31 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0xff00000000000000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:31 executing program 0: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 381.672702] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 381.743441] FAULT_INJECTION: forcing a failure. [ 381.743441] name failslab, interval 1, probability 0, space 0, times 0 [ 381.754783] CPU: 1 PID: 16015 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 381.763289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.772653] Call Trace: [ 381.775775] dump_stack+0x1c9/0x2b4 [ 381.779432] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.784661] should_fail.cold.4+0xa/0x11 [ 381.788759] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.793883] ? lock_downgrade+0x8f0/0x8f0 [ 381.798059] ? lock_downgrade+0x8f0/0x8f0 [ 381.802236] ? kasan_check_read+0x11/0x20 [ 381.806402] ? do_raw_spin_unlock+0xa7/0x2f0 [ 381.810830] ? graph_lock+0x170/0x170 [ 381.814652] ? kasan_check_write+0x14/0x20 [ 381.818913] ? find_held_lock+0x36/0x1c0 [ 381.822993] ? __lock_is_held+0xb5/0x140 [ 381.827091] ? check_same_owner+0x340/0x340 [ 381.831433] ? rcu_note_context_switch+0x680/0x680 [ 381.836393] __should_failslab+0x124/0x180 [ 381.840650] should_failslab+0x9/0x14 [ 381.844476] __kmalloc_track_caller+0x2ae/0x720 [ 381.849155] ? kasan_check_read+0x11/0x20 [ 381.853334] ? do_raw_spin_unlock+0xa7/0x2f0 [ 381.857756] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 381.862355] ? ovl_mount_dir+0x2a/0x1c0 [ 381.866354] kstrdup+0x39/0x70 [ 381.869573] ovl_mount_dir+0x2a/0x1c0 [ 381.873397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.878954] ovl_fill_super+0xbe5/0x3ff9 [ 381.883053] ? vfs_get_super+0x270/0x270 [ 381.887149] ? ovl_show_options+0x550/0x550 [ 381.891534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.897097] ? get_anon_bdev+0xc0/0xc0 [ 381.901015] ? sget+0x113/0x150 [ 381.904317] ? ovl_show_options+0x550/0x550 [ 381.908661] mount_nodev+0x73/0x120 [ 381.912319] ? ovl_own_xattr_set+0x10/0x10 [ 381.916574] ovl_mount+0x34/0x40 [ 381.919962] legacy_get_tree+0x131/0x460 [ 381.924048] vfs_get_tree+0x1cb/0x5c0 [ 381.927867] do_mount+0x6f9/0x1e30 [ 381.931426] ? rcu_is_watching+0x8c/0x150 [ 381.935595] ? copy_mount_string+0x40/0x40 [ 381.939850] ? retint_kernel+0x10/0x10 [ 381.943755] ? copy_mount_options+0x1f0/0x380 [ 381.948266] ? copy_mount_options+0x1f6/0x380 [ 381.952780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.958329] ? copy_mount_options+0x285/0x380 [ 381.962840] ksys_mount+0x12d/0x140 [ 381.966482] __x64_sys_mount+0xbe/0x150 [ 381.970476] do_syscall_64+0x1b9/0x820 [ 381.974378] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 381.979763] ? syscall_return_slowpath+0x5e0/0x5e0 [ 381.984716] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 381.989746] ? prepare_exit_to_usermode+0x3b0/0x3b0 03:33:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) 03:33:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x2, r2, 0x10, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x20}}}, 0xa0) r3 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/114, &(0x7f0000000240)=0x72) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r3) 03:33:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) [ 381.994779] ? recalc_sigpending_tsk+0x180/0x180 [ 381.999552] ? kasan_check_write+0x14/0x20 [ 382.003810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.008676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.013883] RIP: 0033:0x457099 [ 382.017086] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.035996] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 382.043724] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 382.051005] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 382.058285] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 382.065564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 382.072842] R13: 00000000004d3300 R14: 00000000004c8241 R15: 000000000000002f [ 382.082250] IPVS: length: 114 != 24 03:33:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) close(r1) 03:33:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:32 executing program 0: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:32 executing program 5 (fault-call:4 fault-nth:48): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:32 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x6400000000000000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:32 executing program 0: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 382.626143] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 382.680058] FAULT_INJECTION: forcing a failure. [ 382.680058] name failslab, interval 1, probability 0, space 0, times 0 [ 382.691486] CPU: 1 PID: 16100 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 382.699997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.709364] Call Trace: [ 382.711970] dump_stack+0x1c9/0x2b4 [ 382.715622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 382.720842] should_fail.cold.4+0xa/0x11 [ 382.724926] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:33:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000200)) lseek(r2, 0x0, 0x0) 03:33:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x0, 0x0) [ 382.730068] ? graph_lock+0x170/0x170 [ 382.733891] ? save_stack+0x43/0xd0 [ 382.737534] ? kasan_kmalloc+0xc4/0xe0 [ 382.741439] ? __kmalloc_track_caller+0x14a/0x720 [ 382.746305] ? find_held_lock+0x36/0x1c0 [ 382.750398] ? __lock_is_held+0xb5/0x140 [ 382.754498] ? check_same_owner+0x340/0x340 [ 382.758845] ? rcu_note_context_switch+0x680/0x680 [ 382.763804] __should_failslab+0x124/0x180 [ 382.768078] should_failslab+0x9/0x14 [ 382.771903] kmem_cache_alloc+0x29c/0x710 03:33:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x0, 0x0) [ 382.776083] ? rcu_read_lock_sched_held+0x108/0x120 [ 382.781126] getname_kernel+0x54/0x370 [ 382.785064] kern_path+0x1e/0x40 [ 382.788444] ovl_mount_dir_noesc+0x6b/0x190 [ 382.792783] ovl_mount_dir+0x10a/0x1c0 [ 382.796706] ovl_fill_super+0x9a8/0x3ff9 [ 382.800847] ? vfs_get_super+0x270/0x270 [ 382.804939] ? ovl_show_options+0x550/0x550 [ 382.809320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.814912] ? get_anon_bdev+0xc0/0xc0 [ 382.818820] ? sget+0x113/0x150 [ 382.822131] ? ovl_show_options+0x550/0x550 [ 382.826485] mount_nodev+0x73/0x120 [ 382.830138] ? ovl_own_xattr_set+0x10/0x10 [ 382.834391] ovl_mount+0x34/0x40 [ 382.837751] legacy_get_tree+0x131/0x460 [ 382.841822] vfs_get_tree+0x1cb/0x5c0 [ 382.845639] do_mount+0x6f9/0x1e30 [ 382.849214] ? copy_mount_string+0x40/0x40 [ 382.853562] ? retint_kernel+0x10/0x10 [ 382.857460] ? copy_mount_options+0x1e3/0x380 [ 382.861968] ? audit_kill_trees+0x450/0x450 [ 382.866293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.871841] ? copy_mount_options+0x285/0x380 [ 382.876350] ksys_mount+0x12d/0x140 [ 382.880014] __x64_sys_mount+0xbe/0x150 [ 382.884004] do_syscall_64+0x1b9/0x820 [ 382.887891] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 382.893272] ? syscall_return_slowpath+0x5e0/0x5e0 [ 382.898206] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 382.903222] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 382.908245] ? recalc_sigpending_tsk+0x180/0x180 [ 382.913026] ? kasan_check_write+0x14/0x20 [ 382.917265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.922113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.927308] RIP: 0033:0x457099 [ 382.930529] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.949424] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 382.957117] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 382.964375] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 382.971628] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 382.978887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 382.986161] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000030 [ 382.993584] overlayfs: failed to resolve './file0': -12 [ 383.049681] IPVS: length: 114 != 24 03:33:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_bt(r2, 0x5411, &(0x7f00000003c0)="58cf310a2ff937e01e521f1e4dac6851128a4a6228f1123b8c5a0b52537dd91346ff43b3311c24cb6c7adab59514860e6f54af618c3f5d486f9f8b74e5bc192ef9124e944f654552a4b087441e4df79a61896631401dac6ca30e00deb4b057dea7fa5ef08e2af647e7e9e6744f3bd77475fb3bd3467e3ccc3409de29fcc7bc1e6e6bbbb2fb9d4756b7d1c80423f805d8d8c9dd0bcd7785c2db50b74d25842fd08a6f28e58acb6c62e0639ee25f682f51fc8b23024c2e47802736664959ad0e8cb365f8b3bebbac32ba9916c6a9c405") recvmsg(r2, &(0x7f00000014c0)={&(0x7f00000002c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x6fb2e07f}, 0x10020) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001500)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@local, r4}, 0x14) 03:33:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 383.142305] ptrace attach of "/root/syz-executor0"[4267] was attempted by "/root/syz-executor0"[16128] 03:33:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x400000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) dup3(r1, r2, 0x80000) close(r1) 03:33:33 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) process_vm_readv(0x0, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:33 executing program 5 (fault-call:4 fault-nth:49): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:33 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x5a01000000000000}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:33 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000), 0x0, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) [ 383.580505] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 383.612952] FAULT_INJECTION: forcing a failure. [ 383.612952] name failslab, interval 1, probability 0, space 0, times 0 03:33:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 383.624313] CPU: 1 PID: 16169 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 383.632816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.642184] Call Trace: [ 383.645047] dump_stack+0x1c9/0x2b4 [ 383.648713] ? dump_stack_print_info.cold.2+0x52/0x52 [ 383.653941] should_fail.cold.4+0xa/0x11 [ 383.658026] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 383.663150] ? lock_downgrade+0x8f0/0x8f0 [ 383.667328] ? lock_downgrade+0x8f0/0x8f0 [ 383.671502] ? kasan_check_read+0x11/0x20 [ 383.675708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 383.680139] ? graph_lock+0x170/0x170 [ 383.683984] ? kasan_check_write+0x14/0x20 [ 383.688235] ? find_held_lock+0x36/0x1c0 [ 383.692300] ? __lock_is_held+0xb5/0x140 [ 383.696364] ? check_same_owner+0x340/0x340 [ 383.701043] ? rcu_note_context_switch+0x680/0x680 [ 383.705997] __should_failslab+0x124/0x180 [ 383.710244] should_failslab+0x9/0x14 [ 383.714045] __kmalloc_track_caller+0x2ae/0x720 [ 383.718728] ? kasan_check_read+0x11/0x20 [ 383.722880] ? do_raw_spin_unlock+0xa7/0x2f0 [ 383.727296] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 383.731881] ? ovl_mount_dir+0x2a/0x1c0 [ 383.735847] kstrdup+0x39/0x70 [ 383.739043] ovl_mount_dir+0x2a/0x1c0 [ 383.742865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 383.748423] ovl_fill_super+0xbe5/0x3ff9 [ 383.752505] ? vfs_get_super+0x270/0x270 [ 383.756596] ? ovl_show_options+0x550/0x550 [ 383.760928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.766477] ? get_anon_bdev+0xc0/0xc0 [ 383.770384] ? sget+0x113/0x150 [ 383.773672] ? ovl_show_options+0x550/0x550 [ 383.778414] mount_nodev+0x73/0x120 [ 383.782036] ? ovl_own_xattr_set+0x10/0x10 [ 383.786272] ovl_mount+0x34/0x40 [ 383.789676] legacy_get_tree+0x131/0x460 [ 383.793763] vfs_get_tree+0x1cb/0x5c0 [ 383.797583] do_mount+0x6f9/0x1e30 [ 383.801127] ? rcu_is_watching+0x8c/0x150 [ 383.805272] ? trace_hardirqs_on+0xbd/0x2c0 [ 383.809608] ? copy_mount_string+0x40/0x40 [ 383.813863] ? copy_mount_options+0x5f/0x380 [ 383.818261] ? kmem_cache_alloc_trace+0x324/0x730 [ 383.823100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 383.828635] ? _copy_from_user+0xdf/0x150 [ 383.832799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.838341] ? copy_mount_options+0x285/0x380 [ 383.842856] ksys_mount+0x12d/0x140 [ 383.846500] __x64_sys_mount+0xbe/0x150 [ 383.850489] do_syscall_64+0x1b9/0x820 [ 383.854379] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 383.859730] ? syscall_return_slowpath+0x5e0/0x5e0 [ 383.864649] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 383.869667] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 383.874695] ? recalc_sigpending_tsk+0x180/0x180 [ 383.879455] ? kasan_check_write+0x14/0x20 [ 383.883699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.888573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.893761] RIP: 0033:0x457099 [ 383.896954] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.915854] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.923580] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 03:33:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:33 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000), 0x0, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) [ 383.930855] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 383.938125] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 383.945402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 383.952669] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000031 03:33:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = dup2(r0, r0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:34 executing program 5 (fault-call:4 fault-nth:50): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:34 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x15a}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:34 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000), 0x0, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) 03:33:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x5c}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x9, 0x0, 0x94, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 384.226815] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 384.292377] FAULT_INJECTION: forcing a failure. [ 384.292377] name failslab, interval 1, probability 0, space 0, times 0 [ 384.303763] CPU: 1 PID: 16209 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 384.312277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.321642] Call Trace: [ 384.324255] dump_stack+0x1c9/0x2b4 [ 384.327895] ? dump_stack_print_info.cold.2+0x52/0x52 [ 384.333089] should_fail.cold.4+0xa/0x11 [ 384.337162] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 384.342284] ? lock_downgrade+0x8f0/0x8f0 [ 384.346431] ? lock_downgrade+0x8f0/0x8f0 [ 384.350583] ? kasan_check_read+0x11/0x20 [ 384.354724] ? do_raw_spin_unlock+0xa7/0x2f0 [ 384.359133] ? graph_lock+0x170/0x170 [ 384.362943] ? kasan_check_write+0x14/0x20 [ 384.367195] ? find_held_lock+0x36/0x1c0 [ 384.371257] ? __lock_is_held+0xb5/0x140 [ 384.375320] ? check_same_owner+0x340/0x340 [ 384.379652] ? rcu_note_context_switch+0x680/0x680 [ 384.384600] __should_failslab+0x124/0x180 [ 384.388828] should_failslab+0x9/0x14 [ 384.392625] __kmalloc_track_caller+0x2ae/0x720 [ 384.397394] ? kasan_check_read+0x11/0x20 [ 384.401565] ? do_raw_spin_unlock+0xa7/0x2f0 [ 384.405967] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 384.410556] ? ovl_mount_dir+0x2a/0x1c0 [ 384.414552] kstrdup+0x39/0x70 [ 384.417777] ovl_mount_dir+0x2a/0x1c0 [ 384.421603] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.427153] ovl_fill_super+0xbe5/0x3ff9 [ 384.431218] ? vfs_get_super+0x270/0x270 [ 384.435275] ? ovl_show_options+0x550/0x550 [ 384.439628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 384.445173] ? get_anon_bdev+0xc0/0xc0 [ 384.449053] ? sget+0x113/0x150 [ 384.452322] ? ovl_show_options+0x550/0x550 [ 384.456630] mount_nodev+0x73/0x120 [ 384.460250] ? ovl_own_xattr_set+0x10/0x10 [ 384.464474] ovl_mount+0x34/0x40 [ 384.467831] legacy_get_tree+0x131/0x460 [ 384.471883] vfs_get_tree+0x1cb/0x5c0 [ 384.475674] do_mount+0x6f9/0x1e30 [ 384.479209] ? copy_mount_string+0x40/0x40 [ 384.483447] ? retint_kernel+0x10/0x10 [ 384.487346] ? copy_mount_options+0x1e3/0x380 [ 384.491859] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 384.496615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 384.502137] ? copy_mount_options+0x285/0x380 [ 384.506624] ksys_mount+0x12d/0x140 [ 384.510242] __x64_sys_mount+0xbe/0x150 [ 384.514219] do_syscall_64+0x1b9/0x820 [ 384.518101] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 384.523464] ? syscall_return_slowpath+0x5e0/0x5e0 [ 384.528395] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 384.533412] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 384.538415] ? recalc_sigpending_tsk+0x180/0x180 [ 384.543158] ? kasan_check_write+0x14/0x20 [ 384.547397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.552247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.557451] RIP: 0033:0x457099 [ 384.560649] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.579549] RSP: 002b:00007fa206d01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:33:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:34 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1, &(0x7f0000003600), 0x0, 0x0) [ 384.587271] RAX: ffffffffffffffda RBX: 00007fa206d026d4 RCX: 0000000000457099 [ 384.594552] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 384.601828] RBP: 00000000009300a0 R08: 0000000020000100 R09: 0000000000000000 [ 384.609107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 384.616394] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000032 03:33:34 executing program 5 (fault-call:4 fault-nth:51): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 03:33:34 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1, &(0x7f0000003600), 0x0, 0x0) 03:33:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 03:33:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) [ 384.754004] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 384.794446] FAULT_INJECTION: forcing a failure. [ 384.794446] name failslab, interval 1, probability 0, space 0, times 0 [ 384.805871] CPU: 1 PID: 16250 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 384.814393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.823751] Call Trace: [ 384.826359] dump_stack+0x1c9/0x2b4 [ 384.830007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 384.835237] should_fail.cold.4+0xa/0x11 [ 384.839325] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 384.844459] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 384.849581] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 384.854715] ? trace_hardirqs_on+0xbd/0x2c0 [ 384.859058] ? kasan_check_read+0x11/0x20 [ 384.863230] ? ida_alloc_range+0x51e/0xae0 [ 384.867517] ? graph_lock+0x170/0x170 [ 384.871345] ? find_held_lock+0x36/0x1c0 [ 384.875429] ? __lock_is_held+0xb5/0x140 [ 384.879523] ? check_same_owner+0x340/0x340 [ 384.883872] ? rcu_note_context_switch+0x680/0x680 [ 384.888829] __should_failslab+0x124/0x180 [ 384.893083] should_failslab+0x9/0x14 [ 384.896908] __kmalloc_track_caller+0x2ae/0x720 [ 384.901607] ? kstrdup_const+0x66/0x80 [ 384.905521] kstrdup+0x39/0x70 [ 384.908736] kstrdup_const+0x66/0x80 [ 384.912460] alloc_vfsmnt+0x189/0x9a0 [ 384.916276] ? delayed_free_vfsmnt+0x20/0x20 [ 384.920710] ? kasan_check_read+0x11/0x20 [ 384.924867] ? mark_held_locks+0x160/0x160 [ 384.929104] ? find_held_lock+0x36/0x1c0 [ 384.933195] ? mark_held_locks+0xc9/0x160 [ 384.937377] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 384.942487] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 384.947607] ? lockdep_hardirqs_on+0x421/0x5c0 [ 384.952211] ? trace_hardirqs_on+0xbd/0x2c0 [ 384.956553] ? kasan_check_read+0x11/0x20 [ 384.960716] ? __percpu_counter_sum+0x134/0x1a0 [ 384.965388] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 384.970515] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 384.975552] clone_mnt+0x124/0x1500 [ 384.979197] ? kern_mount+0x70/0x70 [ 384.982843] ? find_held_lock+0x36/0x1c0 [ 384.986908] ? lock_downgrade+0x8f0/0x8f0 [ 384.991077] ? kasan_check_read+0x11/0x20 [ 384.995231] ? do_raw_spin_unlock+0xa7/0x2f0 [ 384.999631] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 385.004218] ? kasan_check_write+0x14/0x20 [ 385.008468] ? do_raw_spin_lock+0xc1/0x200 [ 385.012727] clone_private_mount+0xba/0x100 [ 385.017058] ovl_fill_super+0xb20/0x3ff9 [ 385.021137] ? vfs_get_super+0x270/0x270 [ 385.025227] ? ovl_show_options+0x550/0x550 [ 385.029591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.035153] ? get_anon_bdev+0xc0/0xc0 [ 385.039045] ? sget+0x113/0x150 [ 385.042339] ? ovl_show_options+0x550/0x550 [ 385.046673] mount_nodev+0x73/0x120 [ 385.050323] ? ovl_own_xattr_set+0x10/0x10 [ 385.054569] ovl_mount+0x34/0x40 [ 385.057950] legacy_get_tree+0x131/0x460 [ 385.062011] vfs_get_tree+0x1cb/0x5c0 [ 385.065814] do_mount+0x6f9/0x1e30 [ 385.069366] ? rcu_is_watching+0x8c/0x150 [ 385.073520] ? trace_hardirqs_on+0xbd/0x2c0 [ 385.077857] ? copy_mount_string+0x40/0x40 [ 385.082113] ? copy_mount_options+0x5f/0x380 [ 385.086524] ? kmem_cache_alloc_trace+0x324/0x730 [ 385.091389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.096945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.102492] ? copy_mount_options+0x285/0x380 [ 385.107001] ksys_mount+0x12d/0x140 [ 385.110637] __x64_sys_mount+0xbe/0x150 [ 385.114630] do_syscall_64+0x1b9/0x820 [ 385.118552] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 385.123939] ? syscall_return_slowpath+0x5e0/0x5e0 [ 385.128857] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 385.133880] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 385.138888] ? recalc_sigpending_tsk+0x180/0x180 [ 385.143638] ? kasan_check_write+0x14/0x20 [ 385.147865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.152737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.157928] RIP: 0033:0x457099 [ 385.161109] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.180015] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.187727] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 385.195002] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 385.202273] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 385.209534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 385.216813] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000033 [ 385.224387] overlayfs: failed to clone upperpath 03:33:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x502, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000240)={r0, r2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x1ff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) pipe2(&(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r1) 03:33:35 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1, &(0x7f0000003600), 0x0, 0x0) 03:33:35 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) process_vm_readv(0x0, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1774}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:33:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000002c0)=""/4096) close(r1) [ 385.289621] kasan: CONFIG_KASAN_INLINE enabled [ 385.294632] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 385.302060] general protection fault: 0000 [#1] SMP KASAN [ 385.307607] CPU: 1 PID: 16250 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 385.316094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.325467] RIP: 0010:ovl_free_fs+0x4d9/0x650 03:33:35 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0xd54000f) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x80010}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, r2+30000000}, &(0x7f0000000200)={0x8}, 0x8) r3 = syz_open_pts(r1, 0x0) dup2(r3, r1) 03:33:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xb, 0x0, 0x9, 0x0, 0x719}, {0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000340), 0x0, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r2}) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="477d10d16e11b7e8420d5b9186a00a976ecbb580c7fed789d5a7bc38750f4f996475a7", 0x23, 0x4}, {&(0x7f00000003c0)="1fe7baa521d661e015ab5b429c69300c25abfc6a9ae9b61fb9623a927abe6a4bf8eef05331c6b370f38e913d9e47e618b3000f8d117abf3d8cc461fc15db2a31149dca3be3820a2727da046d53de9c5e11de25cf9da2af1785e76879fd22a53ab7082141ab6d51acc0a953a90619011c3cba3a19ba449a8437b31d783e47d8d2931f9d8afa93a8318c8a62cfd0b34d205a5b0bb957c3cb02d3c995fd18523d6fe0e897c7469389528ff37f7c69310bd981cef5142ebbbc11c266904013d744988d653da89e34371adc2e3cc9cd32366a252e25", 0xd3, 0x34}, {&(0x7f00000004c0)="61cbd8b6bc29955a14b5acef36687fde298b99852c74e7c11d69473c67ed6126449857459ca93b239acffb41db442f773233a19771d74760a90f37ce43954991ed038c1fa4c2687e45b50119773f8162ba", 0x51, 0x200}, {&(0x7f0000000540)="6c8cb2dfb41b9de2f06eee20e1167ae6768fe83c159c482e2e82e865aea988d0e08e823e79c8df0ec2c02a239f3669b6be7878aa53e71faf6e1d5475149b102c7087e1abb797769352fc6b37e89be5f5df2312f356f7badde28dc3efce23332120c76f6c7042df9443beac30cef5372f67614298bd0592ef4dad96ee7f3965bbca76df0053c36c0ba77e0bbfb904ff3137e42e4b6cf1a7958b340ef44dc8321c84c4bde49b01a8477684ce", 0xab, 0x1}], 0x6808, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) [ 385.329972] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 49 8b 3c 24 e8 d4 0a 01 00 e9 37 fc [ 385.348881] RSP: 0018:ffff8801413df858 EFLAGS: 00010246 [ 385.354263] RAX: dffffc0000000000 RBX: ffff8801c7d6a700 RCX: ffffc90004683000 [ 385.361537] RDX: 0000000000000000 RSI: ffffffff827def4a RDI: 0000000000000001 [ 385.368851] RBP: ffff8801413df8b0 R08: ffff8801880d0600 R09: ffffed003b6246de [ 385.376139] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 385.383432] R13: ffff8801c7d6a720 R14: fffffffffffffff4 R15: ffff8801c7d6a700 [ 385.390719] FS: 00007fa206ce1700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 385.398956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.404849] CR2: 0000001b2e326000 CR3: 000000018c731000 CR4: 00000000001426e0 [ 385.412136] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.419424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.426707] Call Trace: [ 385.429313] ? mntput+0x74/0xa0 [ 385.432605] ovl_fill_super+0x4f4/0x3ff9 [ 385.436676] ? vfs_get_super+0x270/0x270 [ 385.440761] ? ovl_show_options+0x550/0x550 [ 385.445106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.450655] ? get_anon_bdev+0xc0/0xc0 [ 385.454555] ? sget+0x113/0x150 [ 385.457846] ? ovl_show_options+0x550/0x550 [ 385.462185] mount_nodev+0x73/0x120 [ 385.465825] ? ovl_own_xattr_set+0x10/0x10 [ 385.470067] ovl_mount+0x34/0x40 [ 385.473445] legacy_get_tree+0x131/0x460 [ 385.477515] vfs_get_tree+0x1cb/0x5c0 [ 385.481316] do_mount+0x6f9/0x1e30 [ 385.484849] ? rcu_is_watching+0x8c/0x150 [ 385.489003] ? trace_hardirqs_on+0xbd/0x2c0 [ 385.493328] ? copy_mount_string+0x40/0x40 [ 385.497560] ? copy_mount_options+0x5f/0x380 [ 385.501963] ? kmem_cache_alloc_trace+0x324/0x730 [ 385.506799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.512326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.517856] ? copy_mount_options+0x285/0x380 [ 385.522360] ksys_mount+0x12d/0x140 [ 385.525998] __x64_sys_mount+0xbe/0x150 [ 385.529985] do_syscall_64+0x1b9/0x820 [ 385.533873] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 385.539225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 385.544140] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 385.549155] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 385.554164] ? recalc_sigpending_tsk+0x180/0x180 [ 385.558924] ? kasan_check_write+0x14/0x20 [ 385.563210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.568071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.573261] RIP: 0033:0x457099 [ 385.576440] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.595326] RSP: 002b:00007fa206ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.603023] RAX: ffffffffffffffda RBX: 00007fa206ce16d4 RCX: 0000000000457099 [ 385.610307] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000400000 [ 385.617568] RBP: 0000000000930140 R08: 0000000020000100 R09: 0000000000000000 [ 385.624835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 385.632102] R13: 00000000004d3300 R14: 00000000004c8241 R15: 0000000000000033 [ 385.639361] Modules linked in: [ 385.642547] Dumping ftrace buffer: [ 385.646338] (ftrace buffer empty) [ 385.650232] ---[ end trace b13a46d3a1e78977 ]--- [ 385.655019] RIP: 0010:ovl_free_fs+0x4d9/0x650 [ 385.659543] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 49 8b 3c 24 e8 d4 0a 01 00 e9 37 fc [ 385.678465] RSP: 0018:ffff8801413df858 EFLAGS: 00010246 [ 385.683881] RAX: dffffc0000000000 RBX: ffff8801c7d6a700 RCX: ffffc90004683000 [ 385.691200] RDX: 0000000000000000 RSI: ffffffff827def4a RDI: 0000000000000001 [ 385.698520] RBP: ffff8801413df8b0 R08: ffff8801880d0600 R09: ffffed003b6246de [ 385.705823] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 385.713122] R13: ffff8801c7d6a720 R14: fffffffffffffff4 R15: ffff8801c7d6a700 [ 385.720415] FS: 00007fa206ce1700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 385.728728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.734640] CR2: 0000001b2e326000 CR3: 000000018c731000 CR4: 00000000001426e0 [ 385.741947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.749246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.756573] Kernel panic - not syncing: Fatal exception [ 385.762309] Dumping ftrace buffer: [ 385.765841] (ftrace buffer empty) [ 385.769527] Kernel Offset: disabled [ 385.773136] Rebooting in 86400 seconds..