, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x600}]) 23:45:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x16}]) [ 1802.389926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1802.755583] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf903, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:21 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x700}]) 23:45:21 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x694}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:21 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x10000000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:21 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x18}]) 23:45:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:21 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x23}]) [ 1803.468986] IPVS: ftp: loaded support on port[0] = 21 [ 1803.474217] IPVS: ftp: loaded support on port[0] = 21 23:45:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x804}]) [ 1803.599047] BTRFS error (device loop5): superblock checksum mismatch [ 1803.599664] BTRFS error (device loop5): open_ctree failed 23:45:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x30}]) [ 1803.614246] BTRFS warning (device ): duplicate device /dev/loop5 devid 1 generation 7 scanned by systemd-udevd (23740) [ 1803.617028] BTRFS error (device loop0): superblock checksum mismatch [ 1803.618326] BTRFS error (device loop0): open_ctree failed 23:45:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900}]) 23:45:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3d}]) [ 1804.033419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa00}]) 23:45:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfa03, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:22 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x60000000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:22 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x6a0}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb00}]) 23:45:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x52}]) [ 1804.507190] IPVS: ftp: loaded support on port[0] = 21 [ 1804.542656] IPVS: ftp: loaded support on port[0] = 21 [ 1804.679520] BTRFS error (device loop0): superblock checksum mismatch [ 1804.681168] BTRFS error (device loop0): open_ctree failed [ 1804.843553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x60}]) 23:45:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc00}]) 23:45:24 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x9a4}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:24 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x65580000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfc03, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf4ff, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1805.729586] IPVS: ftp: loaded support on port[0] = 21 [ 1805.754449] IPVS: ftp: loaded support on port[0] = 21 23:45:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x90}]) 23:45:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd00}]) [ 1805.877434] BTRFS error (device loop5): superblock checksum mismatch [ 1805.877822] BTRFS error (device loop5): open_ctree failed 23:45:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0}]) 23:45:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe00}]) 23:45:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1fe}]) [ 1806.083830] BTRFS error (device loop0): superblock checksum mismatch [ 1806.097393] BTRFS error (device loop0): open_ctree failed 23:45:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf00}]) 23:45:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x300}]) 23:45:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff0f, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1806.518399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:25 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x81000000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:25 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1100}]) 23:45:25 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xc04}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1806.810076] BTRFS error (device loop0): superblock checksum mismatch [ 1806.812435] BTRFS error (device loop0): open_ctree failed [ 1806.865660] IPVS: ftp: loaded support on port[0] = 21 [ 1806.938635] IPVS: ftp: loaded support on port[0] = 21 [ 1807.345118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:26 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x7, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3e7}]) 23:45:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1200}]) 23:45:26 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xc9c}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:26 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x88a8ffff}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfff4, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1807.928084] IPVS: ftp: loaded support on port[0] = 21 23:45:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1300}]) [ 1808.026102] IPVS: ftp: loaded support on port[0] = 21 23:45:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x408}]) [ 1808.030320] IPVS: ftp: loaded support on port[0] = 21 [ 1808.030579] BTRFS error (device loop0): superblock checksum mismatch [ 1808.032513] BTRFS error (device loop0): open_ctree failed 23:45:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1400}]) 23:45:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x500}]) 23:45:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1500}]) [ 1808.571000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x586}]) [ 1808.833914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:27 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201, 0x377}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:27 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe0c}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:27 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x9effffff}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1600}]) 23:45:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x600}]) [ 1809.015486] IPVS: ftp: loaded support on port[0] = 21 [ 1809.043635] IPVS: ftp: loaded support on port[0] = 21 [ 1809.060216] IPVS: ftp: loaded support on port[0] = 21 [ 1809.474946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1809.713232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:28 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1800}]) 23:45:28 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x700}]) 23:45:28 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe14}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:28 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xf0ffffff}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1810.187863] IPVS: ftp: loaded support on port[0] = 21 [ 1810.193233] IPVS: ftp: loaded support on port[0] = 21 23:45:28 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x804}]) 23:45:28 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1f00}]) [ 1810.369574] BTRFS warning (device ): duplicate device /dev/loop0 devid 1 generation 7 scanned by syz-executor.0 (24256) 23:45:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000}]) 23:45:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900}]) [ 1810.428154] BTRFS error (device loop5): superblock checksum mismatch [ 1810.434147] BTRFS error (device loop5): open_ctree failed 23:45:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2300}]) 23:45:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa00}]) [ 1810.974551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:30 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xffffa888}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:30 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201, 0x328}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:30 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe1c}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:30 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb00}]) 23:45:30 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f00}]) 23:45:30 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc00}]) [ 1812.136676] IPVS: ftp: loaded support on port[0] = 21 23:45:30 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000}]) [ 1812.214956] IPVS: ftp: loaded support on port[0] = 21 [ 1812.269414] IPVS: ftp: loaded support on port[0] = 21 [ 1812.379075] BTRFS error (device loop0): superblock checksum mismatch [ 1812.411864] BTRFS error (device loop0): open_ctree failed 23:45:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd00}]) 23:45:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8008}]) 23:45:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe00}]) [ 1812.974203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x81fd}]) 23:45:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x30000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:32 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x33fe0, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:32 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfffff000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf00}]) 23:45:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8300}]) 23:45:32 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe24}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1813.898305] IPVS: ftp: loaded support on port[0] = 21 [ 1813.902164] IPVS: ftp: loaded support on port[0] = 21 [ 1813.910753] IPVS: ftp: loaded support on port[0] = 21 23:45:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1100}]) 23:45:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8604}]) [ 1814.073059] BTRFS error (device loop0): superblock checksum mismatch [ 1814.075172] BTRFS error (device loop0): open_ctree failed 23:45:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1200}]) 23:45:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x9000}]) 23:45:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1300}]) [ 1814.472472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:33 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe38}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1814.761774] IPVS: ftp: loaded support on port[0] = 21 [ 1815.063122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe703}]) 23:45:34 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xffffff7f}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1400}]) 23:45:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:34 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe40}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1815.738814] IPVS: ftp: loaded support on port[0] = 21 23:45:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1500}]) 23:45:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff}]) [ 1815.849219] IPVS: ftp: loaded support on port[0] = 21 [ 1815.922217] BTRFS warning (device ): duplicate device /dev/loop5 devid 1 generation 7 scanned by syz-executor.5 (24595) [ 1815.956593] BTRFS error (device loop0): superblock checksum mismatch [ 1815.957126] BTRFS error (device loop0): open_ctree failed 23:45:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1600}]) 23:45:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd81}]) 23:45:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1800}]) 23:45:34 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xffffff9e}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1816.436103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:35 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe48}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:35 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe01}]) 23:45:35 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000}]) [ 1816.814115] IPVS: ftp: loaded support on port[0] = 21 [ 1816.840416] IPVS: ftp: loaded support on port[0] = 21 [ 1817.179898] BTRFS error (device loop0): superblock checksum mismatch [ 1817.181828] BTRFS error (device loop0): open_ctree failed [ 1817.397366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:36 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff01}]) 23:45:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2300}]) 23:45:36 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffff0}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:36 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe50}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100100, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3000}]) [ 1818.101033] IPVS: ftp: loaded support on port[0] = 21 23:45:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f}]) [ 1818.101368] IPVS: ftp: loaded support on port[0] = 21 [ 1818.134355] IPVS: ftp: loaded support on port[0] = 21 23:45:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3d00}]) [ 1818.423350] BTRFS error (device loop0): superblock checksum mismatch [ 1818.433880] BTRFS error (device loop0): open_ctree failed 23:45:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfff0}]) 23:45:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f00}]) 23:45:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x15fff}]) [ 1818.898263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:37 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201, 0x2c4}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000}]) 23:45:37 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xffffffff}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:37 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe58}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20000}]) [ 1819.200639] IPVS: ftp: loaded support on port[0] = 21 [ 1819.220719] IPVS: ftp: loaded support on port[0] = 21 [ 1819.282844] IPVS: ftp: loaded support on port[0] = 21 [ 1819.732943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a44, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5200}]) 23:45:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b5a}]) 23:45:38 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201, 0x23e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:38 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0xf}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:38 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe60}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1820.412639] IPVS: ftp: loaded support on port[0] = 21 [ 1820.418648] IPVS: ftp: loaded support on port[0] = 21 [ 1820.422434] IPVS: ftp: loaded support on port[0] = 21 23:45:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c77}]) 23:45:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x6000}]) 23:45:39 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c7f}]) 23:45:39 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8008}]) 23:45:39 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c81}]) [ 1820.799220] BTRFS error (device loop0): superblock checksum mismatch [ 1820.816667] BTRFS error (device loop0): open_ctree failed 23:45:39 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x81fd}]) [ 1821.311620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1821.313498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1821.313828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1821.343317] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 1821.343507] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 1821.343671] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 1821.352899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a45, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c82}]) 23:45:40 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8605}]) 23:45:40 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe68}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1822.321841] IPVS: ftp: loaded support on port[0] = 21 [ 1822.509119] BTRFS error (device loop0): superblock checksum mismatch [ 1822.514128] BTRFS error (device loop0): open_ctree failed [ 1822.755739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:42 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x10}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100100, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:42 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c83}]) 23:45:42 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe70}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:42 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x9000}]) 23:45:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a46, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:42 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c85}]) 23:45:42 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe703}]) [ 1823.973663] IPVS: ftp: loaded support on port[0] = 21 [ 1823.989599] IPVS: ftp: loaded support on port[0] = 21 23:45:42 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff}]) 23:45:42 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20c86}]) [ 1824.077197] BTRFS error (device loop0): superblock checksum mismatch [ 1824.077610] BTRFS error (device loop0): open_ctree failed [ 1824.180336] BTRFS error (device loop5): superblock checksum mismatch 23:45:42 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd81}]) 23:45:42 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x70000}]) [ 1824.319049] BTRFS error (device loop5): open_ctree failed [ 1824.588925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:43 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0xc0}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1824.812818] IPVS: ftp: loaded support on port[0] = 21 [ 1825.173697] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:43 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0xc0}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:43 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe01}]) 23:45:43 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100000}]) 23:45:43 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe78}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a47, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:43 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0xec0}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1825.530302] IPVS: ftp: loaded support on port[0] = 21 [ 1825.535862] IPVS: ftp: loaded support on port[0] = 21 23:45:44 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff01}]) 23:45:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100020}]) [ 1825.575863] IPVS: ftp: loaded support on port[0] = 21 [ 1825.671789] BTRFS error (device loop0): superblock checksum mismatch 23:45:44 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f}]) [ 1825.672521] BTRFS error (device loop0): open_ctree failed 23:45:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800000}]) 23:45:44 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfff0}]) 23:45:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900000}]) [ 1826.347097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1826.371007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1826.451049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:45 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0xc0}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x15fff}]) 23:45:45 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff1f}]) 23:45:45 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x33fe0}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1826.633244] IPVS: ftp: loaded support on port[0] = 21 [ 1826.640778] IPVS: ftp: loaded support on port[0] = 21 [ 1827.129612] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1827.309679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a48, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:46 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe80}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:46 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20000}]) 23:45:46 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000}]) 23:45:46 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x200000a8}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:46 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x33fe0}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:46 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000}]) 23:45:46 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b40}]) [ 1827.830511] IPVS: ftp: loaded support on port[0] = 21 [ 1827.835450] IPVS: ftp: loaded support on port[0] = 21 [ 1827.841887] IPVS: ftp: loaded support on port[0] = 21 [ 1827.922990] BTRFS error (device loop0): superblock checksum mismatch 23:45:46 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3000000}]) [ 1827.936815] BTRFS error (device loop0): open_ctree failed 23:45:46 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b6a}]) 23:45:46 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b72}]) 23:45:46 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000000}]) [ 1828.453462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1828.870982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a66, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:48 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x7ffff000}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b74}]) 23:45:48 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4860000}]) 23:45:48 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe88}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:48 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x33fe0}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1829.683634] IPVS: ftp: loaded support on port[0] = 21 [ 1829.693256] IPVS: ftp: loaded support on port[0] = 21 23:45:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b75}]) [ 1829.708725] IPVS: ftp: loaded support on port[0] = 21 23:45:48 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5000000}]) [ 1829.799626] BTRFS error (device loop0): superblock checksum mismatch [ 1829.800238] BTRFS error (device loop0): open_ctree failed 23:45:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b76}]) 23:45:48 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x6000000}]) 23:45:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b78}]) [ 1830.241024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:48 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe90}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1830.523183] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1830.569502] IPVS: ftp: loaded support on port[0] = 21 [ 1830.769116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a73, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:49 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20b79}]) 23:45:49 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7000000}]) 23:45:49 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x2, 0x8100}, 0x0) unshare(0x0) 23:45:49 executing program 5: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x33fe0}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:49 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xe98}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1831.488984] IPVS: ftp: loaded support on port[0] = 21 [ 1831.503701] IPVS: ftp: loaded support on port[0] = 21 [ 1831.509967] IPVS: ftp: loaded support on port[0] = 21 23:45:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x70000}]) 23:45:50 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8000000}]) [ 1831.697597] BTRFS error (device loop0): superblock checksum mismatch [ 1831.737159] BTRFS error (device loop0): open_ctree failed 23:45:50 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8040000}]) 23:45:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100000}]) 23:45:50 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8800000}]) 23:45:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100020}]) [ 1832.304037] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1832.304147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1832.633676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a74, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:51 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x200000}]) 23:45:51 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x9000000}]) 23:45:51 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x7, 0x8100}, 0x0) unshare(0x0) 23:45:51 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0xea0}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:51 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8800000}]) [ 1833.361032] IPVS: ftp: loaded support on port[0] = 21 23:45:51 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x300000}]) 23:45:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 1) 23:45:51 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa000000}]) [ 1833.402723] IPVS: ftp: loaded support on port[0] = 21 [ 1833.563259] BTRFS error (device loop0): superblock checksum mismatch [ 1833.572243] BTRFS error (device loop0): open_ctree failed 23:45:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x600000}]) 23:45:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb000000}]) [ 1833.741355] FAULT_INJECTION: forcing a failure. [ 1833.741355] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.742613] CPU: 0 PID: 25822 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1833.742624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:45:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800000}]) [ 1833.742629] Call Trace: [ 1833.742651] dump_stack+0x1fc/0x2ef [ 1833.742672] should_fail.cold+0xa/0xf [ 1833.742691] ? setup_fault_attr+0x200/0x200 [ 1833.742707] ? lock_acquire+0x170/0x3c0 [ 1833.742729] __should_failslab+0x115/0x180 [ 1833.742748] should_failslab+0x5/0x10 [ 1833.742762] __kmalloc+0x2ab/0x3c0 [ 1833.742774] ? __se_sys_memfd_create+0xf8/0x440 [ 1833.742791] __se_sys_memfd_create+0xf8/0x440 [ 1833.742807] ? memfd_file_seals_ptr+0x150/0x150 [ 1833.742830] do_syscall_64+0xf9/0x620 [ 1833.742849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1833.742860] RIP: 0033:0x7fa0bfb030e9 [ 1833.742874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1833.742881] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1833.742895] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb030e9 [ 1833.742903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0bfb5c1ee [ 1833.742911] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1833.742918] R10: 000000000000000c R11: 0000000000000246 R12: 0000000008100000 [ 1833.742926] R13: 0000000020000100 R14: 0000000000a13e80 R15: 0000000020000a40 [ 1834.089917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a75, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:53 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc000000}]) 23:45:53 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x8, 0x8100}, 0x0) unshare(0x0) 23:45:53 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900000}]) 23:45:53 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x6d04}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 2) [ 1834.971901] FAULT_INJECTION: forcing a failure. [ 1834.971901] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.971990] CPU: 0 PID: 25852 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1834.971999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.972004] Call Trace: [ 1834.972024] dump_stack+0x1fc/0x2ef [ 1834.972045] should_fail.cold+0xa/0xf [ 1834.972062] ? setup_fault_attr+0x200/0x200 [ 1834.972079] ? __should_failslab+0xe/0x180 [ 1834.972096] __should_failslab+0x115/0x180 [ 1834.972115] should_failslab+0x5/0x10 [ 1834.972130] kmem_cache_alloc+0x277/0x370 [ 1834.972146] ? shmem_destroy_callback+0xb0/0xb0 [ 1834.972161] shmem_alloc_inode+0x18/0x40 [ 1834.972174] ? shmem_destroy_callback+0xb0/0xb0 [ 1834.972185] alloc_inode+0x5d/0x180 [ 1834.972196] new_inode+0x1d/0xf0 [ 1834.972211] shmem_get_inode+0x96/0x8d0 [ 1834.972230] __shmem_file_setup.part.0+0x7a/0x2b0 [ 1834.972248] shmem_file_setup+0x61/0x90 [ 1834.972261] __se_sys_memfd_create+0x26b/0x440 [ 1834.972275] ? memfd_file_seals_ptr+0x150/0x150 [ 1834.972290] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1834.972305] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1834.972319] ? do_syscall_64+0x21/0x620 [ 1834.972335] do_syscall_64+0xf9/0x620 [ 1834.972360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1834.972371] RIP: 0033:0x7fa0bfb030e9 [ 1834.972386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1834.972393] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1834.972407] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb030e9 [ 1834.972415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0bfb5c1ee [ 1834.972423] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1834.972430] R10: 000000000000000c R11: 0000000000000246 R12: 0000000008100000 [ 1834.972439] R13: 0000000020000100 R14: 0000000000a13e80 R15: 0000000020000a40 [ 1835.001432] IPVS: ftp: loaded support on port[0] = 21 [ 1835.008158] IPVS: ftp: loaded support on port[0] = 21 23:45:53 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff1f}]) 23:45:53 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd000000}]) 23:45:53 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe000000}]) 23:45:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000}]) [ 1835.426999] BTRFS error (device loop0): superblock checksum mismatch [ 1835.430076] BTRFS error (device loop0): open_ctree failed [ 1835.628876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:54 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf000000}]) 23:45:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000}]) 23:45:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a76, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:54 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x500, 0x8100}, 0x0) unshare(0x0) 23:45:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3000000}]) 23:45:54 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10000000}]) [ 1836.107914] BTRFS error (device loop0): superblock checksum mismatch [ 1836.108403] BTRFS error (device loop0): open_ctree failed [ 1836.145317] IPVS: ftp: loaded support on port[0] = 21 23:45:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000000}]) 23:45:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 3) 23:45:55 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x6e04}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:55 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5000000}]) 23:45:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x11000000}]) 23:45:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a77, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:55 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0xffffff1f, 0x8100}, 0x0) unshare(0x0) 23:45:55 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5860000}]) 23:45:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x12000000}]) [ 1837.242674] IPVS: ftp: loaded support on port[0] = 21 [ 1837.250465] IPVS: ftp: loaded support on port[0] = 21 [ 1837.293983] FAULT_INJECTION: forcing a failure. [ 1837.293983] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.294003] CPU: 1 PID: 26003 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:45:56 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x6000000}]) [ 1837.294012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.294017] Call Trace: 23:45:56 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x13000000}]) [ 1837.294036] dump_stack+0x1fc/0x2ef [ 1837.294055] should_fail.cold+0xa/0xf [ 1837.294074] ? setup_fault_attr+0x200/0x200 [ 1837.294100] ? lock_acquire+0x170/0x3c0 [ 1837.294122] __should_failslab+0x115/0x180 [ 1837.294139] should_failslab+0x5/0x10 [ 1837.294153] kmem_cache_alloc+0x277/0x370 [ 1837.294172] __d_alloc+0x2b/0xa10 23:45:56 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7000000}]) [ 1837.294191] d_alloc_pseudo+0x19/0x70 [ 1837.294206] alloc_file_pseudo+0xc6/0x250 [ 1837.294221] ? alloc_file+0x4d0/0x4d0 23:45:56 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x6f04}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1837.294235] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1837.294251] ? shmem_get_inode+0x44c/0x8d0 [ 1837.294271] __shmem_file_setup.part.0+0x102/0x2b0 [ 1837.294289] shmem_file_setup+0x61/0x90 23:45:56 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x14000000}]) [ 1837.294302] __se_sys_memfd_create+0x26b/0x440 [ 1837.294316] ? memfd_file_seals_ptr+0x150/0x150 [ 1837.294331] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1837.294347] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1837.294361] ? do_syscall_64+0x21/0x620 [ 1837.294376] do_syscall_64+0xf9/0x620 [ 1837.294393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.294404] RIP: 0033:0x7fa0bfb030e9 23:45:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 4) 23:45:56 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8000000}]) 23:45:56 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8102}, 0x0) unshare(0x0) [ 1837.294416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1837.294424] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1837.294439] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb030e9 [ 1837.294447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0bfb5c1ee [ 1837.294456] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1837.294464] R10: 000000000000000c R11: 0000000000000246 R12: 0000000008100000 [ 1837.294471] R13: 0000000020000100 R14: 0000000000a13e80 R15: 0000000020000a40 [ 1837.482516] BTRFS error (device loop0): superblock checksum mismatch [ 1837.490102] BTRFS error (device loop0): open_ctree failed [ 1837.712476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1837.951586] IPVS: ftp: loaded support on port[0] = 21 [ 1838.254742] IPVS: ftp: loaded support on port[0] = 21 [ 1838.320185] FAULT_INJECTION: forcing a failure. [ 1838.320185] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.320204] CPU: 1 PID: 26097 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1838.320213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.320218] Call Trace: [ 1838.320237] dump_stack+0x1fc/0x2ef [ 1838.320257] should_fail.cold+0xa/0xf [ 1838.320276] ? setup_fault_attr+0x200/0x200 [ 1838.320292] ? lock_acquire+0x170/0x3c0 [ 1838.320313] __should_failslab+0x115/0x180 [ 1838.320330] should_failslab+0x5/0x10 [ 1838.320343] kmem_cache_alloc+0x277/0x370 [ 1838.320361] __alloc_file+0x21/0x340 [ 1838.320386] alloc_empty_file+0x6d/0x170 [ 1838.320406] alloc_file+0x5e/0x4d0 [ 1838.320426] alloc_file_pseudo+0x165/0x250 [ 1838.320444] ? alloc_file+0x4d0/0x4d0 [ 1838.320459] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1838.320477] ? shmem_get_inode+0x44c/0x8d0 [ 1838.320499] __shmem_file_setup.part.0+0x102/0x2b0 [ 1838.320519] shmem_file_setup+0x61/0x90 [ 1838.320535] __se_sys_memfd_create+0x26b/0x440 [ 1838.320549] ? memfd_file_seals_ptr+0x150/0x150 [ 1838.320566] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1838.320582] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1838.320596] ? do_syscall_64+0x21/0x620 [ 1838.320613] do_syscall_64+0xf9/0x620 [ 1838.320631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1838.320642] RIP: 0033:0x7fa0bfb030e9 [ 1838.320655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1838.320663] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1838.320676] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb030e9 [ 1838.320684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0bfb5c1ee [ 1838.320692] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1838.320700] R10: 000000000000000c R11: 0000000000000246 R12: 0000000008100000 [ 1838.320708] R13: 0000000020000100 R14: 0000000000a13e80 R15: 0000000020000a40 [ 1838.451533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1838.731601] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:45:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a78, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x15000000}]) 23:45:57 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8040000}]) 23:45:57 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x25}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:45:57 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8104}, 0x0) unshare(0x0) 23:45:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 5) [ 1839.493776] IPVS: ftp: loaded support on port[0] = 21 23:45:58 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8800000}]) [ 1839.547854] FAULT_INJECTION: forcing a failure. [ 1839.547854] name failslab, interval 1, probability 0, space 0, times 0 23:45:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x16000000}]) [ 1839.548125] CPU: 0 PID: 26141 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1839.548134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1839.548138] Call Trace: [ 1839.548155] dump_stack+0x1fc/0x2ef [ 1839.548174] should_fail.cold+0xa/0xf 23:45:58 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x9000000}]) 23:45:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x18000000}]) [ 1839.548192] ? setup_fault_attr+0x200/0x200 [ 1839.548207] ? lock_acquire+0x170/0x3c0 [ 1839.548228] __should_failslab+0x115/0x180 [ 1839.548244] should_failslab+0x5/0x10 [ 1839.548259] kmem_cache_alloc_trace+0x284/0x380 [ 1839.548278] apparmor_file_alloc_security+0x394/0xad0 [ 1839.548296] ? apparmor_file_receive+0x160/0x160 [ 1839.548312] ? __alloc_file+0x21/0x340 [ 1839.548332] security_file_alloc+0x40/0x90 23:45:58 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x33}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1839.548348] __alloc_file+0xd8/0x340 [ 1839.548364] alloc_empty_file+0x6d/0x170 23:45:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1f000000}]) [ 1839.548380] alloc_file+0x5e/0x4d0 [ 1839.548399] alloc_file_pseudo+0x165/0x250 [ 1839.548415] ? alloc_file+0x4d0/0x4d0 [ 1839.548429] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1839.548445] ? shmem_get_inode+0x44c/0x8d0 [ 1839.548466] __shmem_file_setup.part.0+0x102/0x2b0 [ 1839.548484] shmem_file_setup+0x61/0x90 [ 1839.548498] __se_sys_memfd_create+0x26b/0x440 [ 1839.548513] ? memfd_file_seals_ptr+0x150/0x150 [ 1839.548531] ? do_syscall_64+0xbf/0x620 [ 1839.548547] do_syscall_64+0xf9/0x620 [ 1839.548566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1839.548578] RIP: 0033:0x7fa0bfb030e9 [ 1839.548591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:45:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a79, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:45:58 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa000000}]) [ 1839.548598] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:45:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1ffff000}]) [ 1839.548612] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb030e9 [ 1839.548621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0bfb5c1ee [ 1839.548629] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 23:45:58 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8106}, 0x0) unshare(0x0) [ 1839.548637] R10: 000000000000000c R11: 0000000000000246 R12: 0000000008100000 [ 1839.548645] R13: 0000000020000100 R14: 0000000000a13e80 R15: 0000000020000a40 23:45:59 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb000000}]) [ 1839.552338] IPVS: ftp: loaded support on port[0] = 21 [ 1839.643554] BTRFS error (device loop0): superblock checksum mismatch [ 1839.647831] BTRFS error (device loop0): open_ctree failed [ 1840.354639] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1840.365819] IPVS: ftp: loaded support on port[0] = 21 [ 1840.641908] IPVS: ftp: loaded support on port[0] = 21 [ 1840.673038] BTRFS error (device loop0): superblock checksum mismatch [ 1840.682292] BTRFS error (device loop0): open_ctree failed [ 1841.167712] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:46:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 6) 23:46:00 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20000000}]) 23:46:00 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc000000}]) 23:46:00 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:00 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8108}, 0x0) unshare(0x0) 23:46:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x150a7a, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1841.885930] IPVS: ftp: loaded support on port[0] = 21 23:46:00 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd000000}]) [ 1841.921919] IPVS: ftp: loaded support on port[0] = 21 23:46:00 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20001000}]) [ 1842.001552] FAULT_INJECTION: forcing a failure. [ 1842.001552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1842.001621] CPU: 0 PID: 26308 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1842.001630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.001635] Call Trace: [ 1842.001655] dump_stack+0x1fc/0x2ef [ 1842.001674] should_fail.cold+0xa/0xf [ 1842.001691] ? lock_acquire+0x170/0x3c0 [ 1842.001708] ? setup_fault_attr+0x200/0x200 [ 1842.001732] __alloc_pages_nodemask+0x239/0x2890 [ 1842.001748] ? __lock_acquire+0x6de/0x3ff0 [ 1842.001766] ? static_obj+0x50/0x50 [ 1842.001789] ? __lock_acquire+0x6de/0x3ff0 [ 1842.001805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1842.001822] ? __lock_acquire+0x6de/0x3ff0 [ 1842.001841] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1842.001858] ? mark_held_locks+0xf0/0xf0 [ 1842.001871] ? rcu_nmi_exit+0xb3/0x180 [ 1842.001887] ? mark_held_locks+0xf0/0xf0 [ 1842.001901] ? deref_stack_reg+0x134/0x1d0 [ 1842.001913] ? get_reg+0x176/0x1f0 [ 1842.001930] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1842.001947] alloc_pages_vma+0xf2/0x780 [ 1842.001967] shmem_alloc_page+0x11c/0x1f0 [ 1842.001982] ? shmem_swapin+0x220/0x220 [ 1842.002014] ? percpu_counter_add_batch+0x126/0x180 [ 1842.002031] ? __vm_enough_memory+0x316/0x650 [ 1842.002051] shmem_alloc_and_acct_page+0x15a/0x850 [ 1842.002067] ? shmem_getpage_gfp+0x38c/0x37f0 [ 1842.002085] shmem_getpage_gfp+0x4e9/0x37f0 [ 1842.002114] ? shmem_alloc_and_acct_page+0x850/0x850 [ 1842.002130] ? mark_held_locks+0xa6/0xf0 [ 1842.002144] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 1842.002157] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1842.002176] shmem_write_begin+0xff/0x1e0 [ 1842.002205] generic_perform_write+0x1f8/0x4d0 [ 1842.002230] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1842.002243] ? current_time+0x1c0/0x1c0 [ 1842.002261] ? lock_acquire+0x170/0x3c0 [ 1842.002278] __generic_file_write_iter+0x24b/0x610 [ 1842.002296] generic_file_write_iter+0x3f8/0x730 [ 1842.002317] __vfs_write+0x51b/0x770 [ 1842.002333] ? kernel_read+0x110/0x110 [ 1842.002356] ? check_preemption_disabled+0x41/0x280 [ 1842.002376] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1842.002394] vfs_write+0x1f3/0x540 [ 1842.002412] __x64_sys_pwrite64+0x1f7/0x250 [ 1842.002428] ? ksys_pwrite64+0x1a0/0x1a0 [ 1842.002445] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1842.002459] ? do_syscall_64+0x21/0x620 [ 1842.002475] do_syscall_64+0xf9/0x620 [ 1842.002493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1842.002504] RIP: 0033:0x7fa0bfab60b7 [ 1842.002517] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1842.002525] RSP: 002b:00007fa0be456f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1842.002538] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab60b7 [ 1842.002547] RDX: 000000000000004e RSI: 0000000020010000 RDI: 000000000000000e [ 1842.002556] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1842.002564] R10: 0000000000010000 R11: 0000000000000293 R12: 000000000000000e [ 1842.002572] R13: 000000000000000e R14: 0000000020000200 R15: 0000000000000000 [ 1842.015221] BTRFS error (device loop0): superblock checksum mismatch [ 1842.015796] BTRFS error (device loop0): open_ctree failed 23:46:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 7) [ 1842.302783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:46:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe000000}]) 23:46:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x23000000}]) [ 1842.802435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1842.850327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1842.853228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1843.045705] FAULT_INJECTION: forcing a failure. [ 1843.045705] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.045794] CPU: 0 PID: 26368 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f000000}]) [ 1843.045802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf000000}]) [ 1843.045806] Call Trace: [ 1843.045827] dump_stack+0x1fc/0x2ef [ 1843.045846] should_fail.cold+0xa/0xf [ 1843.045865] ? setup_fault_attr+0x200/0x200 [ 1843.045885] ? __lock_acquire+0x6de/0x3ff0 [ 1843.045909] __should_failslab+0x115/0x180 [ 1843.045928] should_failslab+0x5/0x10 [ 1843.045942] kmem_cache_alloc+0x3f/0x370 [ 1843.045959] radix_tree_node_alloc.constprop.0+0x1e4/0x320 [ 1843.045977] __radix_tree_create+0x314/0x540 [ 1843.045997] __radix_tree_insert+0xbb/0x5f0 [ 1843.046014] ? __radix_tree_create+0x540/0x540 [ 1843.046028] ? lock_acquire+0x170/0x3c0 [ 1843.046042] ? shmem_add_to_page_cache+0x306/0xbb0 23:46:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10000000}]) [ 1843.046064] shmem_add_to_page_cache+0x616/0xbb0 [ 1843.046081] ? shmem_recalc_inode+0x310/0x310 [ 1843.046096] ? __radix_tree_preload+0x1fe/0x280 23:46:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x40000000}]) [ 1843.046118] shmem_getpage_gfp+0x2004/0x37f0 [ 1843.046148] ? shmem_alloc_and_acct_page+0x850/0x850 [ 1843.046164] ? mark_held_locks+0xa6/0xf0 [ 1843.046177] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 1843.046189] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1843.046204] shmem_write_begin+0xff/0x1e0 [ 1843.046224] generic_perform_write+0x1f8/0x4d0 [ 1843.046246] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1843.046260] ? current_time+0x1c0/0x1c0 [ 1843.046278] ? lock_acquire+0x170/0x3c0 [ 1843.046295] __generic_file_write_iter+0x24b/0x610 [ 1843.046311] generic_file_write_iter+0x3f8/0x730 [ 1843.046346] __vfs_write+0x51b/0x770 [ 1843.046361] ? kernel_read+0x110/0x110 [ 1843.046386] ? check_preemption_disabled+0x41/0x280 [ 1843.046406] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1843.046422] vfs_write+0x1f3/0x540 [ 1843.046441] __x64_sys_pwrite64+0x1f7/0x250 [ 1843.046456] ? ksys_pwrite64+0x1a0/0x1a0 [ 1843.046473] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1843.046486] ? do_syscall_64+0x21/0x620 [ 1843.046500] do_syscall_64+0xf9/0x620 [ 1843.046516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1843.046527] RIP: 0033:0x7fa0bfab60b7 [ 1843.046541] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1843.046549] RSP: 002b:00007fa0be456f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1843.046563] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab60b7 [ 1843.046571] RDX: 000000000000004e RSI: 0000000020010000 RDI: 000000000000000e [ 1843.046579] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1843.046587] R10: 0000000000010000 R11: 0000000000000293 R12: 000000000000000e [ 1843.046595] R13: 000000000000000e R14: 0000000020000200 R15: 0000000000000000 23:46:03 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1845.579826] IPVS: ftp: loaded support on port[0] = 21 23:46:04 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x810a}, 0x0) unshare(0x0) 23:46:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1fffff, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x11000000}]) 23:46:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5a0b0200}]) 23:46:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 8) 23:46:04 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1845.959217] IPVS: ftp: loaded support on port[0] = 21 23:46:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x12000000}]) 23:46:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x770c0200}]) [ 1845.998649] BTRFS error (device loop0): superblock checksum mismatch [ 1846.000788] BTRFS error (device loop0): open_ctree failed [ 1846.008330] FAULT_INJECTION: forcing a failure. [ 1846.008330] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.008363] CPU: 0 PID: 26463 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1846.008372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.008376] Call Trace: [ 1846.008396] dump_stack+0x1fc/0x2ef [ 1846.008416] should_fail.cold+0xa/0xf [ 1846.008436] ? setup_fault_attr+0x200/0x200 [ 1846.008451] ? lock_acquire+0x170/0x3c0 23:46:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x13000000}]) 23:46:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0c0200}]) [ 1846.008471] __should_failslab+0x115/0x180 [ 1846.008489] should_failslab+0x5/0x10 [ 1846.008502] kmem_cache_alloc+0x277/0x370 [ 1846.008521] getname_flags+0xce/0x590 [ 1846.008534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1846.008550] do_sys_open+0x26c/0x520 [ 1846.008564] ? filp_open+0x70/0x70 [ 1846.008593] ? do_syscall_64+0x4f/0x620 [ 1846.008611] do_syscall_64+0xf9/0x620 [ 1846.008631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1846.008642] RIP: 0033:0x7fa0bfab6004 23:46:05 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x810c0200}]) [ 1846.008655] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 23:46:05 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x14000000}]) [ 1846.008663] RSP: 002b:00007fa0be456eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1846.008676] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab6004 [ 1846.008684] RDX: 0000000000000002 RSI: 00007fa0be456fe0 RDI: 00000000ffffff9c [ 1846.008692] RBP: 00007fa0be456fe0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1846.008700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1846.008707] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1846.074019] IPVS: ftp: loaded support on port[0] = 21 23:46:05 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x810c}, 0x0) unshare(0x0) [ 1846.759984] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1846.981524] IPVS: ftp: loaded support on port[0] = 21 [ 1847.308260] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:46:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 9) 23:46:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x820c0200}]) 23:46:06 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:06 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x15000000}]) 23:46:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:06 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x810e}, 0x0) unshare(0x0) [ 1848.007745] IPVS: ftp: loaded support on port[0] = 21 [ 1848.082011] IPVS: ftp: loaded support on port[0] = 21 23:46:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x83000000}]) 23:46:06 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x16000000}]) [ 1848.173103] BTRFS error (device loop0): superblock checksum mismatch [ 1848.200650] BTRFS error (device loop0): open_ctree failed [ 1848.209510] FAULT_INJECTION: forcing a failure. [ 1848.209510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1848.209530] CPU: 0 PID: 26592 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:07 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x18000000}]) [ 1848.209538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.209544] Call Trace: [ 1848.209567] dump_stack+0x1fc/0x2ef [ 1848.209587] should_fail.cold+0xa/0xf [ 1848.209606] ? setup_fault_attr+0x200/0x200 [ 1848.209623] ? ctx_sched_in+0x134/0x790 23:46:07 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x830c0200}]) [ 1848.209646] __alloc_pages_nodemask+0x239/0x2890 [ 1848.209666] ? lock_downgrade+0x720/0x720 [ 1848.209682] ? check_preemption_disabled+0x41/0x280 [ 1848.209699] ? __lock_acquire+0x6de/0x3ff0 [ 1848.209721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.209742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1848.209758] ? lockdep_hardirqs_on+0x3a8/0x5c0 23:46:07 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x850c0200}]) [ 1848.209772] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1848.209788] ? rcu_nmi_exit+0xb3/0x180 23:46:07 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1ffff000}]) [ 1848.209804] ? retint_kernel+0x2d/0x2d [ 1848.209821] cache_grow_begin+0xa4/0x8a0 [ 1848.209842] ? setup_fault_attr+0x200/0x200 [ 1848.209856] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1848.209874] cache_alloc_refill+0x273/0x340 [ 1848.209895] kmem_cache_alloc+0x346/0x370 23:46:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 10) 23:46:07 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8110}, 0x0) unshare(0x0) 23:46:07 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1848.209914] getname_flags+0xce/0x590 [ 1848.209932] do_sys_open+0x26c/0x520 [ 1848.209947] ? filp_open+0x70/0x70 [ 1848.209965] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 23:46:07 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x860c0200}]) [ 1848.209981] ? trace_hardirqs_off_caller+0x6e/0x210 23:46:07 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20000000}]) [ 1848.209994] ? do_syscall_64+0x21/0x620 [ 1848.210011] do_syscall_64+0xf9/0x620 [ 1848.210028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1848.210041] RIP: 0033:0x7fa0bfab6004 [ 1848.210054] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1848.210061] RSP: 002b:00007fa0be456eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1848.210075] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab6004 [ 1848.210083] RDX: 0000000000000002 RSI: 00007fa0be456fe0 RDI: 00000000ffffff9c [ 1848.210091] RBP: 00007fa0be456fe0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1848.210099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1848.210108] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1848.798333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1849.109711] IPVS: ftp: loaded support on port[0] = 21 [ 1849.174045] FAULT_INJECTION: forcing a failure. [ 1849.174045] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.174095] CPU: 0 PID: 26667 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1849.174104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1849.174109] Call Trace: [ 1849.174129] dump_stack+0x1fc/0x2ef [ 1849.174149] should_fail.cold+0xa/0xf [ 1849.174167] ? setup_fault_attr+0x200/0x200 [ 1849.174182] ? lock_acquire+0x170/0x3c0 [ 1849.174203] __should_failslab+0x115/0x180 [ 1849.174221] should_failslab+0x5/0x10 [ 1849.174233] kmem_cache_alloc+0x277/0x370 [ 1849.174250] __alloc_file+0x21/0x340 [ 1849.174267] alloc_empty_file+0x6d/0x170 [ 1849.174284] path_openat+0xe9/0x2df0 [ 1849.174299] ? __lock_acquire+0x6de/0x3ff0 [ 1849.174323] ? path_lookupat+0x8d0/0x8d0 [ 1849.174340] ? mark_held_locks+0xf0/0xf0 [ 1849.174353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1849.174373] do_filp_open+0x18c/0x3f0 [ 1849.174385] ? may_open_dev+0xf0/0xf0 [ 1849.174401] ? __alloc_fd+0x28d/0x570 [ 1849.174420] ? lock_downgrade+0x720/0x720 [ 1849.174433] ? lock_acquire+0x170/0x3c0 [ 1849.174445] ? __alloc_fd+0x34/0x570 [ 1849.174462] ? do_raw_spin_unlock+0x171/0x230 [ 1849.174477] ? _raw_spin_unlock+0x29/0x40 [ 1849.174489] ? __alloc_fd+0x28d/0x570 [ 1849.174510] do_sys_open+0x3b3/0x520 [ 1849.174525] ? filp_open+0x70/0x70 [ 1849.174543] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1849.174559] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1849.174572] ? do_syscall_64+0x21/0x620 [ 1849.174588] do_syscall_64+0xf9/0x620 [ 1849.174606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1849.174617] RIP: 0033:0x7fa0bfab6004 [ 1849.174630] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1849.174637] RSP: 002b:00007fa0be456eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1849.174650] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab6004 [ 1849.174658] RDX: 0000000000000002 RSI: 00007fa0be456fe0 RDI: 00000000ffffff9c [ 1849.174666] RBP: 00007fa0be456fe0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1849.174673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1849.174681] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1849.177636] IPVS: ftp: loaded support on port[0] = 21 [ 1849.274396] audit: type=1800 audit(1650584767.701:281): pid=26669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16382 res=0 [ 1849.680948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:46:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe4ffffff}]) 23:46:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20001000}]) 23:46:09 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8160}, 0x0) unshare(0x0) 23:46:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 11) 23:46:09 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x6}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x23000000}]) [ 1850.909077] IPVS: ftp: loaded support on port[0] = 21 23:46:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe7030000}]) [ 1850.929026] IPVS: ftp: loaded support on port[0] = 21 [ 1850.952278] FAULT_INJECTION: forcing a failure. [ 1850.952278] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.952297] CPU: 1 PID: 26739 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1850.952306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3d000000}]) [ 1850.952311] Call Trace: [ 1850.952331] dump_stack+0x1fc/0x2ef [ 1850.952352] should_fail.cold+0xa/0xf [ 1850.952371] ? setup_fault_attr+0x200/0x200 [ 1850.952386] ? lock_acquire+0x170/0x3c0 [ 1850.952407] __should_failslab+0x115/0x180 [ 1850.952424] should_failslab+0x5/0x10 [ 1850.952437] kmem_cache_alloc_trace+0x284/0x380 [ 1850.952457] apparmor_file_alloc_security+0x394/0xad0 23:46:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffff}]) [ 1850.952475] ? apparmor_file_receive+0x160/0x160 [ 1850.952491] ? __alloc_file+0x21/0x340 [ 1850.952517] security_file_alloc+0x40/0x90 [ 1850.952536] __alloc_file+0xd8/0x340 23:46:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f000000}]) [ 1850.952554] alloc_empty_file+0x6d/0x170 [ 1850.952572] path_openat+0xe9/0x2df0 [ 1850.952588] ? __lock_acquire+0x6de/0x3ff0 [ 1850.952612] ? path_lookupat+0x8d0/0x8d0 [ 1850.952630] ? mark_held_locks+0xf0/0xf0 [ 1850.952652] do_filp_open+0x18c/0x3f0 [ 1850.952664] ? may_open_dev+0xf0/0xf0 [ 1850.952679] ? __alloc_fd+0x28d/0x570 [ 1850.952698] ? lock_downgrade+0x720/0x720 23:46:10 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1850.952711] ? lock_acquire+0x170/0x3c0 [ 1850.952723] ? __alloc_fd+0x34/0x570 [ 1850.952739] ? do_raw_spin_unlock+0x171/0x230 [ 1850.952754] ? _raw_spin_unlock+0x29/0x40 [ 1850.952766] ? __alloc_fd+0x28d/0x570 [ 1850.952786] do_sys_open+0x3b3/0x520 [ 1850.952801] ? filp_open+0x70/0x70 [ 1850.952819] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1850.952835] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1850.952849] ? do_syscall_64+0x21/0x620 [ 1850.952865] do_syscall_64+0xf9/0x620 [ 1850.952883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1850.952895] RIP: 0033:0x7fa0bfab6004 [ 1850.952907] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1850.952915] RSP: 002b:00007fa0be456eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1850.952928] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfab6004 [ 1850.952936] RDX: 0000000000000002 RSI: 00007fa0be456fe0 RDI: 00000000ffffff9c [ 1850.952944] RBP: 00007fa0be456fe0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1850.952951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1850.952959] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1851.054685] BTRFS error (device loop0): superblock checksum mismatch [ 1851.072016] BTRFS error (device loop0): open_ctree failed [ 1851.680776] IPVS: ftp: loaded support on port[0] = 21 [ 1851.740442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 23:46:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0ffff, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:10 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x40000000}]) 23:46:10 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf4ffffff}]) 23:46:10 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x2}, 0x0) unshare(0x0) [ 1852.028143] BTRFS error (device loop0): superblock checksum mismatch [ 1852.029353] BTRFS error (device loop0): open_ctree failed [ 1852.056129] IPVS: ftp: loaded support on port[0] = 21 23:46:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 12) 23:46:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x400b0200}]) 23:46:11 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf5ffffff}]) 23:46:11 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:11 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x4}, 0x0) unshare(0x0) 23:46:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfeffff, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1853.204031] IPVS: ftp: loaded support on port[0] = 21 23:46:11 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfbffffff}]) [ 1853.258472] IPVS: ftp: loaded support on port[0] = 21 23:46:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x52000000}]) [ 1853.324323] FAULT_INJECTION: forcing a failure. [ 1853.324323] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.325726] CPU: 0 PID: 26902 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1853.325736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1853.325741] Call Trace: [ 1853.325763] dump_stack+0x1fc/0x2ef [ 1853.325784] should_fail.cold+0xa/0xf 23:46:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd810000}]) [ 1853.325803] ? setup_fault_attr+0x200/0x200 [ 1853.325820] ? lock_acquire+0x170/0x3c0 [ 1853.325839] __should_failslab+0x115/0x180 [ 1853.325857] should_failslab+0x5/0x10 [ 1853.325871] kmem_cache_alloc_trace+0x284/0x380 23:46:12 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x6a0b0200}]) [ 1853.325891] ? loop_info64_to_compat+0x5e0/0x5e0 [ 1853.325906] __kthread_create_on_node+0xd2/0x410 [ 1853.325921] ? finish_task_switch+0x118/0x760 [ 1853.325934] ? kthread_parkme+0xa0/0xa0 [ 1853.325959] ? mark_held_locks+0xa6/0xf0 23:46:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe010000}]) [ 1853.325971] ? io_schedule_timeout+0x140/0x140 [ 1853.325985] ? trace_hardirqs_on_thunk+0x1a/0x1c 23:46:12 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6}, 0x0) unshare(0x0) [ 1853.326003] ? loop_info64_to_compat+0x5e0/0x5e0 [ 1853.326018] kthread_create_on_node+0xbb/0xf0 [ 1853.326031] ? __kthread_create_on_node+0x410/0x410 [ 1853.326052] ? __lockdep_init_map+0x100/0x5a0 [ 1853.326067] ? __lockdep_init_map+0x100/0x5a0 [ 1853.326087] lo_ioctl+0xae5/0x20e0 [ 1853.326106] ? loop_set_status64+0x110/0x110 [ 1853.326122] blkdev_ioctl+0x5cb/0x1a80 [ 1853.326137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:46:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 13) 23:46:12 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x720b0200}]) 23:46:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfeffffff}]) 23:46:12 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x16}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1853.326150] ? blkpg_ioctl+0x9d0/0x9d0 [ 1853.326165] ? mark_held_locks+0xf0/0xf0 [ 1853.326180] ? mark_held_locks+0xf0/0xf0 [ 1853.326198] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1853.326213] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1853.326225] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1853.326242] block_ioctl+0xe9/0x130 [ 1853.326253] ? blkdev_fallocate+0x3f0/0x3f0 23:46:12 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x740b0200}]) [ 1853.326269] do_vfs_ioctl+0xcdb/0x12e0 [ 1853.326284] ? lock_downgrade+0x720/0x720 [ 1853.326299] ? ioctl_preallocate+0x200/0x200 [ 1853.326317] ? __fget+0x356/0x510 [ 1853.326333] ? do_dup2+0x450/0x450 [ 1853.326356] ? do_sys_open+0x2bf/0x520 [ 1853.326378] ksys_ioctl+0x9b/0xc0 [ 1853.326394] __x64_sys_ioctl+0x6f/0xb0 [ 1853.326410] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1853.326423] do_syscall_64+0xf9/0x620 [ 1853.326441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1853.326454] RIP: 0033:0x7fa0bfb02ea7 [ 1853.326468] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1853.326475] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1853.326488] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1853.326495] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1853.326504] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1853.326513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1853.326522] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1853.358021] BTRFS error (device loop0): superblock checksum mismatch [ 1853.362712] BTRFS error (device loop0): open_ctree failed [ 1854.003272] IPVS: ftp: loaded support on port[0] = 21 [ 1854.147887] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.147925] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.230982] IPVS: ftp: loaded support on port[0] = 21 [ 1854.277678] FAULT_INJECTION: forcing a failure. [ 1854.277678] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.277696] CPU: 1 PID: 26999 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1854.277705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1854.277709] Call Trace: [ 1854.277729] dump_stack+0x1fc/0x2ef [ 1854.277749] should_fail.cold+0xa/0xf [ 1854.277768] ? setup_fault_attr+0x200/0x200 [ 1854.277783] ? lock_acquire+0x170/0x3c0 [ 1854.277805] __should_failslab+0x115/0x180 [ 1854.277821] should_failslab+0x5/0x10 [ 1854.277834] kmem_cache_alloc+0x277/0x370 [ 1854.277853] __kernfs_new_node+0xd2/0x680 [ 1854.277871] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1854.277887] ? __cpu_to_node+0x7b/0xa0 [ 1854.277901] ? account_entity_enqueue+0x2e5/0x440 [ 1854.277917] ? mark_held_locks+0xf0/0xf0 [ 1854.277931] ? enqueue_entity+0xf86/0x3850 [ 1854.277947] ? set_user_nice.part.0+0x3b9/0xab0 [ 1854.277966] kernfs_create_dir_ns+0x9e/0x230 [ 1854.277983] internal_create_group+0x1c1/0xb20 [ 1854.278003] ? sysfs_remove_link_from_group+0x70/0x70 [ 1854.278017] ? lock_downgrade+0x720/0x720 [ 1854.278042] lo_ioctl+0xf7c/0x20e0 [ 1854.278062] ? loop_set_status64+0x110/0x110 [ 1854.278077] blkdev_ioctl+0x5cb/0x1a80 [ 1854.278092] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1854.278105] ? blkpg_ioctl+0x9d0/0x9d0 [ 1854.278120] ? mark_held_locks+0xf0/0xf0 [ 1854.278134] ? mark_held_locks+0xf0/0xf0 [ 1854.278152] ? debug_check_no_obj_freed+0x201/0x490 [ 1854.278171] ? lock_downgrade+0x720/0x720 [ 1854.278186] block_ioctl+0xe9/0x130 [ 1854.278198] ? blkdev_fallocate+0x3f0/0x3f0 [ 1854.278212] do_vfs_ioctl+0xcdb/0x12e0 [ 1854.278228] ? lock_downgrade+0x720/0x720 [ 1854.278243] ? check_preemption_disabled+0x41/0x280 [ 1854.278257] ? ioctl_preallocate+0x200/0x200 [ 1854.278275] ? __fget+0x356/0x510 [ 1854.278291] ? do_dup2+0x450/0x450 [ 1854.278313] ? do_sys_open+0x2bf/0x520 [ 1854.278335] ksys_ioctl+0x9b/0xc0 [ 1854.278351] __x64_sys_ioctl+0x6f/0xb0 [ 1854.278366] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1854.278380] do_syscall_64+0xf9/0x620 [ 1854.278398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1854.278409] RIP: 0033:0x7fa0bfb02ea7 [ 1854.278423] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1854.278431] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1854.278447] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1854.278455] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1854.278463] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1854.278471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1854.278479] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c 23:46:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff010000}]) 23:46:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x750b0200}]) 23:46:14 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x17}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:14 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x8}, 0x0) unshare(0x0) 23:46:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 14) [ 1855.869212] IPVS: ftp: loaded support on port[0] = 21 [ 1855.871434] IPVS: ftp: loaded support on port[0] = 21 23:46:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x760b0200}]) 23:46:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f0000}]) [ 1855.928099] FAULT_INJECTION: forcing a failure. [ 1855.928099] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.928118] CPU: 1 PID: 27051 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1855.928126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1855.928131] Call Trace: [ 1855.928152] dump_stack+0x1fc/0x2ef [ 1855.928174] should_fail.cold+0xa/0xf [ 1855.928193] ? setup_fault_attr+0x200/0x200 [ 1855.928208] ? lock_acquire+0x170/0x3c0 [ 1855.928230] __should_failslab+0x115/0x180 23:46:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff5f0100}]) [ 1855.928246] should_failslab+0x5/0x10 [ 1855.928260] kmem_cache_alloc+0x277/0x370 [ 1855.928278] __kernfs_new_node+0xd2/0x680 [ 1855.928296] ? kernfs_dop_revalidate+0x3a0/0x3a0 23:46:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x780b0200}]) [ 1855.928310] ? kernfs_activate+0x2c/0x1d0 [ 1855.928326] ? lock_downgrade+0x720/0x720 [ 1855.928341] ? kernfs_add_one+0x51/0x4c0 [ 1855.928355] ? mutex_trylock+0x1a0/0x1a0 [ 1855.928373] ? __mutex_unlock_slowpath+0xea/0x610 [ 1855.928393] kernfs_new_node+0x92/0x120 [ 1855.928412] __kernfs_create_file+0x51/0x340 [ 1855.928430] sysfs_add_file_mode_ns+0x226/0x540 [ 1855.928451] internal_create_group+0x355/0xb20 [ 1855.928470] ? sysfs_remove_link_from_group+0x70/0x70 23:46:15 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffe4}]) [ 1855.928483] ? lock_downgrade+0x720/0x720 [ 1855.928507] lo_ioctl+0xf7c/0x20e0 [ 1855.928527] ? loop_set_status64+0x110/0x110 [ 1855.928544] blkdev_ioctl+0x5cb/0x1a80 [ 1855.928558] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:46:15 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x18}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1855.928571] ? blkpg_ioctl+0x9d0/0x9d0 [ 1855.928587] ? mark_held_locks+0xf0/0xf0 [ 1855.928601] ? mark_held_locks+0xf0/0xf0 [ 1855.928617] ? debug_check_no_obj_freed+0x201/0x490 [ 1855.928634] ? lock_downgrade+0x720/0x720 [ 1855.928655] block_ioctl+0xe9/0x130 [ 1855.928668] ? blkdev_fallocate+0x3f0/0x3f0 [ 1855.928683] do_vfs_ioctl+0xcdb/0x12e0 [ 1855.928698] ? lock_downgrade+0x720/0x720 [ 1855.928712] ? check_preemption_disabled+0x41/0x280 [ 1855.928726] ? ioctl_preallocate+0x200/0x200 [ 1855.928742] ? __fget+0x356/0x510 [ 1855.928758] ? do_dup2+0x450/0x450 [ 1855.928772] ? do_sys_open+0x2bf/0x520 [ 1855.928793] ksys_ioctl+0x9b/0xc0 [ 1855.928809] __x64_sys_ioctl+0x6f/0xb0 [ 1855.928823] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1855.928836] do_syscall_64+0xf9/0x620 [ 1855.928855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1855.928866] RIP: 0033:0x7fa0bfb02ea7 [ 1855.928880] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1855.928887] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1855.928901] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1855.928909] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1855.928917] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1855.928926] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1855.928934] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1856.033156] BTRFS error (device loop5): superblock checksum mismatch [ 1856.033417] BTRFS error (device loop5): open_ctree failed [ 1856.036801] BTRFS error (device loop5): superblock checksum mismatch [ 1856.037274] BTRFS error (device loop5): open_ctree failed [ 1856.782346] IPVS: ftp: loaded support on port[0] = 21 23:46:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 15) 23:46:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x790b0200}]) 23:46:16 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa}, 0x0) unshare(0x0) 23:46:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff0}]) 23:46:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:16 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x39}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1858.088843] IPVS: ftp: loaded support on port[0] = 21 23:46:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe4ffffff}]) 23:46:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff4}]) [ 1858.101292] IPVS: ftp: loaded support on port[0] = 21 [ 1858.223236] FAULT_INJECTION: forcing a failure. [ 1858.223236] name failslab, interval 1, probability 0, space 0, times 0 23:46:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe7030000}]) 23:46:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff5}]) [ 1858.223334] CPU: 0 PID: 27176 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1858.223343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1858.223348] Call Trace: [ 1858.223368] dump_stack+0x1fc/0x2ef [ 1858.223389] should_fail.cold+0xa/0xf [ 1858.223407] ? setup_fault_attr+0x200/0x200 [ 1858.223423] ? lock_acquire+0x170/0x3c0 [ 1858.223445] __should_failslab+0x115/0x180 [ 1858.223462] should_failslab+0x5/0x10 23:46:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffff}]) 23:46:17 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffb}]) [ 1858.223475] kmem_cache_alloc+0x277/0x370 [ 1858.223495] __kernfs_new_node+0xd2/0x680 [ 1858.223514] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1858.223531] ? __mutex_unlock_slowpath+0xea/0x610 [ 1858.223547] ? wait_for_completion_io+0x10/0x10 [ 1858.223564] ? kernfs_next_descendant_post+0x19c/0x290 [ 1858.223585] kernfs_new_node+0x92/0x120 [ 1858.223605] __kernfs_create_file+0x51/0x340 [ 1858.223625] sysfs_add_file_mode_ns+0x226/0x540 [ 1858.223645] internal_create_group+0x355/0xb20 [ 1858.223664] ? sysfs_remove_link_from_group+0x70/0x70 [ 1858.223677] ? lock_downgrade+0x720/0x720 [ 1858.223702] lo_ioctl+0xf7c/0x20e0 [ 1858.223720] ? loop_set_status64+0x110/0x110 [ 1858.223736] blkdev_ioctl+0x5cb/0x1a80 [ 1858.223756] ? blkpg_ioctl+0x9d0/0x9d0 [ 1858.223775] ? mark_held_locks+0xf0/0xf0 [ 1858.223793] ? lock_downgrade+0x720/0x720 [ 1858.223808] ? lock_acquire+0x170/0x3c0 [ 1858.223821] ? finish_task_switch+0x118/0x760 [ 1858.223835] ? _raw_spin_unlock_irq+0x24/0x80 [ 1858.223852] block_ioctl+0xe9/0x130 [ 1858.223863] ? blkdev_fallocate+0x3f0/0x3f0 [ 1858.223878] do_vfs_ioctl+0xcdb/0x12e0 [ 1858.223893] ? lock_downgrade+0x720/0x720 [ 1858.223908] ? check_preemption_disabled+0x41/0x280 [ 1858.223922] ? ioctl_preallocate+0x200/0x200 [ 1858.223941] ? __fget+0x356/0x510 [ 1858.223957] ? do_dup2+0x450/0x450 [ 1858.223981] ksys_ioctl+0x9b/0xc0 [ 1858.223997] __x64_sys_ioctl+0x6f/0xb0 [ 1858.224012] do_syscall_64+0xf9/0x620 [ 1858.224029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1858.224040] RIP: 0033:0x7fa0bfb02ea7 [ 1858.224054] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1858.224062] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1858.224076] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1858.224084] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1858.224093] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1858.224101] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1858.224109] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1858.264931] BTRFS error (device loop5): superblock checksum mismatch [ 1858.265653] BTRFS error (device loop5): open_ctree failed [ 1858.391667] BTRFS error (device loop5): superblock checksum mismatch [ 1858.428618] BTRFS error (device loop5): open_ctree failed 23:46:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 16) 23:46:18 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf4ffffff}]) 23:46:18 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffe}]) 23:46:18 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xc}, 0x0) unshare(0x0) 23:46:18 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x4a}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:18 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf5ffffff}]) [ 1860.009055] IPVS: ftp: loaded support on port[0] = 21 [ 1860.018576] IPVS: ftp: loaded support on port[0] = 21 23:46:18 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000}]) [ 1860.072834] FAULT_INJECTION: forcing a failure. [ 1860.072834] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.072851] CPU: 1 PID: 27273 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:18 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffff000}]) [ 1860.072860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.072864] Call Trace: [ 1860.072882] dump_stack+0x1fc/0x2ef [ 1860.072903] should_fail.cold+0xa/0xf [ 1860.072920] ? setup_fault_attr+0x200/0x200 23:46:18 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfbffffff}]) [ 1860.072936] ? lock_acquire+0x170/0x3c0 [ 1860.072956] __should_failslab+0x115/0x180 [ 1860.072973] should_failslab+0x5/0x10 23:46:18 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0a2226b000}]) [ 1860.072985] kmem_cache_alloc+0x277/0x370 [ 1860.073004] __kernfs_new_node+0xd2/0x680 [ 1860.073020] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1860.073036] ? __mutex_unlock_slowpath+0xea/0x610 23:46:18 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd810000}]) [ 1860.073051] ? wait_for_completion_io+0x10/0x10 [ 1860.073071] ? kernfs_next_descendant_post+0x19c/0x290 [ 1860.073093] kernfs_new_node+0x92/0x120 [ 1860.073111] __kernfs_create_file+0x51/0x340 [ 1860.073131] sysfs_add_file_mode_ns+0x226/0x540 [ 1860.073150] internal_create_group+0x355/0xb20 [ 1860.073170] ? sysfs_remove_link_from_group+0x70/0x70 [ 1860.073183] ? lock_downgrade+0x720/0x720 [ 1860.073206] lo_ioctl+0xf7c/0x20e0 [ 1860.073225] ? loop_set_status64+0x110/0x110 [ 1860.073241] blkdev_ioctl+0x5cb/0x1a80 [ 1860.073256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1860.073268] ? blkpg_ioctl+0x9d0/0x9d0 [ 1860.073282] ? mark_held_locks+0xf0/0xf0 [ 1860.073296] ? mark_held_locks+0xf0/0xf0 [ 1860.073313] ? debug_check_no_obj_freed+0x201/0x490 [ 1860.073331] ? lock_downgrade+0x720/0x720 [ 1860.073346] block_ioctl+0xe9/0x130 [ 1860.073357] ? blkdev_fallocate+0x3f0/0x3f0 [ 1860.073372] do_vfs_ioctl+0xcdb/0x12e0 [ 1860.073385] ? lock_downgrade+0x720/0x720 [ 1860.073400] ? check_preemption_disabled+0x41/0x280 [ 1860.073412] ? ioctl_preallocate+0x200/0x200 [ 1860.073428] ? __fget+0x356/0x510 [ 1860.073443] ? do_dup2+0x450/0x450 [ 1860.073457] ? do_sys_open+0x2bf/0x520 [ 1860.073476] ksys_ioctl+0x9b/0xc0 [ 1860.073491] __x64_sys_ioctl+0x6f/0xb0 [ 1860.073505] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1860.073518] do_syscall_64+0xf9/0x620 [ 1860.073535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1860.073546] RIP: 0033:0x7fa0bfb02ea7 [ 1860.073569] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1860.073577] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.073591] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1860.073599] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1860.073607] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1860.073614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1860.073623] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1860.086040] BTRFS error (device loop5): superblock checksum mismatch [ 1860.090800] BTRFS error (device loop5): open_ctree failed [ 1860.105719] BTRFS error (device loop5): superblock checksum mismatch [ 1860.106214] BTRFS error (device loop5): open_ctree failed 23:46:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 17) 23:46:20 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0a2246b000}]) 23:46:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe010000}]) 23:46:20 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xe}, 0x0) unshare(0x0) 23:46:20 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x60}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1861.823556] IPVS: ftp: loaded support on port[0] = 21 [ 1861.837714] IPVS: ftp: loaded support on port[0] = 21 23:46:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfeffffff}]) 23:46:20 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7fffffffefff}]) 23:46:20 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800800000000}]) 23:46:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff010000}]) [ 1861.884472] FAULT_INJECTION: forcing a failure. [ 1861.884472] name failslab, interval 1, probability 0, space 0, times 0 23:46:20 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000000000}]) [ 1861.884541] CPU: 0 PID: 27365 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1861.884550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1861.884555] Call Trace: [ 1861.884574] dump_stack+0x1fc/0x2ef [ 1861.884594] should_fail.cold+0xa/0xf [ 1861.884613] ? setup_fault_attr+0x200/0x200 [ 1861.884628] ? lock_acquire+0x170/0x3c0 [ 1861.884649] __should_failslab+0x115/0x180 [ 1861.884668] should_failslab+0x5/0x10 23:46:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f0000}]) [ 1861.884682] kmem_cache_alloc+0x277/0x370 [ 1861.884700] __kernfs_new_node+0xd2/0x680 [ 1861.884717] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1861.884736] ? mark_held_locks+0xa6/0xf0 [ 1861.884749] ? io_schedule_timeout+0x140/0x140 [ 1861.884763] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1861.884779] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1861.884793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1861.884815] kernfs_new_node+0x92/0x120 [ 1861.884834] __kernfs_create_file+0x51/0x340 [ 1861.884854] sysfs_add_file_mode_ns+0x226/0x540 [ 1861.884881] internal_create_group+0x355/0xb20 [ 1861.884903] ? sysfs_remove_link_from_group+0x70/0x70 [ 1861.884917] ? lock_downgrade+0x720/0x720 [ 1861.884944] lo_ioctl+0xf7c/0x20e0 [ 1861.884965] ? loop_set_status64+0x110/0x110 [ 1861.884981] blkdev_ioctl+0x5cb/0x1a80 [ 1861.884995] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1861.885008] ? blkpg_ioctl+0x9d0/0x9d0 [ 1861.885028] ? retint_kernel+0x2d/0x2d [ 1861.885047] ? do_vfs_ioctl+0xbd/0x12e0 [ 1861.885063] block_ioctl+0xe9/0x130 [ 1861.885075] ? blkdev_fallocate+0x3f0/0x3f0 [ 1861.885089] do_vfs_ioctl+0xcdb/0x12e0 [ 1861.885105] ? lock_downgrade+0x720/0x720 [ 1861.885120] ? check_preemption_disabled+0x41/0x280 [ 1861.885135] ? ioctl_preallocate+0x200/0x200 [ 1861.885151] ? __fget+0x356/0x510 [ 1861.885167] ? do_dup2+0x450/0x450 [ 1861.885182] ? do_sys_open+0x2bf/0x520 [ 1861.885203] ksys_ioctl+0x9b/0xc0 [ 1861.885219] __x64_sys_ioctl+0x6f/0xb0 [ 1861.885233] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1861.885246] do_syscall_64+0xf9/0x620 [ 1861.885265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1861.885276] RIP: 0033:0x7fa0bfb02ea7 [ 1861.885291] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1861.885298] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.885311] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1861.885319] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1861.885327] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1861.885335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1861.885343] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1861.941706] BTRFS error (device loop5): superblock checksum mismatch [ 1861.945626] BTRFS error (device loop5): open_ctree failed [ 1862.044128] BTRFS error (device loop5): superblock checksum mismatch [ 1862.092994] BTRFS error (device loop5): open_ctree failed 23:46:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 18) 23:46:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000000}]) 23:46:22 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x86}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff5f0100}]) 23:46:22 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x10}, 0x0) unshare(0x0) 23:46:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1863.672595] IPVS: ftp: loaded support on port[0] = 21 [ 1863.677751] IPVS: ftp: loaded support on port[0] = 21 23:46:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7000000000000}]) 23:46:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffe4}]) [ 1863.778630] FAULT_INJECTION: forcing a failure. [ 1863.778630] name failslab, interval 1, probability 0, space 0, times 0 23:46:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10000000000000}]) [ 1863.778648] CPU: 1 PID: 27464 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff0}]) [ 1863.778656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.778661] Call Trace: [ 1863.778679] dump_stack+0x1fc/0x2ef [ 1863.778699] should_fail.cold+0xa/0xf [ 1863.778717] ? setup_fault_attr+0x200/0x200 [ 1863.778732] ? lock_acquire+0x170/0x3c0 [ 1863.778754] __should_failslab+0x115/0x180 [ 1863.778770] should_failslab+0x5/0x10 [ 1863.778792] kmem_cache_alloc+0x277/0x370 [ 1863.778811] __kernfs_new_node+0xd2/0x680 [ 1863.778830] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1863.778848] ? __mutex_unlock_slowpath+0xea/0x610 [ 1863.778864] ? wait_for_completion_io+0x10/0x10 23:46:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10002000000000}]) [ 1863.778880] ? kernfs_next_descendant_post+0x19c/0x290 23:46:22 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xdc}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1863.778900] kernfs_new_node+0x92/0x120 [ 1863.778918] __kernfs_create_file+0x51/0x340 [ 1863.778937] sysfs_add_file_mode_ns+0x226/0x540 [ 1863.778956] internal_create_group+0x355/0xb20 [ 1863.778975] ? sysfs_remove_link_from_group+0x70/0x70 [ 1863.778989] ? lock_downgrade+0x720/0x720 [ 1863.779014] lo_ioctl+0xf7c/0x20e0 [ 1863.779032] ? loop_set_status64+0x110/0x110 [ 1863.779049] blkdev_ioctl+0x5cb/0x1a80 [ 1863.779063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1863.779076] ? blkpg_ioctl+0x9d0/0x9d0 [ 1863.779090] ? mark_held_locks+0xf0/0xf0 [ 1863.779105] ? mark_held_locks+0xf0/0xf0 [ 1863.779122] ? debug_check_no_obj_freed+0x201/0x490 [ 1863.779139] ? lock_downgrade+0x720/0x720 [ 1863.779155] block_ioctl+0xe9/0x130 [ 1863.779166] ? blkdev_fallocate+0x3f0/0x3f0 [ 1863.779180] do_vfs_ioctl+0xcdb/0x12e0 [ 1863.779196] ? lock_downgrade+0x720/0x720 [ 1863.779211] ? check_preemption_disabled+0x41/0x280 [ 1863.779225] ? ioctl_preallocate+0x200/0x200 [ 1863.779242] ? __fget+0x356/0x510 [ 1863.779258] ? do_dup2+0x450/0x450 [ 1863.779272] ? do_sys_open+0x2bf/0x520 [ 1863.779293] ksys_ioctl+0x9b/0xc0 [ 1863.779309] __x64_sys_ioctl+0x6f/0xb0 [ 1863.779323] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1863.779336] do_syscall_64+0xf9/0x620 [ 1863.779357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1863.779369] RIP: 0033:0x7fa0bfb02ea7 [ 1863.779384] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1863.779392] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.779405] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1863.779413] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1863.779421] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1863.779428] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1863.779436] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1863.846347] BTRFS error (device loop5): superblock checksum mismatch [ 1863.850616] BTRFS error (device loop5): open_ctree failed [ 1864.040917] BTRFS error (device loop5): superblock checksum mismatch [ 1864.091671] BTRFS error (device loop5): open_ctree failed [ 1864.426063] IPVS: ftp: loaded support on port[0] = 21 23:46:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 19) 23:46:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff4}]) 23:46:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x80000000000000}]) 23:46:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:24 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x60}, 0x0) unshare(0x0) 23:46:24 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xf0}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x90000000000000}]) 23:46:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffff5}]) [ 1865.750647] IPVS: ftp: loaded support on port[0] = 21 [ 1865.751510] IPVS: ftp: loaded support on port[0] = 21 [ 1865.819223] FAULT_INJECTION: forcing a failure. [ 1865.819223] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.819241] CPU: 1 PID: 27591 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb026220a7f0000}]) 23:46:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffb}]) [ 1865.819250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.819260] Call Trace: [ 1865.819282] dump_stack+0x1fc/0x2ef [ 1865.819301] should_fail.cold+0xa/0xf [ 1865.819321] ? setup_fault_attr+0x200/0x200 23:46:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb046220a7f0000}]) [ 1865.819336] ? lock_acquire+0x170/0x3c0 [ 1865.819357] ? dev_uevent_filter+0xd0/0xd0 [ 1865.819369] __should_failslab+0x115/0x180 [ 1865.819385] should_failslab+0x5/0x10 23:46:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffe}]) [ 1865.819397] kmem_cache_alloc_trace+0x284/0x380 [ 1865.819412] ? dev_uevent_filter+0xd0/0xd0 [ 1865.819427] kobject_uevent_env+0x236/0x1480 [ 1865.819451] lo_ioctl+0xff9/0x20e0 [ 1865.819470] ? loop_set_status64+0x110/0x110 [ 1865.819485] blkdev_ioctl+0x5cb/0x1a80 [ 1865.819500] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1865.819513] ? blkpg_ioctl+0x9d0/0x9d0 [ 1865.819528] ? mark_held_locks+0xf0/0xf0 [ 1865.819543] ? mark_held_locks+0xf0/0xf0 [ 1865.819560] ? debug_check_no_obj_freed+0x201/0x490 [ 1865.819577] ? lock_downgrade+0x720/0x720 [ 1865.819592] block_ioctl+0xe9/0x130 [ 1865.819603] ? blkdev_fallocate+0x3f0/0x3f0 [ 1865.819616] do_vfs_ioctl+0xcdb/0x12e0 [ 1865.819630] ? lock_downgrade+0x720/0x720 23:46:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 20) 23:46:25 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfc}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:25 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf0}, 0x0) unshare(0x0) [ 1865.819643] ? check_preemption_disabled+0x41/0x280 [ 1865.819662] ? ioctl_preallocate+0x200/0x200 [ 1865.819679] ? __fget+0x356/0x510 [ 1865.819696] ? do_dup2+0x450/0x450 [ 1865.819709] ? do_sys_open+0x2bf/0x520 [ 1865.819728] ksys_ioctl+0x9b/0xc0 [ 1865.819743] __x64_sys_ioctl+0x6f/0xb0 [ 1865.819758] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1865.819771] do_syscall_64+0xf9/0x620 [ 1865.819788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1865.819799] RIP: 0033:0x7fa0bfb02ea7 [ 1865.819813] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1865.819819] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1865.819831] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1865.819839] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1865.819846] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1865.819854] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1865.819860] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1865.889533] BTRFS error (device loop5): superblock checksum mismatch [ 1865.890144] BTRFS error (device loop5): open_ctree failed [ 1866.069233] BTRFS error (device loop0): superblock checksum mismatch [ 1866.075542] BTRFS error (device loop0): open_ctree failed [ 1866.673960] IPVS: ftp: loaded support on port[0] = 21 [ 1866.697786] IPVS: ftp: loaded support on port[0] = 21 [ 1866.777861] FAULT_INJECTION: forcing a failure. [ 1866.777861] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.777977] CPU: 0 PID: 27681 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1866.777986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.777991] Call Trace: [ 1866.778010] dump_stack+0x1fc/0x2ef [ 1866.778030] should_fail.cold+0xa/0xf [ 1866.778048] ? setup_fault_attr+0x200/0x200 [ 1866.778064] ? lock_acquire+0x170/0x3c0 [ 1866.778085] ? dev_uevent_filter+0xd0/0xd0 [ 1866.778097] __should_failslab+0x115/0x180 [ 1866.778114] should_failslab+0x5/0x10 [ 1866.778129] kmem_cache_alloc_trace+0x284/0x380 [ 1866.778145] ? dev_uevent_filter+0xd0/0xd0 [ 1866.778160] kobject_uevent_env+0x236/0x1480 [ 1866.778185] lo_ioctl+0xff9/0x20e0 [ 1866.778204] ? loop_set_status64+0x110/0x110 [ 1866.778220] blkdev_ioctl+0x5cb/0x1a80 [ 1866.778233] ? finish_task_switch+0x118/0x760 [ 1866.778246] ? blkpg_ioctl+0x9d0/0x9d0 [ 1866.778263] ? mark_held_locks+0xf0/0xf0 [ 1866.778274] ? __schedule+0x88f/0x2040 [ 1866.778293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1866.778310] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1866.778324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1866.778340] block_ioctl+0xe9/0x130 [ 1866.778350] ? blkdev_fallocate+0x3f0/0x3f0 [ 1866.778365] do_vfs_ioctl+0xcdb/0x12e0 [ 1866.778380] ? lock_downgrade+0x720/0x720 [ 1866.778395] ? check_preemption_disabled+0x41/0x280 [ 1866.778410] ? ioctl_preallocate+0x200/0x200 [ 1866.778428] ? __fget+0x356/0x510 [ 1866.778444] ? do_dup2+0x450/0x450 [ 1866.778458] ? do_sys_open+0x2bf/0x520 [ 1866.778479] ksys_ioctl+0x9b/0xc0 [ 1866.778495] __x64_sys_ioctl+0x6f/0xb0 [ 1866.778510] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1866.778523] do_syscall_64+0xf9/0x620 [ 1866.778541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1866.778553] RIP: 0033:0x7fa0bfb02ea7 [ 1866.778567] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1866.778574] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1866.778588] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1866.778596] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1866.778604] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1866.778611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1866.778619] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c 23:46:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6010000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff1f00000000}]) 23:46:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000}]) 23:46:26 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x600}, 0x0) unshare(0x0) 23:46:26 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x14e}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 21) [ 1868.396698] IPVS: ftp: loaded support on port[0] = 21 [ 1868.417483] IPVS: ftp: loaded support on port[0] = 21 23:46:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffff0f0000}]) 23:46:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffff000}]) [ 1868.446860] FAULT_INJECTION: forcing a failure. [ 1868.446860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1868.446878] CPU: 1 PID: 27738 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1868.446886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1868.446891] Call Trace: [ 1868.446911] dump_stack+0x1fc/0x2ef [ 1868.446932] should_fail.cold+0xa/0xf [ 1868.446951] ? setup_fault_attr+0x200/0x200 [ 1868.446968] ? lock_acquire+0x170/0x3c0 [ 1868.446983] ? kernfs_activate+0x2c/0x1d0 [ 1868.447002] __alloc_pages_nodemask+0x239/0x2890 [ 1868.447016] ? __mutex_lock+0x368/0x1190 [ 1868.447031] ? kernfs_add_one+0x36a/0x4c0 [ 1868.447051] ? __lock_acquire+0x6de/0x3ff0 [ 1868.447072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1868.447087] ? __mutex_unlock_slowpath+0xea/0x610 [ 1868.447108] ? kernfs_next_descendant_post+0x19c/0x290 [ 1868.447136] ? kernfs_add_one+0x124/0x4c0 [ 1868.447159] cache_grow_begin+0xa4/0x8a0 [ 1868.447175] ? setup_fault_attr+0x200/0x200 [ 1868.447187] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1868.447204] cache_alloc_refill+0x273/0x340 [ 1868.447224] kmem_cache_alloc_trace+0x354/0x380 [ 1868.447241] ? dev_uevent_filter+0xd0/0xd0 [ 1868.447255] kobject_uevent_env+0x236/0x1480 [ 1868.447280] lo_ioctl+0xff9/0x20e0 [ 1868.447300] ? loop_set_status64+0x110/0x110 [ 1868.447316] blkdev_ioctl+0x5cb/0x1a80 [ 1868.447331] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1868.447344] ? blkpg_ioctl+0x9d0/0x9d0 [ 1868.447359] ? mark_held_locks+0xf0/0xf0 [ 1868.447374] ? mark_held_locks+0xf0/0xf0 [ 1868.447392] ? debug_check_no_obj_freed+0x201/0x490 [ 1868.447411] ? lock_downgrade+0x720/0x720 [ 1868.447427] block_ioctl+0xe9/0x130 [ 1868.447438] ? blkdev_fallocate+0x3f0/0x3f0 [ 1868.447453] do_vfs_ioctl+0xcdb/0x12e0 [ 1868.447468] ? lock_downgrade+0x720/0x720 [ 1868.447484] ? check_preemption_disabled+0x41/0x280 [ 1868.447498] ? ioctl_preallocate+0x200/0x200 [ 1868.447516] ? __fget+0x356/0x510 [ 1868.447533] ? do_dup2+0x450/0x450 [ 1868.447547] ? do_sys_open+0x2bf/0x520 [ 1868.447568] ksys_ioctl+0x9b/0xc0 [ 1868.447585] __x64_sys_ioctl+0x6f/0xb0 [ 1868.447599] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1868.447613] do_syscall_64+0xf9/0x620 [ 1868.447631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1868.447642] RIP: 0033:0x7fa0bfb02ea7 [ 1868.447657] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1868.447665] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1868.447679] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1868.447687] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1868.447695] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1868.447703] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1868.447711] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1868.516889] BTRFS error (device loop5): superblock checksum mismatch [ 1868.517801] BTRFS error (device loop5): open_ctree failed [ 1868.596621] BTRFS error (device loop5): superblock checksum mismatch 23:46:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100000000000000}]) 23:46:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0be4fe4000}]) [ 1868.950690] BTRFS error (device loop5): open_ctree failed 23:46:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x200000000000000}]) 23:46:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:27 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x166}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0be51e4000}]) 23:46:27 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa00}, 0x0) unshare(0x0) 23:46:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x300000000000000}]) [ 1869.397690] IPVS: ftp: loaded support on port[0] = 21 23:46:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0be5f5b000}]) [ 1869.586507] IPVS: ftp: loaded support on port[0] = 21 [ 1869.672630] BTRFS error (device loop0): superblock checksum mismatch [ 1869.686604] BTRFS error (device loop0): open_ctree failed 23:46:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 22) 23:46:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7fffffffefff}]) 23:46:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x400000000000000}]) 23:46:29 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x186}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:29 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa17}, 0x0) unshare(0x0) 23:46:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1870.717640] IPVS: ftp: loaded support on port[0] = 21 23:46:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x486000000000000}]) 23:46:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800800000000}]) [ 1870.767374] IPVS: ftp: loaded support on port[0] = 21 [ 1870.910997] FAULT_INJECTION: forcing a failure. [ 1870.910997] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.911205] CPU: 0 PID: 27912 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x500000000000000}]) [ 1870.911213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.911219] Call Trace: 23:46:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000000000}]) [ 1870.911238] dump_stack+0x1fc/0x2ef [ 1870.911258] should_fail.cold+0xa/0xf [ 1870.911277] ? setup_fault_attr+0x200/0x200 [ 1870.911293] ? lock_acquire+0x170/0x3c0 [ 1870.911313] __should_failslab+0x115/0x180 [ 1870.911330] should_failslab+0x5/0x10 [ 1870.911343] kmem_cache_alloc_node+0x245/0x3b0 [ 1870.911364] __alloc_skb+0x71/0x560 [ 1870.911384] alloc_uevent_skb+0x7b/0x210 [ 1870.911403] kobject_uevent_env+0xa90/0x1480 [ 1870.911428] lo_ioctl+0xff9/0x20e0 [ 1870.911446] ? loop_set_status64+0x110/0x110 [ 1870.911461] blkdev_ioctl+0x5cb/0x1a80 [ 1870.911476] ? lockdep_hardirqs_on+0x3a8/0x5c0 23:46:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x600000000000000}]) [ 1870.911488] ? blkpg_ioctl+0x9d0/0x9d0 [ 1870.911503] ? rcu_nmi_exit+0xb3/0x180 [ 1870.911518] ? retint_kernel+0x2d/0x2d [ 1870.911549] block_ioctl+0xe9/0x130 [ 1870.911562] ? blkdev_fallocate+0x3f0/0x3f0 23:46:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000000}]) [ 1870.911577] do_vfs_ioctl+0xcdb/0x12e0 [ 1870.911593] ? lock_downgrade+0x720/0x720 [ 1870.911607] ? check_preemption_disabled+0x41/0x280 [ 1870.911621] ? ioctl_preallocate+0x200/0x200 [ 1870.911639] ? __fget+0x356/0x510 [ 1870.911654] ? do_dup2+0x450/0x450 [ 1870.911666] ? do_sys_open+0x2bf/0x520 [ 1870.911685] ksys_ioctl+0x9b/0xc0 [ 1870.911700] __x64_sys_ioctl+0x6f/0xb0 [ 1870.911713] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1870.911726] do_syscall_64+0xf9/0x620 [ 1870.911743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1870.911754] RIP: 0033:0x7fa0bfb02ea7 [ 1870.911767] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1870.911775] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.911788] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1870.911795] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1870.911803] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1870.911811] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1870.911819] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1871.202950] BTRFS error (device loop5): superblock checksum mismatch [ 1871.204677] BTRFS error (device loop5): open_ctree failed [ 1871.227713] BTRFS error (device loop5): superblock checksum mismatch [ 1871.232691] BTRFS error (device loop5): open_ctree failed [ 1871.253909] audit: type=1800 audit(1650584789.683:282): pid=27962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16811 res=0 23:46:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 23) 23:46:30 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xc00}, 0x0) unshare(0x0) 23:46:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:30 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1a8}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:30 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x700000000000000}]) 23:46:30 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7000000000000}]) [ 1872.622166] IPVS: ftp: loaded support on port[0] = 21 [ 1872.633166] IPVS: ftp: loaded support on port[0] = 21 23:46:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800000000000000}]) 23:46:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10000000000000}]) [ 1872.692939] FAULT_INJECTION: forcing a failure. [ 1872.692939] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.692957] CPU: 1 PID: 28010 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1872.692965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x804000000000000}]) [ 1872.692970] Call Trace: [ 1872.692990] dump_stack+0x1fc/0x2ef 23:46:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x10002000000000}]) [ 1872.693010] should_fail.cold+0xa/0xf [ 1872.693028] ? setup_fault_attr+0x200/0x200 [ 1872.693043] ? lock_acquire+0x170/0x3c0 [ 1872.693064] __should_failslab+0x115/0x180 [ 1872.693082] should_failslab+0x5/0x10 [ 1872.693095] kmem_cache_alloc_node+0x245/0x3b0 [ 1872.693115] __alloc_skb+0x71/0x560 [ 1872.693136] alloc_uevent_skb+0x7b/0x210 [ 1872.693154] kobject_uevent_env+0xa90/0x1480 [ 1872.693182] lo_ioctl+0xff9/0x20e0 [ 1872.693201] ? loop_set_status64+0x110/0x110 [ 1872.693217] blkdev_ioctl+0x5cb/0x1a80 [ 1872.693233] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1872.693246] ? blkpg_ioctl+0x9d0/0x9d0 [ 1872.693261] ? mark_held_locks+0xf0/0xf0 [ 1872.693275] ? mark_held_locks+0xf0/0xf0 [ 1872.693293] ? debug_check_no_obj_freed+0x201/0x490 23:46:31 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xe00}, 0x0) unshare(0x0) [ 1872.693311] ? lock_downgrade+0x720/0x720 [ 1872.693327] block_ioctl+0xe9/0x130 [ 1872.693338] ? blkdev_fallocate+0x3f0/0x3f0 23:46:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x20000000000000}]) [ 1872.693353] do_vfs_ioctl+0xcdb/0x12e0 [ 1872.693368] ? lock_downgrade+0x720/0x720 [ 1872.693384] ? check_preemption_disabled+0x41/0x280 [ 1872.693398] ? ioctl_preallocate+0x200/0x200 [ 1872.693416] ? __fget+0x356/0x510 [ 1872.693433] ? do_dup2+0x450/0x450 [ 1872.693447] ? do_sys_open+0x2bf/0x520 23:46:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 24) 23:46:31 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x214}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1872.693468] ksys_ioctl+0x9b/0xc0 [ 1872.693485] __x64_sys_ioctl+0x6f/0xb0 [ 1872.693499] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1872.693513] do_syscall_64+0xf9/0x620 [ 1872.693531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1872.693542] RIP: 0033:0x7fa0bfb02ea7 [ 1872.693555] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1872.693563] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1872.693576] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1872.693584] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1872.693592] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1872.693599] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1872.693607] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1872.785086] BTRFS error (device loop5): superblock checksum mismatch [ 1872.786182] BTRFS error (device loop5): open_ctree failed [ 1872.798553] BTRFS error (device loop5): superblock checksum mismatch [ 1872.837007] BTRFS error (device loop5): open_ctree failed [ 1873.536148] IPVS: ftp: loaded support on port[0] = 21 [ 1873.619947] IPVS: ftp: loaded support on port[0] = 21 [ 1873.778050] FAULT_INJECTION: forcing a failure. [ 1873.778050] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.778267] CPU: 0 PID: 28094 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1873.778278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.778282] Call Trace: [ 1873.778303] dump_stack+0x1fc/0x2ef [ 1873.778323] should_fail.cold+0xa/0xf [ 1873.778342] ? setup_fault_attr+0x200/0x200 [ 1873.778358] ? lock_acquire+0x170/0x3c0 [ 1873.778378] __should_failslab+0x115/0x180 [ 1873.778393] should_failslab+0x5/0x10 [ 1873.778408] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1873.778427] __kmalloc_node_track_caller+0x38/0x70 [ 1873.778445] __alloc_skb+0xae/0x560 [ 1873.778466] alloc_uevent_skb+0x7b/0x210 [ 1873.778485] kobject_uevent_env+0xa90/0x1480 [ 1873.778511] lo_ioctl+0xff9/0x20e0 [ 1873.778531] ? loop_set_status64+0x110/0x110 [ 1873.778546] blkdev_ioctl+0x5cb/0x1a80 [ 1873.778559] ? finish_task_switch+0x118/0x760 [ 1873.778572] ? blkpg_ioctl+0x9d0/0x9d0 [ 1873.778600] ? mark_held_locks+0xf0/0xf0 [ 1873.778613] ? __schedule+0x88f/0x2040 [ 1873.778632] ? io_schedule_timeout+0x140/0x140 [ 1873.778648] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1873.778665] block_ioctl+0xe9/0x130 [ 1873.778677] ? blkdev_fallocate+0x3f0/0x3f0 [ 1873.778691] do_vfs_ioctl+0xcdb/0x12e0 [ 1873.778709] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1873.778722] ? ioctl_preallocate+0x200/0x200 [ 1873.778739] ? rcu_nmi_exit+0xb3/0x180 [ 1873.778755] ? retint_kernel+0x2d/0x2d [ 1873.778778] ? security_file_ioctl+0x22/0xb0 [ 1873.778792] ? security_file_ioctl+0x29/0xb0 [ 1873.778811] ksys_ioctl+0x9b/0xc0 [ 1873.778827] __x64_sys_ioctl+0x6f/0xb0 [ 1873.778841] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1873.778854] do_syscall_64+0xf9/0x620 [ 1873.778873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1873.778885] RIP: 0033:0x7fa0bfb02ea7 [ 1873.778899] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1873.778906] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.778920] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1873.778928] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1873.778936] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1873.778943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1873.778951] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c 23:46:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:33 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900000000000000}]) 23:46:33 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x30000000000000}]) 23:46:33 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x170a}, 0x0) unshare(0x0) 23:46:33 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x23e}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 25) [ 1875.327886] IPVS: ftp: loaded support on port[0] = 21 [ 1875.329996] IPVS: ftp: loaded support on port[0] = 21 23:46:33 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x401ee50b7f0000}]) 23:46:33 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa00000000000000}]) [ 1875.420611] FAULT_INJECTION: forcing a failure. [ 1875.420611] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.420958] CPU: 0 PID: 28169 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1875.420968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1875.420973] Call Trace: [ 1875.420993] dump_stack+0x1fc/0x2ef 23:46:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x40fee40b7f0000}]) [ 1875.421014] should_fail.cold+0xa/0xf [ 1875.421033] ? setup_fault_attr+0x200/0x200 [ 1875.421050] ? lock_acquire+0x170/0x3c0 [ 1875.421071] __should_failslab+0x115/0x180 [ 1875.421090] should_failslab+0x5/0x10 [ 1875.421103] kmem_cache_alloc+0x277/0x370 23:46:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb00000000000000}]) [ 1875.421119] skb_clone+0x151/0x3d0 [ 1875.421137] netlink_broadcast_filtered+0x8e5/0xbc0 [ 1875.421159] netlink_broadcast+0x35/0x40 [ 1875.421178] kobject_uevent_env+0xa56/0x1480 [ 1875.421201] lo_ioctl+0xff9/0x20e0 [ 1875.421220] ? loop_set_status64+0x110/0x110 [ 1875.421236] blkdev_ioctl+0x5cb/0x1a80 23:46:34 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x264}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1875.421251] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1875.421264] ? blkpg_ioctl+0x9d0/0x9d0 [ 1875.421279] ? mark_held_locks+0xf0/0xf0 [ 1875.421294] ? mark_held_locks+0xf0/0xf0 [ 1875.421313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1875.421330] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1875.421344] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1875.421357] block_ioctl+0xe9/0x130 [ 1875.421367] ? blkdev_fallocate+0x3f0/0x3f0 [ 1875.421382] do_vfs_ioctl+0xcdb/0x12e0 [ 1875.421396] ? lock_downgrade+0x720/0x720 [ 1875.421409] ? ioctl_preallocate+0x200/0x200 [ 1875.421424] ? __fget+0x356/0x510 [ 1875.421437] ? do_dup2+0x450/0x450 [ 1875.421450] ? do_sys_open+0x2bf/0x520 23:46:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc00000000000000}]) [ 1875.421467] ksys_ioctl+0x9b/0xc0 [ 1875.421480] __x64_sys_ioctl+0x6f/0xb0 [ 1875.421492] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1875.421504] do_syscall_64+0xf9/0x620 23:46:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x60000000000000}]) [ 1875.421527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1875.421538] RIP: 0033:0x7fa0bfb02ea7 [ 1875.421552] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1875.421558] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1875.421573] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1875.421582] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1875.421589] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1875.421595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1875.421601] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1875.535627] BTRFS error (device loop5): superblock checksum mismatch [ 1875.536371] BTRFS error (device loop5): open_ctree failed [ 1875.683943] BTRFS error (device loop5): superblock checksum mismatch [ 1875.734398] BTRFS error (device loop5): open_ctree failed [ 1876.238707] IPVS: ftp: loaded support on port[0] = 21 23:46:34 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x5865}, 0x0) unshare(0x0) 23:46:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd00000000000000}]) 23:46:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x80000000000000}]) [ 1876.619027] IPVS: ftp: loaded support on port[0] = 21 [ 1876.787886] BTRFS error (device loop0): superblock checksum mismatch [ 1876.793965] BTRFS error (device loop0): open_ctree failed 23:46:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 26) 23:46:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe00000000000000}]) 23:46:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x90000000000000}]) 23:46:36 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x2c4}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:36 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6000}, 0x0) unshare(0x0) 23:46:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1878.022188] IPVS: ftp: loaded support on port[0] = 21 23:46:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf00000000000000}]) [ 1878.045435] IPVS: ftp: loaded support on port[0] = 21 23:46:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb0f5e50b7f0000}]) [ 1878.099880] FAULT_INJECTION: forcing a failure. [ 1878.099880] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.099899] CPU: 1 PID: 28330 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1878.099908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1878.099912] Call Trace: [ 1878.099932] dump_stack+0x1fc/0x2ef [ 1878.099953] should_fail.cold+0xa/0xf [ 1878.099970] ? setup_fault_attr+0x200/0x200 [ 1878.099985] ? lock_acquire+0x170/0x3c0 [ 1878.100005] __should_failslab+0x115/0x180 [ 1878.100022] should_failslab+0x5/0x10 23:46:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000000000000}]) 23:46:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ff1f00000000}]) [ 1878.100036] kmem_cache_alloc_trace+0x284/0x380 [ 1878.100048] ? wait_for_completion_io+0x10/0x10 [ 1878.100063] ? kobj_ns_initial+0x90/0x90 [ 1878.100078] call_usermodehelper_setup+0x84/0x300 [ 1878.100097] kobject_uevent_env+0xe83/0x1480 [ 1878.100122] lo_ioctl+0xff9/0x20e0 [ 1878.100140] ? loop_set_status64+0x110/0x110 [ 1878.100155] blkdev_ioctl+0x5cb/0x1a80 23:46:37 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x300}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1878.100169] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1878.100182] ? blkpg_ioctl+0x9d0/0x9d0 [ 1878.100197] ? mark_held_locks+0xf0/0xf0 [ 1878.100213] ? mark_held_locks+0xf0/0xf0 23:46:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1100000000000000}]) [ 1878.100231] ? debug_check_no_obj_freed+0x201/0x490 [ 1878.100249] ? lock_downgrade+0x720/0x720 [ 1878.100263] block_ioctl+0xe9/0x130 [ 1878.100274] ? blkdev_fallocate+0x3f0/0x3f0 [ 1878.100288] do_vfs_ioctl+0xcdb/0x12e0 [ 1878.100303] ? lock_downgrade+0x720/0x720 [ 1878.100318] ? check_preemption_disabled+0x41/0x280 [ 1878.100331] ? ioctl_preallocate+0x200/0x200 [ 1878.100348] ? __fget+0x356/0x510 [ 1878.100364] ? do_dup2+0x450/0x450 [ 1878.100379] ? do_sys_open+0x2bf/0x520 [ 1878.100399] ksys_ioctl+0x9b/0xc0 [ 1878.100414] __x64_sys_ioctl+0x6f/0xb0 [ 1878.100428] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1878.100441] do_syscall_64+0xf9/0x620 [ 1878.100458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1878.100469] RIP: 0033:0x7fa0bfb02ea7 [ 1878.100484] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1878.100491] RSP: 002b:00007fa0be456f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.100505] RAX: ffffffffffffffda RBX: 00007fa0bfb4ca20 RCX: 00007fa0bfb02ea7 [ 1878.100513] RDX: 000000000000000e RSI: 0000000000004c00 RDI: 000000000000000f [ 1878.100522] RBP: 000000000000000f R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1878.100530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1878.100537] R13: 000000000000000e R14: 0000000020000320 R15: 000000000000000c [ 1878.317618] BTRFS error (device loop5): superblock checksum mismatch [ 1878.326110] BTRFS error (device loop5): open_ctree failed [ 1878.389134] BTRFS error (device loop5): superblock checksum mismatch [ 1878.426149] BTRFS error (device loop5): open_ctree failed [ 1878.960224] IPVS: ftp: loaded support on port[0] = 21 23:46:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 27) 23:46:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:38 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6558}, 0x0) unshare(0x0) 23:46:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffff0f0000}]) 23:46:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1200000000000000}]) 23:46:38 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x30a}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1879.885719] IPVS: ftp: loaded support on port[0] = 21 23:46:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x100000000000000}]) 23:46:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1300000000000000}]) [ 1879.920048] IPVS: ftp: loaded support on port[0] = 21 [ 1879.970488] FAULT_INJECTION: forcing a failure. [ 1879.970488] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.970508] CPU: 1 PID: 28460 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1879.970516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1879.970521] Call Trace: [ 1879.970542] dump_stack+0x1fc/0x2ef [ 1879.970563] should_fail.cold+0xa/0xf [ 1879.970581] ? setup_fault_attr+0x200/0x200 23:46:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x200000000000000}]) [ 1879.970598] ? lock_acquire+0x170/0x3c0 [ 1879.970621] __should_failslab+0x115/0x180 23:46:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1400000000000000}]) [ 1879.970638] should_failslab+0x5/0x10 [ 1879.970652] kmem_cache_alloc+0x277/0x370 [ 1879.970669] getname_flags+0xce/0x590 [ 1879.970683] do_mkdirat+0x8d/0x2d0 [ 1879.970697] ? __ia32_sys_mknod+0x120/0x120 [ 1879.970712] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1879.970729] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1879.970742] ? do_syscall_64+0x21/0x620 [ 1879.970758] do_syscall_64+0xf9/0x620 [ 1879.970775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1879.970786] RIP: 0033:0x7fa0bfb021f7 [ 1879.970798] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:46:39 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x8100}, 0x0) unshare(0x0) 23:46:39 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x300000000000000}]) [ 1879.970806] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1879.970819] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 23:46:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 28) [ 1879.970826] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1879.970834] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1879.970841] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1879.970848] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1880.193843] BTRFS error (device loop0): superblock checksum mismatch [ 1880.216374] BTRFS error (device loop0): open_ctree failed [ 1880.840299] IPVS: ftp: loaded support on port[0] = 21 [ 1880.945518] FAULT_INJECTION: forcing a failure. [ 1880.945518] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.945552] CPU: 1 PID: 28547 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1880.945561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.945565] Call Trace: [ 1880.945585] dump_stack+0x1fc/0x2ef [ 1880.945605] should_fail.cold+0xa/0xf [ 1880.945625] ? setup_fault_attr+0x200/0x200 [ 1880.945647] __should_failslab+0x115/0x180 [ 1880.945664] should_failslab+0x5/0x10 [ 1880.945678] kmem_cache_alloc+0x277/0x370 [ 1880.945694] ? ext4_sync_fs+0x8d0/0x8d0 [ 1880.945708] ext4_alloc_inode+0x1a/0x630 [ 1880.945724] ? ext4_sync_fs+0x8d0/0x8d0 [ 1880.945737] alloc_inode+0x5d/0x180 [ 1880.945749] new_inode+0x1d/0xf0 [ 1880.945764] __ext4_new_inode+0x400/0x5a20 [ 1880.945791] ? putname+0xe1/0x120 [ 1880.945804] ? do_mkdirat+0xa0/0x2d0 [ 1880.945828] ? ext4_free_inode+0x1780/0x1780 [ 1880.945842] ? debug_check_no_obj_freed+0x201/0x490 [ 1880.945857] ? __dquot_initialize+0x298/0xb70 [ 1880.945877] ? lock_acquire+0x170/0x3c0 [ 1880.945894] ? dquot_initialize_needed+0x290/0x290 [ 1880.945912] ? trace_hardirqs_off+0x64/0x200 [ 1880.945929] ? common_perm+0x4be/0x800 [ 1880.945947] ext4_mkdir+0x396/0xe10 [ 1880.945964] ? putname+0xe1/0x120 [ 1880.945983] ? ext4_init_dot_dotdot+0x600/0x600 [ 1880.946006] ? generic_permission+0x116/0x4d0 [ 1880.946021] ? security_inode_permission+0xc5/0xf0 [ 1880.946039] ? inode_permission.part.0+0x10c/0x450 [ 1880.946058] vfs_mkdir+0x508/0x7a0 [ 1880.946075] do_mkdirat+0x262/0x2d0 [ 1880.946090] ? __ia32_sys_mknod+0x120/0x120 [ 1880.946108] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1880.946123] ? do_syscall_64+0x21/0x620 [ 1880.946140] do_syscall_64+0xf9/0x620 [ 1880.946158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.946170] RIP: 0033:0x7fa0bfb021f7 [ 1880.946183] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1880.946191] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1880.946204] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1880.946220] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1880.946229] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1880.946238] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1880.946246] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:46:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1a030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:40 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x328}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:40 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x400000000000000}]) 23:46:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1500000000000000}]) 23:46:40 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf000}, 0x0) unshare(0x0) 23:46:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 29) [ 1882.352892] IPVS: ftp: loaded support on port[0] = 21 [ 1882.390340] IPVS: ftp: loaded support on port[0] = 21 23:46:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1600000000000000}]) 23:46:40 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x500000000000000}]) [ 1882.421728] FAULT_INJECTION: forcing a failure. [ 1882.421728] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.421747] CPU: 1 PID: 28575 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1882.421758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1882.421763] Call Trace: [ 1882.421782] dump_stack+0x1fc/0x2ef [ 1882.421802] should_fail.cold+0xa/0xf [ 1882.421820] ? setup_fault_attr+0x200/0x200 [ 1882.421836] ? lock_acquire+0x170/0x3c0 [ 1882.421858] __should_failslab+0x115/0x180 [ 1882.421905] should_failslab+0x5/0x10 [ 1882.421919] kmem_cache_alloc+0x277/0x370 [ 1882.421936] __d_alloc+0x2b/0xa10 [ 1882.421953] d_alloc+0x4a/0x230 23:46:41 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x586000000000000}]) 23:46:41 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1800000000000000}]) [ 1882.421971] __lookup_hash+0xc8/0x180 [ 1882.421985] filename_create+0x186/0x490 [ 1882.421997] ? kern_path_mountpoint+0x40/0x40 23:46:41 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x336}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1882.422009] ? strncpy_from_user+0x2a2/0x350 [ 1882.422026] ? getname_flags+0x25b/0x590 [ 1882.422041] do_mkdirat+0xa0/0x2d0 23:46:41 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf0ffff}, 0x0) unshare(0x0) [ 1882.422054] ? __ia32_sys_mknod+0x120/0x120 [ 1882.422069] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1882.422083] ? do_syscall_64+0x21/0x620 [ 1882.422119] do_syscall_64+0xf9/0x620 [ 1882.422139] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1882.422151] RIP: 0033:0x7fa0bfb021f7 [ 1882.422164] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1882.422171] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1882.422193] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 23:46:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1f000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:41 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x600000000000000}]) 23:46:41 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1f00000000000000}]) [ 1882.422201] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1882.422209] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1882.422215] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1882.422221] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1882.516161] BTRFS error (device loop0): superblock checksum mismatch [ 1882.516687] BTRFS error (device loop0): open_ctree failed [ 1883.033538] IPVS: ftp: loaded support on port[0] = 21 [ 1883.078927] IPVS: ftp: loaded support on port[0] = 21 23:46:41 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x700000000000000}]) 23:46:41 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000000000}]) [ 1883.433397] BTRFS error (device loop0): superblock checksum mismatch [ 1883.434608] BTRFS error (device loop0): open_ctree failed 23:46:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 30) 23:46:42 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x360}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:42 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x1000000}, 0x0) unshare(0x0) 23:46:42 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x800000000000000}]) 23:46:42 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2300000000000000}]) 23:46:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1884.603447] IPVS: ftp: loaded support on port[0] = 21 [ 1884.632200] IPVS: ftp: loaded support on port[0] = 21 23:46:43 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x804000000000000}]) 23:46:43 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f00000000000000}]) [ 1884.713515] FAULT_INJECTION: forcing a failure. [ 1884.713515] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.713535] CPU: 1 PID: 28744 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1884.713543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:43 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x900000000000000}]) [ 1884.713548] Call Trace: [ 1884.713568] dump_stack+0x1fc/0x2ef [ 1884.713588] should_fail.cold+0xa/0xf [ 1884.713606] ? setup_fault_attr+0x200/0x200 [ 1884.713629] __should_failslab+0x115/0x180 [ 1884.713646] should_failslab+0x5/0x10 [ 1884.713660] kmem_cache_alloc+0x277/0x370 23:46:43 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000000000000000}]) [ 1884.713675] ? ext4_sync_fs+0x8d0/0x8d0 [ 1884.713691] ext4_alloc_inode+0x1a/0x630 [ 1884.713706] ? ext4_sync_fs+0x8d0/0x8d0 [ 1884.713720] alloc_inode+0x5d/0x180 [ 1884.713732] new_inode+0x1d/0xf0 [ 1884.713747] __ext4_new_inode+0x400/0x5a20 [ 1884.713766] ? putname+0xe1/0x120 [ 1884.713778] ? do_mkdirat+0xa0/0x2d0 [ 1884.713801] ? ext4_free_inode+0x1780/0x1780 23:46:43 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xa00000000000000}]) 23:46:43 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x377}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1884.713814] ? debug_check_no_obj_freed+0x201/0x490 [ 1884.713829] ? __dquot_initialize+0x298/0xb70 [ 1884.713847] ? lock_acquire+0x170/0x3c0 [ 1884.713865] ? dquot_initialize_needed+0x290/0x290 [ 1884.713882] ? trace_hardirqs_off+0x64/0x200 [ 1884.713900] ? common_perm+0x4be/0x800 [ 1884.713917] ext4_mkdir+0x396/0xe10 [ 1884.713934] ? putname+0xe1/0x120 [ 1884.713954] ? ext4_init_dot_dotdot+0x600/0x600 [ 1884.713970] ? generic_permission+0x116/0x4d0 [ 1884.713984] ? security_inode_permission+0xc5/0xf0 [ 1884.714002] ? inode_permission.part.0+0x10c/0x450 [ 1884.714019] vfs_mkdir+0x508/0x7a0 [ 1884.714035] do_mkdirat+0x262/0x2d0 [ 1884.714050] ? __ia32_sys_mknod+0x120/0x120 [ 1884.714067] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1884.714082] ? do_syscall_64+0x21/0x620 [ 1884.714099] do_syscall_64+0xf9/0x620 [ 1884.714118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1884.714132] RIP: 0033:0x7fa0bfb021f7 [ 1884.714145] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1884.714153] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1884.714166] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1884.714175] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1884.714183] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1884.714191] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1884.714199] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1884.829337] BTRFS error (device loop0): superblock checksum mismatch [ 1884.829852] BTRFS error (device loop0): open_ctree failed [ 1885.438617] IPVS: ftp: loaded support on port[0] = 21 23:46:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 31) 23:46:44 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x2000000}, 0x0) unshare(0x0) 23:46:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5a0b020000000000}]) 23:46:44 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xb00000000000000}]) 23:46:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20010000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:44 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3b6}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1886.448260] IPVS: ftp: loaded support on port[0] = 21 [ 1886.450979] IPVS: ftp: loaded support on port[0] = 21 23:46:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x770c020000000000}]) 23:46:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xc00000000000000}]) [ 1886.598850] FAULT_INJECTION: forcing a failure. [ 1886.598850] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.598956] CPU: 1 PID: 28869 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1886.598965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xd00000000000000}]) [ 1886.598970] Call Trace: [ 1886.598990] dump_stack+0x1fc/0x2ef [ 1886.599013] should_fail.cold+0xa/0xf [ 1886.599032] ? setup_fault_attr+0x200/0x200 [ 1886.599048] ? __lock_acquire+0x6de/0x3ff0 23:46:45 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x7f0c020000000000}]) [ 1886.599070] __should_failslab+0x115/0x180 [ 1886.599087] should_failslab+0x5/0x10 [ 1886.599100] __kmalloc+0x2ab/0x3c0 [ 1886.599113] ? ext4_find_extent+0x9bb/0xc70 [ 1886.599128] ext4_find_extent+0x9bb/0xc70 [ 1886.599150] ext4_ext_map_blocks+0x1c0/0x7390 [ 1886.599165] ? __lock_acquire+0x6de/0x3ff0 [ 1886.599184] ? __lock_acquire+0x6de/0x3ff0 23:46:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe00000000000000}]) [ 1886.599203] ? mark_held_locks+0xf0/0xf0 [ 1886.599217] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 1886.599230] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 1886.599243] ? mark_held_locks+0xf0/0xf0 23:46:45 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x810c020000000000}]) [ 1886.599258] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 1886.599276] ? ext4_es_lookup_extent+0x375/0xb60 [ 1886.599294] ? lock_downgrade+0x720/0x720 23:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 32) [ 1886.599307] ? lock_acquire+0x170/0x3c0 [ 1886.599322] ? check_preemption_disabled+0x41/0x280 [ 1886.599339] ? lock_acquire+0x170/0x3c0 [ 1886.599352] ? ext4_map_blocks+0x33e/0x1a50 [ 1886.599373] ext4_map_blocks+0xd88/0x1a50 [ 1886.599391] ? check_preemption_disabled+0x41/0x280 [ 1886.599408] ? ext4_issue_zeroout+0x160/0x160 23:46:45 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x4000000}, 0x0) unshare(0x0) 23:46:45 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x500}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:45 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x820c020000000000}]) [ 1886.599422] ? __brelse+0x84/0xa0 [ 1886.599436] ? __ext4_new_inode+0x2eb/0x5a20 [ 1886.599456] ext4_getblk+0xad/0x4f0 [ 1886.599472] ? ext4_iomap_begin+0xe00/0xe00 [ 1886.599488] ? ext4_free_inode+0x1780/0x1780 [ 1886.599500] ? debug_check_no_obj_freed+0x201/0x490 [ 1886.599514] ? __dquot_initialize+0x298/0xb70 [ 1886.599532] ext4_bread+0x7c/0x210 [ 1886.599546] ? ext4_getblk+0x4f0/0x4f0 [ 1886.599559] ? dquot_initialize_needed+0x290/0x290 [ 1886.599575] ? trace_hardirqs_off+0x64/0x200 [ 1886.599598] ext4_append+0x155/0x370 [ 1886.599617] ext4_mkdir+0x5bd/0xe10 [ 1886.599641] ? ext4_init_dot_dotdot+0x600/0x600 [ 1886.599658] ? generic_permission+0x116/0x4d0 [ 1886.599677] ? inode_permission.part.0+0x10c/0x450 [ 1886.599695] vfs_mkdir+0x508/0x7a0 [ 1886.599711] do_mkdirat+0x262/0x2d0 [ 1886.599726] ? __ia32_sys_mknod+0x120/0x120 [ 1886.599749] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1886.599764] ? do_syscall_64+0x21/0x620 [ 1886.599780] do_syscall_64+0xf9/0x620 [ 1886.599799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1886.599812] RIP: 0033:0x7fa0bfb021f7 [ 1886.599825] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1886.599832] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1886.599846] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1886.599853] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1886.599861] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1886.599868] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1886.599876] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1886.657051] BTRFS error (device loop5): superblock checksum mismatch [ 1886.657299] BTRFS error (device loop5): open_ctree failed [ 1886.719211] BTRFS error (device loop5): superblock checksum mismatch [ 1886.833847] BTRFS error (device loop5): open_ctree failed [ 1887.519999] IPVS: ftp: loaded support on port[0] = 21 [ 1887.523725] IPVS: ftp: loaded support on port[0] = 21 [ 1887.682559] FAULT_INJECTION: forcing a failure. [ 1887.682559] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.682576] CPU: 1 PID: 28947 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1887.682585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1887.682588] Call Trace: [ 1887.682609] dump_stack+0x1fc/0x2ef [ 1887.682628] should_fail.cold+0xa/0xf [ 1887.682653] ? setup_fault_attr+0x200/0x200 [ 1887.682670] ? lock_downgrade+0x720/0x720 [ 1887.682690] __should_failslab+0x115/0x180 [ 1887.682708] should_failslab+0x5/0x10 [ 1887.682719] __kmalloc+0x2ab/0x3c0 [ 1887.682731] ? ext4_find_extent+0x9bb/0xc70 [ 1887.682746] ext4_find_extent+0x9bb/0xc70 [ 1887.682766] ext4_ext_map_blocks+0x1c0/0x7390 [ 1887.682788] ? __lock_acquire+0x6de/0x3ff0 [ 1887.682807] ? mark_held_locks+0xf0/0xf0 [ 1887.682820] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 1887.682834] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 1887.682848] ? mark_held_locks+0xf0/0xf0 [ 1887.682864] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 1887.682881] ? ext4_es_lookup_extent+0x375/0xb60 [ 1887.682900] ? ext4_map_blocks+0x59f/0x1a50 [ 1887.682918] ? lock_acquire+0x170/0x3c0 [ 1887.682931] ? ext4_map_blocks+0x740/0x1a50 [ 1887.682952] ext4_map_blocks+0x7a2/0x1a50 [ 1887.682970] ? check_preemption_disabled+0x41/0x280 [ 1887.682987] ? ext4_issue_zeroout+0x160/0x160 [ 1887.683001] ? __brelse+0x84/0xa0 [ 1887.683014] ? __ext4_new_inode+0x2eb/0x5a20 [ 1887.683035] ext4_getblk+0xad/0x4f0 [ 1887.683050] ? ext4_iomap_begin+0xe00/0xe00 [ 1887.683066] ? ext4_free_inode+0x1780/0x1780 [ 1887.683078] ? debug_check_no_obj_freed+0x201/0x490 [ 1887.683092] ? __dquot_initialize+0x298/0xb70 [ 1887.683109] ext4_bread+0x7c/0x210 [ 1887.683122] ? ext4_getblk+0x4f0/0x4f0 [ 1887.683136] ? dquot_initialize_needed+0x290/0x290 [ 1887.683152] ? trace_hardirqs_off+0x64/0x200 [ 1887.683168] ext4_append+0x155/0x370 [ 1887.683186] ext4_mkdir+0x5bd/0xe10 [ 1887.683206] ? ext4_init_dot_dotdot+0x600/0x600 [ 1887.683222] ? generic_permission+0x116/0x4d0 [ 1887.683240] ? inode_permission.part.0+0x10c/0x450 [ 1887.683258] vfs_mkdir+0x508/0x7a0 [ 1887.683273] do_mkdirat+0x262/0x2d0 [ 1887.683287] ? __ia32_sys_mknod+0x120/0x120 [ 1887.683303] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1887.683317] ? do_syscall_64+0x21/0x620 [ 1887.683333] do_syscall_64+0xf9/0x620 [ 1887.683351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1887.683362] RIP: 0033:0x7fa0bfb021f7 [ 1887.683375] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1887.683382] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1887.683395] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1887.683403] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1887.683410] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1887.683418] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1887.683426] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:46:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x22000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:47 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf00000000000000}]) 23:46:47 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x8300000000000000}]) 23:46:47 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6000000}, 0x0) unshare(0x0) 23:46:47 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x600}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 33) 23:46:47 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1000000000000000}]) 23:46:47 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x830c020000000000}]) [ 1889.125584] IPVS: ftp: loaded support on port[0] = 21 [ 1889.128775] IPVS: ftp: loaded support on port[0] = 21 [ 1889.194292] FAULT_INJECTION: forcing a failure. [ 1889.194292] name failslab, interval 1, probability 0, space 0, times 0 23:46:47 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x850c020000000000}]) [ 1889.194314] CPU: 1 PID: 29022 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:47 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1100000000000000}]) [ 1889.194323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1889.194329] Call Trace: [ 1889.194348] dump_stack+0x1fc/0x2ef [ 1889.194369] should_fail.cold+0xa/0xf [ 1889.194388] ? setup_fault_attr+0x200/0x200 [ 1889.194404] ? lock_acquire+0x170/0x3c0 [ 1889.194425] __should_failslab+0x115/0x180 [ 1889.194443] should_failslab+0x5/0x10 [ 1889.194457] __kmalloc_track_caller+0x2a6/0x3c0 [ 1889.194472] ? strndup_user+0x70/0x120 23:46:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1200000000000000}]) [ 1889.194491] memdup_user+0x22/0xb0 [ 1889.194508] strndup_user+0x70/0x120 [ 1889.194524] ksys_mount+0x34/0x130 [ 1889.194542] __x64_sys_mount+0xba/0x150 [ 1889.194559] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1889.194573] do_syscall_64+0xf9/0x620 23:46:48 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x860c020000000000}]) [ 1889.194592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1889.194603] RIP: 0033:0x7fa0bfb0461a [ 1889.194617] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1889.194624] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1889.194638] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1889.194646] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1889.194655] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1889.194663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 23:46:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x23000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1300000000000000}]) 23:46:48 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe4ffffff00000000}]) 23:46:48 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x8000000}, 0x0) unshare(0x0) 23:46:48 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x700}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1889.194672] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1889.394781] BTRFS error (device loop0): superblock checksum mismatch [ 1889.398512] BTRFS error (device loop0): open_ctree failed [ 1890.013238] IPVS: ftp: loaded support on port[0] = 21 [ 1890.053059] IPVS: ftp: loaded support on port[0] = 21 [ 1890.101541] BTRFS error (device loop0): superblock checksum mismatch [ 1890.105033] BTRFS error (device loop0): open_ctree failed 23:46:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 34) 23:46:49 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe703000000000000}]) 23:46:49 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1400000000000000}]) 23:46:49 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa000000}, 0x0) unshare(0x0) 23:46:49 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x812}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x28000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:49 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1500000000000000}]) [ 1891.127323] IPVS: ftp: loaded support on port[0] = 21 23:46:49 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffffffffffff}]) [ 1891.130653] IPVS: ftp: loaded support on port[0] = 21 [ 1891.219908] FAULT_INJECTION: forcing a failure. [ 1891.219908] name failslab, interval 1, probability 0, space 0, times 0 23:46:49 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1600000000000000}]) 23:46:49 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf4ffffff00000000}]) [ 1891.219929] CPU: 1 PID: 29184 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1891.219937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.219942] Call Trace: [ 1891.219961] dump_stack+0x1fc/0x2ef [ 1891.219981] should_fail.cold+0xa/0xf [ 1891.219998] ? setup_fault_attr+0x200/0x200 [ 1891.220013] ? lock_downgrade+0x720/0x720 [ 1891.220030] ? check_preemption_disabled+0x41/0x280 [ 1891.220048] __should_failslab+0x115/0x180 23:46:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1800000000000000}]) [ 1891.220065] should_failslab+0x5/0x10 [ 1891.220079] kmem_cache_alloc+0x277/0x370 23:46:50 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf5ffffff00000000}]) [ 1891.220097] ext4_mb_new_blocks+0x60a/0x4370 [ 1891.220117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1891.220129] ? ext4_cache_extents+0x68/0x2d0 [ 1891.220140] ? ext4_find_extent+0x9bb/0xc70 [ 1891.220155] ? ext4_discard_preallocations+0xfb0/0xfb0 [ 1891.220166] ? ext4_ext_search_right+0x2c7/0xb60 [ 1891.220181] ? ext4_inode_to_goal_block+0x2d2/0x3e0 [ 1891.220209] ext4_ext_map_blocks+0x2aa2/0x7390 [ 1891.220233] ? __lock_acquire+0x6de/0x3ff0 [ 1891.220254] ? mark_held_locks+0xf0/0xf0 [ 1891.220267] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 1891.220281] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 1891.220296] ? mark_held_locks+0xf0/0xf0 [ 1891.220313] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 1891.220332] ? ext4_es_lookup_extent+0x375/0xb60 [ 1891.220352] ? ext4_map_blocks+0x59f/0x1a50 [ 1891.220383] ext4_map_blocks+0x7a2/0x1a50 [ 1891.220402] ? check_preemption_disabled+0x41/0x280 [ 1891.220420] ? ext4_issue_zeroout+0x160/0x160 [ 1891.220435] ? __brelse+0x84/0xa0 [ 1891.220450] ? __ext4_new_inode+0x2eb/0x5a20 23:46:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 35) 23:46:50 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa170000}, 0x0) unshare(0x0) 23:46:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2000000000000000}]) 23:46:50 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfbffffff00000000}]) 23:46:50 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xa03}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1891.220472] ext4_getblk+0xad/0x4f0 [ 1891.220488] ? ext4_iomap_begin+0xe00/0xe00 [ 1891.220505] ? ext4_free_inode+0x1780/0x1780 [ 1891.220518] ? debug_check_no_obj_freed+0x201/0x490 [ 1891.220533] ? __dquot_initialize+0x298/0xb70 [ 1891.220551] ext4_bread+0x7c/0x210 [ 1891.220566] ? ext4_getblk+0x4f0/0x4f0 [ 1891.220581] ? dquot_initialize_needed+0x290/0x290 [ 1891.220597] ? trace_hardirqs_off+0x64/0x200 [ 1891.220614] ext4_append+0x155/0x370 [ 1891.220633] ext4_mkdir+0x5bd/0xe10 [ 1891.220655] ? ext4_init_dot_dotdot+0x600/0x600 [ 1891.220671] ? generic_permission+0x116/0x4d0 [ 1891.220689] ? inode_permission.part.0+0x10c/0x450 [ 1891.220706] vfs_mkdir+0x508/0x7a0 [ 1891.220721] do_mkdirat+0x262/0x2d0 [ 1891.220737] ? __ia32_sys_mknod+0x120/0x120 [ 1891.220753] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1891.220768] ? do_syscall_64+0x21/0x620 [ 1891.220785] do_syscall_64+0xf9/0x620 [ 1891.220802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.220813] RIP: 0033:0x7fa0bfb021f7 [ 1891.220827] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.220835] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1891.220848] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1891.220856] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1891.220865] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1891.220872] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1891.220880] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1891.260637] BTRFS error (device loop5): superblock checksum mismatch [ 1891.261591] BTRFS error (device loop5): open_ctree failed [ 1892.059325] IPVS: ftp: loaded support on port[0] = 21 [ 1892.063504] IPVS: ftp: loaded support on port[0] = 21 [ 1892.119593] FAULT_INJECTION: forcing a failure. [ 1892.119593] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.119723] CPU: 1 PID: 29272 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1892.119731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1892.119735] Call Trace: [ 1892.119756] dump_stack+0x1fc/0x2ef [ 1892.119776] should_fail.cold+0xa/0xf [ 1892.119795] ? setup_fault_attr+0x200/0x200 [ 1892.119812] ? __es_tree_search.isra.0+0x1af/0x210 [ 1892.119832] __should_failslab+0x115/0x180 [ 1892.119850] should_failslab+0x5/0x10 [ 1892.119867] kmem_cache_alloc+0x3f/0x370 [ 1892.119883] __es_insert_extent+0x39b/0x13b0 [ 1892.119908] ext4_es_insert_extent+0x22e/0x5e0 [ 1892.119922] ? ext4_map_blocks+0x59f/0x1a50 [ 1892.119936] ? ext4_es_find_delayed_extent_range+0x9f0/0x9f0 [ 1892.119963] ext4_map_blocks+0xa2a/0x1a50 [ 1892.119985] ? ext4_issue_zeroout+0x160/0x160 [ 1892.119999] ? __brelse+0x84/0xa0 [ 1892.120012] ? __ext4_new_inode+0x2eb/0x5a20 [ 1892.120033] ext4_getblk+0xad/0x4f0 [ 1892.120049] ? ext4_iomap_begin+0xe00/0xe00 [ 1892.120064] ? ext4_free_inode+0x1780/0x1780 [ 1892.120076] ? debug_check_no_obj_freed+0x201/0x490 [ 1892.120099] ? __dquot_initialize+0x298/0xb70 [ 1892.120118] ext4_bread+0x7c/0x210 [ 1892.120133] ? ext4_getblk+0x4f0/0x4f0 [ 1892.120149] ? dquot_initialize_needed+0x290/0x290 [ 1892.120167] ? trace_hardirqs_off+0x64/0x200 [ 1892.120186] ext4_append+0x155/0x370 [ 1892.120205] ext4_mkdir+0x5bd/0xe10 [ 1892.120227] ? ext4_init_dot_dotdot+0x600/0x600 [ 1892.120244] ? generic_permission+0x116/0x4d0 [ 1892.120262] ? inode_permission.part.0+0x10c/0x450 [ 1892.120280] vfs_mkdir+0x508/0x7a0 [ 1892.120296] do_mkdirat+0x262/0x2d0 [ 1892.120310] ? __ia32_sys_mknod+0x120/0x120 [ 1892.120327] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1892.120343] ? do_syscall_64+0x21/0x620 [ 1892.120359] do_syscall_64+0xf9/0x620 [ 1892.120378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1892.120390] RIP: 0033:0x7fa0bfb021f7 [ 1892.120404] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1892.120412] RSP: 002b:00007fa0be456f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1892.120425] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb021f7 [ 1892.120434] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1892.120442] RBP: 00007fa0be4571d0 R08: 0000000000000000 R09: 00007fa0be4571d0 [ 1892.120450] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1892.120459] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:46:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd81000000000000}]) 23:46:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x2300000000000000}]) 23:46:52 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xc000000}, 0x0) unshare(0x0) 23:46:52 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1208}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 36) 23:46:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x28020000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3d00000000000000}]) [ 1893.771949] IPVS: ftp: loaded support on port[0] = 21 [ 1893.788690] IPVS: ftp: loaded support on port[0] = 21 23:46:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe01000000000000}]) [ 1893.857135] FAULT_INJECTION: forcing a failure. [ 1893.857135] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.857205] CPU: 0 PID: 29343 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1893.857214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1893.857220] Call Trace: [ 1893.857241] dump_stack+0x1fc/0x2ef [ 1893.857261] should_fail.cold+0xa/0xf [ 1893.857280] ? setup_fault_attr+0x200/0x200 [ 1893.857296] ? lock_acquire+0x1ec/0x3c0 [ 1893.857316] __should_failslab+0x115/0x180 [ 1893.857336] should_failslab+0x5/0x10 [ 1893.857352] __kmalloc_track_caller+0x2a6/0x3c0 [ 1893.857367] ? strndup_user+0x70/0x120 [ 1893.857382] ? _copy_from_user+0xd2/0x130 [ 1893.857406] memdup_user+0x22/0xb0 [ 1893.857422] strndup_user+0x70/0x120 [ 1893.857439] ksys_mount+0x6f/0x130 [ 1893.857457] __x64_sys_mount+0xba/0x150 [ 1893.857472] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1893.857485] do_syscall_64+0xf9/0x620 [ 1893.857502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1893.857513] RIP: 0033:0x7fa0bfb0461a [ 1893.857525] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1893.857532] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1893.857545] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1893.857554] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1893.857563] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1893.857570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1893.857578] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1893.994840] BTRFS error (device loop5): superblock checksum mismatch 23:46:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfeffffff00000000}]) 23:46:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x3f00000000000000}]) [ 1894.257458] BTRFS error (device loop5): open_ctree failed 23:46:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff01000000000000}]) 23:46:52 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x4000000000000000}]) 23:46:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:53 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f000000000000}]) 23:46:53 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xe000000}, 0x0) unshare(0x0) 23:46:53 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1402}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1894.736091] IPVS: ftp: loaded support on port[0] = 21 [ 1894.766003] IPVS: ftp: loaded support on port[0] = 21 [ 1894.967944] BTRFS error (device loop0): superblock checksum mismatch [ 1894.994710] BTRFS error (device loop0): open_ctree failed 23:46:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 37) 23:46:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x400b020000000000}]) 23:46:54 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff5f010000000000}]) 23:46:54 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x10000000}, 0x0) unshare(0x0) 23:46:54 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1600}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x42030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1896.043484] IPVS: ftp: loaded support on port[0] = 21 23:46:54 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffefffffff7f0000}]) 23:46:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x5200000000000000}]) [ 1896.105005] IPVS: ftp: loaded support on port[0] = 21 [ 1896.156517] BTRFS error (device loop0): superblock checksum mismatch [ 1896.158202] BTRFS error (device loop0): open_ctree failed [ 1896.345927] FAULT_INJECTION: forcing a failure. [ 1896.345927] name failslab, interval 1, probability 0, space 0, times 0 23:46:54 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffff00000000}]) [ 1896.346005] CPU: 0 PID: 29508 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1896.346014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:54 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x6a0b020000000000}]) [ 1896.346019] Call Trace: [ 1896.346039] dump_stack+0x1fc/0x2ef [ 1896.346061] should_fail.cold+0xa/0xf [ 1896.346080] ? setup_fault_attr+0x200/0x200 [ 1896.346096] ? lock_acquire+0x170/0x3c0 [ 1896.346116] __should_failslab+0x115/0x180 [ 1896.346133] should_failslab+0x5/0x10 23:46:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffffffffff0}]) [ 1896.346147] kmem_cache_alloc_trace+0x284/0x380 [ 1896.346160] ? _copy_from_user+0xd2/0x130 [ 1896.346179] copy_mount_options+0x59/0x380 [ 1896.346198] ksys_mount+0x9b/0x130 23:46:55 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x720b020000000000}]) [ 1896.346215] __x64_sys_mount+0xba/0x150 [ 1896.346229] ? ksys_mount+0x130/0x130 [ 1896.346244] do_syscall_64+0xf9/0x620 [ 1896.346263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1896.346274] RIP: 0033:0x7fa0bfb0461a [ 1896.346288] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1896.346295] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1896.346308] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1896.346316] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1896.346324] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 23:46:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 38) 23:46:55 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1700}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2}]) 23:46:55 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x740b020000000000}]) 23:46:55 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x60000000}, 0x0) unshare(0x0) [ 1896.346332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1896.346340] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1897.029415] IPVS: ftp: loaded support on port[0] = 21 [ 1897.031217] IPVS: ftp: loaded support on port[0] = 21 [ 1897.109201] FAULT_INJECTION: forcing a failure. [ 1897.109201] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.109220] CPU: 1 PID: 29594 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1897.109229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1897.109233] Call Trace: [ 1897.109252] dump_stack+0x1fc/0x2ef [ 1897.109272] should_fail.cold+0xa/0xf [ 1897.109290] ? setup_fault_attr+0x200/0x200 [ 1897.109306] ? lock_acquire+0x170/0x3c0 [ 1897.109326] __should_failslab+0x115/0x180 [ 1897.109344] should_failslab+0x5/0x10 [ 1897.109357] kmem_cache_alloc+0x277/0x370 [ 1897.109374] alloc_vfsmnt+0x23/0x780 [ 1897.109388] ? _raw_read_unlock+0x29/0x40 [ 1897.109404] vfs_kern_mount.part.0+0x27/0x470 [ 1897.109422] do_mount+0x115c/0x2f50 [ 1897.109439] ? cmp_ex_sort+0xc0/0xc0 [ 1897.109456] ? __do_page_fault+0x180/0xd60 [ 1897.109476] ? copy_mount_string+0x40/0x40 [ 1897.109496] ? memset+0x20/0x40 [ 1897.109511] ? copy_mount_options+0x26f/0x380 [ 1897.109527] ksys_mount+0xcf/0x130 [ 1897.109544] __x64_sys_mount+0xba/0x150 [ 1897.109558] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1897.109578] do_syscall_64+0xf9/0x620 [ 1897.109597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1897.109607] RIP: 0033:0x7fa0bfb0461a [ 1897.109619] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1897.109627] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1897.109640] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1897.109648] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1897.109656] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1897.109664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1897.109672] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:46:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x440a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:56 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3}]) 23:46:56 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x750b020000000000}]) 23:46:56 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x65580000}, 0x0) unshare(0x0) 23:46:56 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1800}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 39) 23:46:56 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x760b020000000000}]) [ 1898.329126] IPVS: ftp: loaded support on port[0] = 21 [ 1898.350244] IPVS: ftp: loaded support on port[0] = 21 23:46:56 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x4}]) [ 1898.400198] FAULT_INJECTION: forcing a failure. [ 1898.400198] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.400217] CPU: 1 PID: 29658 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:57 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x780b020000000000}]) [ 1898.400226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1898.400231] Call Trace: [ 1898.400250] dump_stack+0x1fc/0x2ef [ 1898.400270] should_fail.cold+0xa/0xf [ 1898.400289] ? setup_fault_attr+0x200/0x200 [ 1898.400304] ? lock_acquire+0x170/0x3c0 [ 1898.400324] __should_failslab+0x115/0x180 [ 1898.400339] should_failslab+0x5/0x10 23:46:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x5}]) [ 1898.400352] __kmalloc_track_caller+0x2a6/0x3c0 [ 1898.400367] ? kstrdup_const+0x53/0x80 [ 1898.400400] kstrdup+0x36/0x70 [ 1898.400416] kstrdup_const+0x53/0x80 [ 1898.400439] alloc_vfsmnt+0xb5/0x780 [ 1898.400453] ? _raw_read_unlock+0x29/0x40 23:46:57 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x790b020000000000}]) [ 1898.400469] vfs_kern_mount.part.0+0x27/0x470 [ 1898.400486] do_mount+0x115c/0x2f50 [ 1898.400502] ? cmp_ex_sort+0xc0/0xc0 [ 1898.400517] ? __do_page_fault+0x180/0xd60 23:46:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x6}]) [ 1898.400532] ? copy_mount_string+0x40/0x40 [ 1898.400553] ? memset+0x20/0x40 [ 1898.400567] ? copy_mount_options+0x26f/0x380 [ 1898.400583] ksys_mount+0xcf/0x130 [ 1898.400598] __x64_sys_mount+0xba/0x150 [ 1898.400613] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1898.400626] do_syscall_64+0xf9/0x620 [ 1898.400643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1898.400653] RIP: 0033:0x7fa0bfb0461a [ 1898.400666] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1898.400673] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1898.400686] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1898.400694] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1898.400702] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1898.400710] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1898.400717] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1898.477932] BTRFS error (device loop0): superblock checksum mismatch 23:46:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x450a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:46:57 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x81000000}, 0x0) unshare(0x0) 23:46:57 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1f00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:57 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe4ffffff00000000}]) 23:46:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x7}]) [ 1898.478509] BTRFS error (device loop0): open_ctree failed [ 1899.348625] IPVS: ftp: loaded support on port[0] = 21 [ 1899.357225] IPVS: ftp: loaded support on port[0] = 21 [ 1899.532683] BTRFS error (device loop0): superblock checksum mismatch [ 1899.538526] BTRFS error (device loop0): open_ctree failed 23:46:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 40) 23:46:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x8}]) 23:46:59 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xe703000000000000}]) 23:46:59 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x88a8ffff}, 0x0) unshare(0x0) 23:46:59 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x2000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:46:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x460a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1900.793037] IPVS: ftp: loaded support on port[0] = 21 [ 1900.817219] IPVS: ftp: loaded support on port[0] = 21 23:46:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x9}]) 23:46:59 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf0ffffffffffffff}]) [ 1900.979502] FAULT_INJECTION: forcing a failure. [ 1900.979502] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.979521] CPU: 1 PID: 29841 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:46:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xa}]) [ 1900.979530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:46:59 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf4ffffff00000000}]) [ 1900.979534] Call Trace: [ 1900.979554] dump_stack+0x1fc/0x2ef [ 1900.979575] should_fail.cold+0xa/0xf [ 1900.979593] ? setup_fault_attr+0x200/0x200 [ 1900.979610] ? lock_acquire+0x170/0x3c0 [ 1900.979630] __should_failslab+0x115/0x180 [ 1900.979644] should_failslab+0x5/0x10 [ 1900.979657] kmem_cache_alloc+0x277/0x370 [ 1900.979674] getname_flags+0xce/0x590 [ 1900.979688] user_path_at_empty+0x2a/0x50 [ 1900.979704] do_mount+0x147/0x2f50 [ 1900.979720] ? cmp_ex_sort+0xc0/0xc0 23:46:59 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x9effffff}, 0x0) unshare(0x0) [ 1900.979734] ? __do_page_fault+0x180/0xd60 [ 1900.979750] ? copy_mount_string+0x40/0x40 [ 1900.979772] ? memset+0x20/0x40 [ 1900.979786] ? copy_mount_options+0x26f/0x380 [ 1900.979806] ksys_mount+0xcf/0x130 23:46:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xb}]) [ 1900.979823] __x64_sys_mount+0xba/0x150 [ 1900.979839] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1900.979853] do_syscall_64+0xf9/0x620 [ 1900.979870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1900.979880] RIP: 0033:0x7fa0bfb0461a [ 1900.979894] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:47:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 41) 23:47:00 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xf5ffffff00000000}]) 23:47:00 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x2803}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1900.979901] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1900.979915] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a 23:47:00 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xc}]) [ 1900.979923] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1900.979931] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1900.979940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1900.979947] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1901.182783] BTRFS error (device loop0): superblock checksum mismatch 23:47:00 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfbffffff00000000}]) [ 1901.195407] BTRFS error (device loop0): open_ctree failed [ 1901.605482] IPVS: ftp: loaded support on port[0] = 21 [ 1901.902391] IPVS: ftp: loaded support on port[0] = 21 [ 1901.965202] FAULT_INJECTION: forcing a failure. [ 1901.965202] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.121573] CPU: 1 PID: 29934 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1902.121584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.121589] Call Trace: [ 1902.121611] dump_stack+0x1fc/0x2ef [ 1902.121628] should_fail.cold+0xa/0xf [ 1902.121644] ? setup_fault_attr+0x200/0x200 [ 1902.121659] ? lock_acquire+0x170/0x3c0 [ 1902.121680] __should_failslab+0x115/0x180 [ 1902.121697] should_failslab+0x5/0x10 [ 1902.121711] kmem_cache_alloc+0x277/0x370 [ 1902.121729] alloc_vfsmnt+0x23/0x780 [ 1902.121743] ? _raw_read_unlock+0x29/0x40 [ 1902.121759] vfs_kern_mount.part.0+0x27/0x470 [ 1902.121777] do_mount+0x115c/0x2f50 [ 1902.121794] ? cmp_ex_sort+0xc0/0xc0 [ 1902.121810] ? __do_page_fault+0x180/0xd60 [ 1902.121824] ? copy_mount_string+0x40/0x40 [ 1902.121844] ? memset+0x20/0x40 [ 1902.121859] ? copy_mount_options+0x26f/0x380 [ 1902.121877] ksys_mount+0xcf/0x130 [ 1902.121895] __x64_sys_mount+0xba/0x150 [ 1902.121910] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1902.121923] do_syscall_64+0xf9/0x620 [ 1902.121940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1902.121950] RIP: 0033:0x7fa0bfb0461a [ 1902.121963] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1902.121970] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1902.121984] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1902.121992] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1902.121999] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1902.122007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1902.122015] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x470a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xd}]) 23:47:01 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf0ffffff}, 0x0) unshare(0x0) 23:47:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfd81000000000000}]) 23:47:01 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3603}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 42) [ 1903.115966] IPVS: ftp: loaded support on port[0] = 21 23:47:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xe}]) 23:47:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfe01000000000000}]) [ 1903.132669] IPVS: ftp: loaded support on port[0] = 21 23:47:02 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf}]) [ 1903.517044] FAULT_INJECTION: forcing a failure. [ 1903.517044] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.517156] CPU: 0 PID: 29992 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:47:02 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfeffffff00000000}]) [ 1903.517165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.517170] Call Trace: [ 1903.517189] dump_stack+0x1fc/0x2ef [ 1903.517206] should_fail.cold+0xa/0xf [ 1903.517225] ? setup_fault_attr+0x200/0x200 [ 1903.517239] ? lock_acquire+0x170/0x3c0 [ 1903.517254] __should_failslab+0x115/0x180 [ 1903.517270] should_failslab+0x5/0x10 [ 1903.517284] __kmalloc_track_caller+0x2a6/0x3c0 [ 1903.517297] ? kstrdup_const+0x53/0x80 [ 1903.517313] kstrdup+0x36/0x70 [ 1903.517326] kstrdup_const+0x53/0x80 [ 1903.517339] alloc_vfsmnt+0xb5/0x780 [ 1903.517355] vfs_kern_mount.part.0+0x27/0x470 [ 1903.517371] vfs_kern_mount+0x3c/0x60 [ 1903.517388] btrfs_mount+0x23a/0xaa0 [ 1903.517404] ? btrfs_show_options+0xfd0/0xfd0 [ 1903.517423] ? check_preemption_disabled+0x41/0x280 23:47:02 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x10}]) [ 1903.517441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1903.517454] ? pcpu_alloc+0xc9/0x1190 [ 1903.517471] ? __lockdep_init_map+0x100/0x5a0 23:47:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 43) [ 1903.517488] mount_fs+0xa3/0x310 [ 1903.517506] vfs_kern_mount.part.0+0x68/0x470 [ 1903.517522] do_mount+0x115c/0x2f50 [ 1903.517540] ? rcu_nmi_exit+0xb3/0x180 [ 1903.517555] ? copy_mount_string+0x40/0x40 [ 1903.517575] ? memset+0x20/0x40 [ 1903.517588] ? copy_mount_options+0x26f/0x380 [ 1903.517604] ksys_mount+0xcf/0x130 [ 1903.517620] __x64_sys_mount+0xba/0x150 [ 1903.517634] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1903.517646] do_syscall_64+0xf9/0x620 [ 1903.517664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1903.517675] RIP: 0033:0x7fa0bfb0461a [ 1903.517691] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1903.517699] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1903.517713] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1903.517720] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1903.517729] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1903.517737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1903.517745] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1903.616388] BTRFS error (device loop5): superblock checksum mismatch [ 1903.636239] BTRFS error (device loop5): open_ctree failed [ 1904.316387] FAULT_INJECTION: forcing a failure. [ 1904.316387] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.336596] CPU: 0 PID: 30066 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1904.336605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.336610] Call Trace: [ 1904.336630] dump_stack+0x1fc/0x2ef [ 1904.336649] should_fail.cold+0xa/0xf [ 1904.336667] ? setup_fault_attr+0x200/0x200 [ 1904.336688] ? lock_acquire+0x170/0x3c0 [ 1904.336709] __should_failslab+0x115/0x180 [ 1904.336726] should_failslab+0x5/0x10 [ 1904.336741] __kmalloc_track_caller+0x2a6/0x3c0 [ 1904.336755] ? btrfs_mount+0xb5/0xaa0 [ 1904.336773] kstrdup+0x36/0x70 [ 1904.336787] btrfs_mount+0xb5/0xaa0 [ 1904.336804] ? btrfs_show_options+0xfd0/0xfd0 [ 1904.336822] ? retint_kernel+0x2d/0x2d [ 1904.336845] ? save_trace+0x290/0x290 [ 1904.336861] ? __lockdep_init_map+0x100/0x5a0 [ 1904.336878] mount_fs+0xa3/0x310 [ 1904.336897] vfs_kern_mount.part.0+0x68/0x470 [ 1904.336915] do_mount+0x115c/0x2f50 [ 1904.336934] ? rcu_nmi_exit+0xb3/0x180 [ 1904.336951] ? copy_mount_string+0x40/0x40 [ 1904.336973] ? memset+0x20/0x40 [ 1904.336988] ? copy_mount_options+0x26f/0x380 [ 1904.337006] ksys_mount+0xcf/0x130 [ 1904.337022] __x64_sys_mount+0xba/0x150 [ 1904.337038] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1904.337052] do_syscall_64+0xf9/0x620 [ 1904.337069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1904.337081] RIP: 0033:0x7fa0bfb0461a [ 1904.337094] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1904.337102] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1904.337115] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1904.337123] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1904.337131] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1904.337139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1904.337147] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48020000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:03 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff01000000000000}]) 23:47:03 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x11}]) 23:47:03 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3900}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 44) 23:47:03 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xffffa888}, 0x0) unshare(0x0) 23:47:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x12}]) [ 1905.519975] IPVS: ftp: loaded support on port[0] = 21 23:47:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff0f000000000000}]) [ 1905.547572] IPVS: ftp: loaded support on port[0] = 21 [ 1905.627213] FAULT_INJECTION: forcing a failure. [ 1905.627213] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.627232] CPU: 1 PID: 30090 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1905.627241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:47:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xff5f010000000000}]) [ 1905.627246] Call Trace: [ 1905.627267] dump_stack+0x1fc/0x2ef [ 1905.627287] should_fail.cold+0xa/0xf 23:47:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x13}]) [ 1905.627304] ? setup_fault_attr+0x200/0x200 [ 1905.627320] ? lock_acquire+0x170/0x3c0 [ 1905.627342] __should_failslab+0x115/0x180 [ 1905.627357] should_failslab+0x5/0x10 [ 1905.627370] __kmalloc_track_caller+0x2a6/0x3c0 [ 1905.627384] ? btrfs_mount+0xb5/0xaa0 [ 1905.627400] kstrdup+0x36/0x70 [ 1905.627415] btrfs_mount+0xb5/0xaa0 [ 1905.627433] ? btrfs_show_options+0xfd0/0xfd0 [ 1905.627445] ? __mutex_unlock_slowpath+0xea/0x610 [ 1905.627465] ? check_preemption_disabled+0x41/0x280 23:47:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffefffffff7f0000}]) [ 1905.627486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1905.627498] ? pcpu_alloc+0xc9/0x1190 [ 1905.627514] ? __lockdep_init_map+0x100/0x5a0 [ 1905.627531] mount_fs+0xa3/0x310 [ 1905.627550] vfs_kern_mount.part.0+0x68/0x470 [ 1905.627568] do_mount+0x115c/0x2f50 23:47:04 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x14}]) [ 1905.627585] ? cmp_ex_sort+0xc0/0xc0 [ 1905.627601] ? __do_page_fault+0x180/0xd60 [ 1905.627616] ? copy_mount_string+0x40/0x40 [ 1905.627655] ? memset+0x20/0x40 [ 1905.627670] ? copy_mount_options+0x26f/0x380 23:47:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x480a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1905.627687] ksys_mount+0xcf/0x130 [ 1905.627703] __x64_sys_mount+0xba/0x150 [ 1905.627718] ? lockdep_hardirqs_on+0x3a8/0x5c0 23:47:04 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xfffff000}, 0x0) unshare(0x0) [ 1905.627731] do_syscall_64+0xf9/0x620 [ 1905.627748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1905.627760] RIP: 0033:0x7fa0bfb0461a 23:47:04 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3e02}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:04 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xffffffff00000000}]) [ 1905.627773] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1905.627780] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 23:47:05 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x15}]) [ 1905.627793] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1905.627801] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1905.627808] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1905.627816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1905.627824] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1905.945282] BTRFS error (device loop0): superblock checksum mismatch [ 1905.958419] BTRFS error (device loop0): open_ctree failed [ 1906.627203] IPVS: ftp: loaded support on port[0] = 21 [ 1906.701635] IPVS: ftp: loaded support on port[0] = 21 [ 1906.851596] BTRFS error (device loop0): superblock checksum mismatch [ 1906.853806] BTRFS error (device loop0): open_ctree failed 23:47:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 45) 23:47:06 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0xfffffffffffffff0}]) 23:47:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x16}]) 23:47:06 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xffffff7f}, 0x0) unshare(0x0) 23:47:06 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x3f00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4a010000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x18}]) 23:47:06 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2}]) [ 1908.000685] IPVS: ftp: loaded support on port[0] = 21 [ 1908.010574] IPVS: ftp: loaded support on port[0] = 21 [ 1908.114314] BTRFS error (device loop5): superblock checksum mismatch [ 1908.119964] BTRFS error (device loop5): open_ctree failed [ 1908.271587] FAULT_INJECTION: forcing a failure. [ 1908.271587] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.274290] CPU: 0 PID: 30259 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1908.274302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.274308] Call Trace: [ 1908.274329] dump_stack+0x1fc/0x2ef [ 1908.274350] should_fail.cold+0xa/0xf [ 1908.274370] ? setup_fault_attr+0x200/0x200 23:47:06 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3}]) [ 1908.274386] ? lock_acquire+0x170/0x3c0 [ 1908.274407] __should_failslab+0x115/0x180 [ 1908.274424] should_failslab+0x5/0x10 23:47:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x23}]) [ 1908.274438] kmem_cache_alloc+0x277/0x370 [ 1908.274454] alloc_vfsmnt+0x23/0x780 [ 1908.274479] vfs_kern_mount.part.0+0x27/0x470 [ 1908.274498] vfs_kern_mount+0x3c/0x60 [ 1908.274517] btrfs_mount+0x23a/0xaa0 [ 1908.274535] ? btrfs_show_options+0xfd0/0xfd0 [ 1908.274551] ? lockdep_hardirqs_on+0x3a8/0x5c0 23:47:07 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x4}]) [ 1908.274566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1908.274583] ? rcu_nmi_exit+0xb3/0x180 [ 1908.274599] ? retint_kernel+0x2d/0x2d [ 1908.274624] mount_fs+0xa3/0x310 23:47:07 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x4a00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1908.274644] vfs_kern_mount.part.0+0x68/0x470 [ 1908.274662] do_mount+0x115c/0x2f50 [ 1908.274679] ? cmp_ex_sort+0xc0/0xc0 [ 1908.274695] ? __do_page_fault+0x180/0xd60 [ 1908.274712] ? copy_mount_string+0x40/0x40 [ 1908.274733] ? memset+0x20/0x40 [ 1908.274749] ? copy_mount_options+0x26f/0x380 [ 1908.274767] ksys_mount+0xcf/0x130 [ 1908.274784] __x64_sys_mount+0xba/0x150 [ 1908.274799] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1908.274812] do_syscall_64+0xf9/0x620 [ 1908.274830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1908.274842] RIP: 0033:0x7fa0bfb0461a [ 1908.274855] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1908.274863] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1908.274876] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1908.274884] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1908.274893] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1908.274901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1908.274910] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1908.983927] IPVS: ftp: loaded support on port[0] = 21 23:47:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 46) 23:47:08 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x83}]) 23:47:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4a020000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:08 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xffffff9e}, 0x0) unshare(0x0) 23:47:08 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x5}]) 23:47:08 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x4e01}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:08 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x6}]) 23:47:08 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x90}]) [ 1910.078473] IPVS: ftp: loaded support on port[0] = 21 [ 1910.091006] IPVS: ftp: loaded support on port[0] = 21 [ 1910.245541] BTRFS error (device loop5): superblock checksum mismatch [ 1910.249748] BTRFS error (device loop5): open_ctree failed 23:47:08 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x7}]) 23:47:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf0}]) [ 1910.482006] FAULT_INJECTION: forcing a failure. [ 1910.482006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1910.483430] CPU: 0 PID: 30385 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1910.483439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:47:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x8}]) [ 1910.483445] Call Trace: [ 1910.483465] dump_stack+0x1fc/0x2ef 23:47:09 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xfffffff0}, 0x0) unshare(0x0) [ 1910.483487] should_fail.cold+0xa/0xf [ 1910.483503] ? lock_acquire+0x170/0x3c0 23:47:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 47) 23:47:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1fe}]) [ 1910.483519] ? setup_fault_attr+0x200/0x200 [ 1910.483542] __alloc_pages_nodemask+0x239/0x2890 [ 1910.483557] ? __lock_acquire+0x6de/0x3ff0 [ 1910.483583] ? mark_held_locks+0xa6/0xf0 [ 1910.483599] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1910.483614] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1910.483627] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1910.483647] ? __lock_acquire+0x6de/0x3ff0 [ 1910.483676] alloc_pages_current+0x193/0x2a0 [ 1910.483692] get_zeroed_page+0x10/0x40 [ 1910.483710] parse_security_options.constprop.0+0x1a/0xa0 [ 1910.483725] btrfs_mount_root+0x110/0x1830 [ 1910.483745] ? btrfs_decode_error+0x70/0x70 [ 1910.483761] ? __mutex_unlock_slowpath+0xea/0x610 [ 1910.483775] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1910.483790] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1910.483808] ? rcu_nmi_exit+0xb3/0x180 [ 1910.483824] ? retint_kernel+0x2d/0x2d [ 1910.483843] mount_fs+0xa3/0x310 [ 1910.483855] ? mount_fs+0x2/0x310 [ 1910.483873] vfs_kern_mount.part.0+0x68/0x470 [ 1910.483890] vfs_kern_mount+0x3c/0x60 [ 1910.483904] btrfs_mount+0x23a/0xaa0 [ 1910.483919] ? btrfs_show_options+0xfd0/0xfd0 [ 1910.483932] ? preempt_schedule_notrace+0x92/0x110 [ 1910.483945] ? ___preempt_schedule_notrace+0x16/0x2e [ 1910.483960] ? pcpu_alloc+0x5f1/0x1190 [ 1910.483972] ? pcpu_alloc+0xc9/0x1190 [ 1910.483985] ? __lockdep_init_map+0x100/0x5a0 [ 1910.483998] mount_fs+0xa3/0x310 [ 1910.484013] vfs_kern_mount.part.0+0x68/0x470 [ 1910.484032] do_mount+0x115c/0x2f50 [ 1910.484048] ? cmp_ex_sort+0xc0/0xc0 [ 1910.484064] ? __do_page_fault+0x180/0xd60 [ 1910.484078] ? copy_mount_string+0x40/0x40 [ 1910.484097] ? memset+0x20/0x40 [ 1910.484111] ? copy_mount_options+0x26f/0x380 [ 1910.484138] ksys_mount+0xcf/0x130 [ 1910.484157] __x64_sys_mount+0xba/0x150 [ 1910.484169] ? do_syscall_64+0xe9/0x620 [ 1910.484184] do_syscall_64+0xf9/0x620 [ 1910.484201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1910.484212] RIP: 0033:0x7fa0bfb0461a [ 1910.484224] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1910.484231] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1910.484244] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1910.484253] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1910.484261] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1910.484270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1910.484278] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1911.014143] IPVS: ftp: loaded support on port[0] = 21 [ 1911.315354] FAULT_INJECTION: forcing a failure. [ 1911.315354] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.521095] CPU: 0 PID: 30480 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1911.521106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1911.521111] Call Trace: [ 1911.521131] dump_stack+0x1fc/0x2ef [ 1911.521151] should_fail.cold+0xa/0xf [ 1911.521169] ? setup_fault_attr+0x200/0x200 [ 1911.521184] ? lock_acquire+0x170/0x3c0 [ 1911.521206] __should_failslab+0x115/0x180 [ 1911.521223] should_failslab+0x5/0x10 [ 1911.521238] kmem_cache_alloc_trace+0x284/0x380 [ 1911.521260] btrfs_mount_root+0x188/0x1830 [ 1911.521275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1911.521292] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1911.521307] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1911.521323] ? btrfs_decode_error+0x70/0x70 [ 1911.521338] ? rcu_nmi_exit+0xb3/0x180 [ 1911.521355] ? retint_kernel+0x2d/0x2d [ 1911.521374] ? check_preemption_disabled+0x41/0x280 [ 1911.521395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1911.521410] ? pcpu_alloc+0xc9/0x1190 [ 1911.521427] ? __lockdep_init_map+0x100/0x5a0 [ 1911.521444] mount_fs+0xa3/0x310 [ 1911.521464] vfs_kern_mount.part.0+0x68/0x470 [ 1911.521483] vfs_kern_mount+0x3c/0x60 [ 1911.521506] btrfs_mount+0x23a/0xaa0 [ 1911.521525] ? btrfs_show_options+0xfd0/0xfd0 [ 1911.521538] ? __mutex_unlock_slowpath+0xea/0x610 [ 1911.521557] ? check_preemption_disabled+0x41/0x280 [ 1911.521579] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1911.521592] ? pcpu_alloc+0xc9/0x1190 [ 1911.521606] ? __lockdep_init_map+0x100/0x5a0 [ 1911.521623] mount_fs+0xa3/0x310 [ 1911.521641] vfs_kern_mount.part.0+0x68/0x470 [ 1911.521658] do_mount+0x115c/0x2f50 [ 1911.521675] ? cmp_ex_sort+0xc0/0xc0 [ 1911.521691] ? __do_page_fault+0x180/0xd60 [ 1911.521707] ? copy_mount_string+0x40/0x40 [ 1911.521728] ? memset+0x20/0x40 [ 1911.521744] ? copy_mount_options+0x26f/0x380 [ 1911.521761] ksys_mount+0xcf/0x130 [ 1911.521777] __x64_sys_mount+0xba/0x150 [ 1911.521793] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1911.521806] do_syscall_64+0xf9/0x620 [ 1911.521823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1911.521834] RIP: 0033:0x7fa0bfb0461a [ 1911.521847] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1911.521855] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1911.521868] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1911.521876] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1911.521884] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1911.521892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1911.521900] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5a020000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:11 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x6000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:11 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x300}]) 23:47:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x9}]) 23:47:11 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf0ffffffffffff}, 0x0) unshare(0x0) 23:47:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 48) [ 1912.765716] FAULT_INJECTION: forcing a failure. [ 1912.765716] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.765733] CPU: 1 PID: 30501 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1912.765741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1912.765744] Call Trace: [ 1912.765763] dump_stack+0x1fc/0x2ef [ 1912.765781] should_fail.cold+0xa/0xf [ 1912.765799] ? setup_fault_attr+0x200/0x200 [ 1912.765813] ? lock_acquire+0x170/0x3c0 [ 1912.765834] __should_failslab+0x115/0x180 [ 1912.765850] should_failslab+0x5/0x10 [ 1912.765865] kmem_cache_alloc_trace+0x284/0x380 [ 1912.765882] btrfs_mount_root+0x1e1/0x1830 [ 1912.765904] ? btrfs_decode_error+0x70/0x70 [ 1912.765918] ? __mutex_unlock_slowpath+0xea/0x610 [ 1912.765937] ? check_preemption_disabled+0x41/0x280 [ 1912.765957] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1912.765971] ? pcpu_alloc+0xc9/0x1190 [ 1912.765987] ? __lockdep_init_map+0x100/0x5a0 [ 1912.766004] mount_fs+0xa3/0x310 [ 1912.766022] vfs_kern_mount.part.0+0x68/0x470 [ 1912.766034] ? kfree+0x110/0x210 [ 1912.766048] vfs_kern_mount+0x3c/0x60 [ 1912.766064] btrfs_mount+0x23a/0xaa0 [ 1912.766081] ? btrfs_show_options+0xfd0/0xfd0 [ 1912.766094] ? __mutex_unlock_slowpath+0xea/0x610 [ 1912.766112] ? check_preemption_disabled+0x41/0x280 [ 1912.766131] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1912.766143] ? pcpu_alloc+0xc9/0x1190 [ 1912.766158] ? __lockdep_init_map+0x100/0x5a0 [ 1912.766174] mount_fs+0xa3/0x310 [ 1912.766198] vfs_kern_mount.part.0+0x68/0x470 [ 1912.766218] do_mount+0x115c/0x2f50 [ 1912.766236] ? cmp_ex_sort+0xc0/0xc0 [ 1912.766253] ? __do_page_fault+0x180/0xd60 [ 1912.766269] ? copy_mount_string+0x40/0x40 [ 1912.766290] ? memset+0x20/0x40 [ 1912.766305] ? copy_mount_options+0x26f/0x380 [ 1912.766323] ksys_mount+0xcf/0x130 [ 1912.766340] __x64_sys_mount+0xba/0x150 [ 1912.766354] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1912.766367] do_syscall_64+0xf9/0x620 [ 1912.766385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1912.766396] RIP: 0033:0x7fa0bfb0461a [ 1912.766410] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1912.766417] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1912.766431] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1912.766439] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1912.766448] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 23:47:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xa}]) [ 1912.766462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1912.766471] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1912.820947] IPVS: ftp: loaded support on port[0] = 21 [ 1912.848227] IPVS: ftp: loaded support on port[0] = 21 23:47:11 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3e7}]) [ 1913.172434] BTRFS error (device loop0): superblock checksum mismatch [ 1913.181839] BTRFS error (device loop0): open_ctree failed 23:47:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xb}]) 23:47:11 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x408}]) 23:47:11 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x6003}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5a030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:12 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xc}]) 23:47:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x486}]) [ 1913.681918] IPVS: ftp: loaded support on port[0] = 21 23:47:12 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xd}]) 23:47:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x500}]) [ 1914.060715] BTRFS error (device loop0): superblock checksum mismatch [ 1914.063037] BTRFS error (device loop0): open_ctree failed 23:47:14 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x100000000000000}, 0x0) unshare(0x0) 23:47:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xe}]) 23:47:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x600}]) 23:47:14 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x6402}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c020000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 49) [ 1915.590019] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.595617] ieee802154 phy1 wpan1: encryption failed: -22 23:47:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x700}]) [ 1915.769185] IPVS: ftp: loaded support on port[0] = 21 [ 1915.784411] IPVS: ftp: loaded support on port[0] = 21 [ 1915.836248] FAULT_INJECTION: forcing a failure. [ 1915.836248] name failslab, interval 1, probability 0, space 0, times 0 23:47:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf}]) [ 1915.911890] CPU: 0 PID: 30624 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1915.911901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1915.911906] Call Trace: [ 1915.911928] dump_stack+0x1fc/0x2ef [ 1915.911948] should_fail.cold+0xa/0xf [ 1915.911967] ? setup_fault_attr+0x200/0x200 23:47:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x10}]) [ 1915.911982] ? lock_acquire+0x170/0x3c0 [ 1915.912002] __should_failslab+0x115/0x180 [ 1915.912020] should_failslab+0x5/0x10 [ 1915.912036] kmem_cache_alloc_trace+0x284/0x380 [ 1915.912053] btrfs_mount_root+0x188/0x1830 [ 1915.912073] ? btrfs_decode_error+0x70/0x70 [ 1915.912089] ? __mutex_unlock_slowpath+0xea/0x610 [ 1915.912117] ? check_preemption_disabled+0x41/0x280 [ 1915.912133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1915.912142] ? pcpu_alloc+0xc9/0x1190 [ 1915.912154] ? __lockdep_init_map+0x100/0x5a0 [ 1915.912167] mount_fs+0xa3/0x310 23:47:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x804}]) [ 1915.912186] vfs_kern_mount.part.0+0x68/0x470 [ 1915.912200] ? kfree+0x110/0x210 [ 1915.912216] vfs_kern_mount+0x3c/0x60 23:47:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x11}]) [ 1915.912231] btrfs_mount+0x23a/0xaa0 [ 1915.912247] ? btrfs_show_options+0xfd0/0xfd0 [ 1915.912259] ? __mutex_unlock_slowpath+0xea/0x610 [ 1915.912277] ? check_preemption_disabled+0x41/0x280 23:47:14 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x200000000000000}, 0x0) unshare(0x0) 23:47:14 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x6601}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1915.912297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1915.912310] ? pcpu_alloc+0xc9/0x1190 23:47:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5e030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1915.912325] ? __lockdep_init_map+0x100/0x5a0 [ 1915.912342] mount_fs+0xa3/0x310 [ 1915.912361] vfs_kern_mount.part.0+0x68/0x470 [ 1915.912379] do_mount+0x115c/0x2f50 23:47:15 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x900}]) [ 1915.912396] ? cmp_ex_sort+0xc0/0xc0 [ 1915.912412] ? __do_page_fault+0x180/0xd60 [ 1915.912428] ? copy_mount_string+0x40/0x40 [ 1915.912449] ? memset+0x20/0x40 [ 1915.912464] ? copy_mount_options+0x26f/0x380 [ 1915.912481] ksys_mount+0xcf/0x130 [ 1915.912494] __x64_sys_mount+0xba/0x150 23:47:15 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x12}]) [ 1915.912508] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1915.912521] do_syscall_64+0xf9/0x620 [ 1915.912538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1915.912548] RIP: 0033:0x7fa0bfb0461a [ 1915.912562] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1915.912570] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 23:47:15 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xa00}]) [ 1915.912583] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1915.912590] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1915.912598] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1915.912607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1915.912615] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1916.026745] BTRFS error (device loop0): superblock checksum mismatch [ 1916.054035] BTRFS error (device loop0): open_ctree failed [ 1916.668934] IPVS: ftp: loaded support on port[0] = 21 [ 1916.796363] IPVS: ftp: loaded support on port[0] = 21 [ 1917.158290] BTRFS error (device loop0): superblock checksum mismatch [ 1917.161402] BTRFS error (device loop0): open_ctree failed 23:47:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 50) 23:47:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x13}]) 23:47:16 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x7703}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xb00}]) 23:47:16 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x400000000000000}, 0x0) unshare(0x0) 23:47:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60010000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x14}]) [ 1918.309087] IPVS: ftp: loaded support on port[0] = 21 23:47:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xc00}]) 23:47:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x15}]) [ 1918.357221] IPVS: ftp: loaded support on port[0] = 21 [ 1918.392001] BTRFS error (device loop0): superblock checksum mismatch 23:47:17 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xd00}]) [ 1918.406528] FAULT_INJECTION: forcing a failure. [ 1918.406528] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.406547] CPU: 1 PID: 30801 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:47:17 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x16}]) [ 1918.406556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1918.406561] Call Trace: [ 1918.406583] dump_stack+0x1fc/0x2ef 23:47:17 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xe00}]) [ 1918.406604] should_fail.cold+0xa/0xf [ 1918.406623] ? setup_fault_attr+0x200/0x200 [ 1918.406639] ? lock_acquire+0x170/0x3c0 [ 1918.406666] __should_failslab+0x115/0x180 [ 1918.406684] should_failslab+0x5/0x10 [ 1918.406699] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1918.406718] __kmalloc_node+0x38/0x70 [ 1918.406735] kvmalloc_node+0xb4/0xf0 [ 1918.406754] btrfs_mount_root+0x13f/0x1830 [ 1918.406777] ? btrfs_decode_error+0x70/0x70 [ 1918.406799] ? __mutex_unlock_slowpath+0xea/0x610 [ 1918.406820] ? check_preemption_disabled+0x41/0x280 [ 1918.406842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1918.406856] ? pcpu_alloc+0xc9/0x1190 [ 1918.406872] ? __lockdep_init_map+0x100/0x5a0 [ 1918.406891] mount_fs+0xa3/0x310 [ 1918.406910] vfs_kern_mount.part.0+0x68/0x470 [ 1918.406923] ? kfree+0x110/0x210 [ 1918.406940] vfs_kern_mount+0x3c/0x60 [ 1918.406957] btrfs_mount+0x23a/0xaa0 [ 1918.406974] ? btrfs_show_options+0xfd0/0xfd0 [ 1918.406987] ? __mutex_unlock_slowpath+0xea/0x610 [ 1918.407006] ? check_preemption_disabled+0x41/0x280 [ 1918.407027] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1918.407041] ? pcpu_alloc+0xc9/0x1190 [ 1918.407057] ? __lockdep_init_map+0x100/0x5a0 [ 1918.407074] mount_fs+0xa3/0x310 [ 1918.407092] vfs_kern_mount.part.0+0x68/0x470 [ 1918.407111] do_mount+0x115c/0x2f50 [ 1918.407127] ? cmp_ex_sort+0xc0/0xc0 [ 1918.407144] ? __do_page_fault+0x180/0xd60 [ 1918.407160] ? copy_mount_string+0x40/0x40 [ 1918.407183] ? memset+0x20/0x40 [ 1918.407198] ? copy_mount_options+0x26f/0x380 [ 1918.407217] ksys_mount+0xcf/0x130 [ 1918.407234] __x64_sys_mount+0xba/0x150 [ 1918.407250] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1918.407264] do_syscall_64+0xf9/0x620 [ 1918.407283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1918.407294] RIP: 0033:0x7fa0bfb0461a [ 1918.407307] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1918.407315] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1918.407328] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1918.407337] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1918.407345] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 23:47:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 51) 23:47:17 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x18}]) 23:47:17 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf00}]) 23:47:17 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x80fe}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:17 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x600000000000000}, 0x0) unshare(0x0) [ 1918.407353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1918.407362] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1918.419209] BTRFS error (device loop0): open_ctree failed [ 1918.509380] BTRFS error (device loop5): superblock checksum mismatch [ 1918.548626] BTRFS error (device loop5): open_ctree failed [ 1919.217511] IPVS: ftp: loaded support on port[0] = 21 [ 1919.219431] IPVS: ftp: loaded support on port[0] = 21 [ 1919.299827] FAULT_INJECTION: forcing a failure. [ 1919.299827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1919.299854] CPU: 1 PID: 30895 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1919.299862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.299867] Call Trace: [ 1919.299887] dump_stack+0x1fc/0x2ef [ 1919.299907] should_fail.cold+0xa/0xf [ 1919.299925] ? setup_fault_attr+0x200/0x200 [ 1919.299950] __alloc_pages_nodemask+0x239/0x2890 [ 1919.299963] ? __save_stack_trace+0x72/0x190 [ 1919.299977] ? deref_stack_reg+0x134/0x1d0 [ 1919.299993] ? mark_held_locks+0xf0/0xf0 [ 1919.300008] ? unwind_next_frame+0xeee/0x1400 [ 1919.300026] ? __lock_acquire+0x6de/0x3ff0 [ 1919.300048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1919.300060] ? is_bpf_text_address+0xd5/0x1b0 [ 1919.300079] ? __bpf_address_lookup+0x330/0x330 [ 1919.300094] ? check_preemption_disabled+0x41/0x280 [ 1919.300112] ? is_bpf_text_address+0xfc/0x1b0 [ 1919.300128] ? kernel_text_address+0xbd/0xf0 [ 1919.300146] cache_grow_begin+0xa4/0x8a0 [ 1919.300161] ? setup_fault_attr+0x200/0x200 [ 1919.300174] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1919.300190] cache_alloc_refill+0x273/0x340 [ 1919.300209] kmem_cache_alloc+0x346/0x370 [ 1919.300227] getname_kernel+0x4e/0x370 [ 1919.300241] kern_path+0x1b/0x40 [ 1919.300255] lookup_bdev+0xfc/0x220 [ 1919.300267] ? bd_acquire+0x440/0x440 [ 1919.300280] ? debug_check_no_obj_freed+0x201/0x490 [ 1919.300300] blkdev_get_by_path+0x1b/0xd0 [ 1919.300316] btrfs_scan_one_device+0xd0/0xd00 [ 1919.300335] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1919.300349] ? debug_check_no_obj_freed+0x201/0x490 [ 1919.300365] ? device_list_add+0xdd0/0xdd0 [ 1919.300378] ? kfree+0x110/0x210 [ 1919.300393] ? btrfs_mount_root+0x107a/0x1830 [ 1919.300408] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1919.300426] btrfs_mount_root+0x9df/0x1830 [ 1919.300450] ? btrfs_decode_error+0x70/0x70 [ 1919.300464] ? __mutex_unlock_slowpath+0xea/0x610 [ 1919.300484] ? check_preemption_disabled+0x41/0x280 [ 1919.300504] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1919.300518] ? pcpu_alloc+0xc9/0x1190 [ 1919.300534] ? __lockdep_init_map+0x100/0x5a0 [ 1919.300551] mount_fs+0xa3/0x310 [ 1919.300577] vfs_kern_mount.part.0+0x68/0x470 [ 1919.300591] ? kfree+0x110/0x210 [ 1919.300609] vfs_kern_mount+0x3c/0x60 [ 1919.300626] btrfs_mount+0x23a/0xaa0 [ 1919.300645] ? btrfs_show_options+0xfd0/0xfd0 [ 1919.300665] ? __mutex_unlock_slowpath+0xea/0x610 [ 1919.300685] ? check_preemption_disabled+0x41/0x280 [ 1919.300707] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1919.300722] ? pcpu_alloc+0xc9/0x1190 [ 1919.300737] ? __lockdep_init_map+0x100/0x5a0 [ 1919.300754] mount_fs+0xa3/0x310 [ 1919.300774] vfs_kern_mount.part.0+0x68/0x470 [ 1919.300792] do_mount+0x115c/0x2f50 [ 1919.300810] ? cmp_ex_sort+0xc0/0xc0 [ 1919.300826] ? __do_page_fault+0x180/0xd60 [ 1919.300843] ? copy_mount_string+0x40/0x40 [ 1919.300864] ? memset+0x20/0x40 [ 1919.300880] ? copy_mount_options+0x26f/0x380 [ 1919.300899] ksys_mount+0xcf/0x130 [ 1919.300916] __x64_sys_mount+0xba/0x150 [ 1919.300931] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1919.300945] do_syscall_64+0xf9/0x620 [ 1919.300963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1919.300975] RIP: 0033:0x7fa0bfb0461a [ 1919.300988] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1919.300996] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1919.301009] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1919.301018] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1919.301026] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1919.301035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1919.301044] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:19 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x23}]) 23:47:19 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1100}]) 23:47:19 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x800000000000000}, 0x0) unshare(0x0) 23:47:19 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x8100}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x62000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 52) [ 1920.852756] IPVS: ftp: loaded support on port[0] = 21 23:47:19 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1200}]) 23:47:19 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x30}]) [ 1920.882621] IPVS: ftp: loaded support on port[0] = 21 [ 1920.985094] FAULT_INJECTION: forcing a failure. [ 1920.985094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:47:19 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3d}]) 23:47:19 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1300}]) [ 1920.985113] CPU: 0 PID: 30954 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1920.985122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:47:19 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x52}]) [ 1920.985127] Call Trace: [ 1920.985148] dump_stack+0x1fc/0x2ef [ 1920.985168] should_fail.cold+0xa/0xf 23:47:19 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1400}]) [ 1920.985186] ? setup_fault_attr+0x200/0x200 [ 1920.985209] __alloc_pages_nodemask+0x239/0x2890 [ 1920.985223] ? deref_stack_reg+0x134/0x1d0 23:47:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x60}]) [ 1920.985239] ? mark_held_locks+0xf0/0xf0 [ 1920.985254] ? unwind_next_frame+0xeee/0x1400 23:47:20 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1500}]) [ 1920.985270] ? __lock_acquire+0x6de/0x3ff0 [ 1920.985289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1920.985302] ? is_bpf_text_address+0xd5/0x1b0 23:47:20 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa00000000000000}, 0x0) unshare(0x0) [ 1920.985322] ? mark_held_locks+0xa6/0xf0 23:47:20 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x8600}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:20 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x90}]) [ 1920.985337] ? check_preemption_disabled+0x41/0x280 [ 1920.985351] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985367] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1920.985381] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985398] ? rcu_nmi_exit+0xb3/0x180 [ 1920.985416] cache_grow_begin+0xa4/0x8a0 [ 1920.985431] ? setup_fault_attr+0x200/0x200 [ 1920.985445] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1920.985462] cache_alloc_refill+0x273/0x340 [ 1920.985482] kmem_cache_alloc+0x346/0x370 [ 1920.985500] getname_kernel+0x4e/0x370 [ 1920.985514] kern_path+0x1b/0x40 [ 1920.985537] lookup_bdev+0xfc/0x220 [ 1920.985551] ? bd_acquire+0x440/0x440 [ 1920.985566] ? mark_held_locks+0xa6/0xf0 [ 1920.985581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985599] blkdev_get_by_path+0x1b/0xd0 [ 1920.985616] btrfs_scan_one_device+0xd0/0xd00 [ 1920.985633] ? retint_kernel+0x2d/0x2d [ 1920.985650] ? btrfs_mount_root+0x107a/0x1830 [ 1920.985667] ? device_list_add+0xdd0/0xdd0 [ 1920.985682] ? kfree+0x123/0x210 [ 1920.985703] btrfs_mount_root+0x9df/0x1830 [ 1920.985726] ? btrfs_decode_error+0x70/0x70 [ 1920.985739] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985756] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1920.985770] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985790] ? retint_kernel+0x2d/0x2d [ 1920.985814] mount_fs+0xa3/0x310 [ 1920.985833] vfs_kern_mount.part.0+0x68/0x470 [ 1920.985850] vfs_kern_mount+0x3c/0x60 [ 1920.985866] btrfs_mount+0x23a/0xaa0 [ 1920.985884] ? btrfs_show_options+0xfd0/0xfd0 [ 1920.985899] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1920.985913] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1920.985929] ? rcu_nmi_exit+0xb3/0x180 [ 1920.985945] ? retint_kernel+0x2d/0x2d [ 1920.985964] ? mount_fs+0x1f/0x310 [ 1920.985980] mount_fs+0xa3/0x310 [ 1920.985998] vfs_kern_mount.part.0+0x68/0x470 [ 1920.986016] do_mount+0x115c/0x2f50 [ 1920.986032] ? cmp_ex_sort+0xc0/0xc0 [ 1920.986049] ? __do_page_fault+0x180/0xd60 [ 1920.986064] ? copy_mount_string+0x40/0x40 [ 1920.986087] ? memset+0x20/0x40 [ 1920.986102] ? copy_mount_options+0x26f/0x380 [ 1920.986120] ksys_mount+0xcf/0x130 [ 1920.986137] __x64_sys_mount+0xba/0x150 [ 1920.986153] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1920.986166] do_syscall_64+0xf9/0x620 [ 1920.986184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1920.986196] RIP: 0033:0x7fa0bfb0461a [ 1920.986210] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1920.986218] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1920.986231] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1920.986240] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1920.986248] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1920.986256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1920.986265] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1921.051662] BTRFS error (device loop5): superblock checksum mismatch [ 1921.051892] BTRFS error (device loop5): open_ctree failed [ 1921.068414] BTRFS error (device loop5): superblock checksum mismatch [ 1921.080912] BTRFS error (device loop5): open_ctree failed [ 1921.868119] IPVS: ftp: loaded support on port[0] = 21 [ 1921.888786] IPVS: ftp: loaded support on port[0] = 21 23:47:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 53) 23:47:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6211f7f6, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1600}]) 23:47:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf0}]) 23:47:22 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x8601}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:22 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xa17000000000000}, 0x0) unshare(0x0) [ 1923.743481] IPVS: ftp: loaded support on port[0] = 21 23:47:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1fe}]) 23:47:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1800}]) [ 1923.775281] IPVS: ftp: loaded support on port[0] = 21 [ 1923.903861] FAULT_INJECTION: forcing a failure. [ 1923.903861] name failslab, interval 1, probability 0, space 0, times 0 23:47:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1f00}]) 23:47:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x300}]) [ 1923.903881] CPU: 1 PID: 31112 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1923.903890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.903894] Call Trace: [ 1923.903915] dump_stack+0x1fc/0x2ef [ 1923.903936] should_fail.cold+0xa/0xf 23:47:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2000}]) [ 1923.903956] ? setup_fault_attr+0x200/0x200 [ 1923.903971] ? lock_acquire+0x170/0x3c0 [ 1923.903993] __should_failslab+0x115/0x180 [ 1923.904011] should_failslab+0x5/0x10 23:47:22 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3e7}]) [ 1923.904026] __kmalloc_track_caller+0x2a6/0x3c0 [ 1923.904041] ? btrfs_mount_root+0x364/0x1830 [ 1923.904059] kstrdup+0x36/0x70 [ 1923.904075] btrfs_mount_root+0x364/0x1830 [ 1923.904097] ? btrfs_decode_error+0x70/0x70 [ 1923.904113] ? __mutex_unlock_slowpath+0xea/0x610 [ 1923.904133] ? check_preemption_disabled+0x41/0x280 [ 1923.904154] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1923.904168] ? pcpu_alloc+0xc9/0x1190 [ 1923.904185] ? __lockdep_init_map+0x100/0x5a0 [ 1923.904210] mount_fs+0xa3/0x310 [ 1923.904231] vfs_kern_mount.part.0+0x68/0x470 [ 1923.904245] ? kfree+0x110/0x210 [ 1923.904266] vfs_kern_mount+0x3c/0x60 [ 1923.904284] btrfs_mount+0x23a/0xaa0 [ 1923.904301] ? btrfs_show_options+0xfd0/0xfd0 [ 1923.904313] ? __mutex_unlock_slowpath+0xea/0x610 [ 1923.904331] ? check_preemption_disabled+0x41/0x280 [ 1923.904351] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1923.904365] ? pcpu_alloc+0xc9/0x1190 [ 1923.904381] ? __lockdep_init_map+0x100/0x5a0 [ 1923.904399] mount_fs+0xa3/0x310 [ 1923.904418] vfs_kern_mount.part.0+0x68/0x470 [ 1923.904436] do_mount+0x115c/0x2f50 [ 1923.904452] ? cmp_ex_sort+0xc0/0xc0 [ 1923.904469] ? __do_page_fault+0x180/0xd60 [ 1923.904485] ? copy_mount_string+0x40/0x40 [ 1923.904506] ? memset+0x20/0x40 [ 1923.904522] ? copy_mount_options+0x26f/0x380 [ 1923.904540] ksys_mount+0xcf/0x130 [ 1923.904557] __x64_sys_mount+0xba/0x150 [ 1923.904574] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1923.904587] do_syscall_64+0xf9/0x620 [ 1923.904606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1923.904618] RIP: 0033:0x7fa0bfb0461a [ 1923.904632] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1923.904640] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1923.904661] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1923.904670] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1923.904679] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1923.904687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1923.904695] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1923.919117] BTRFS error (device loop5): superblock checksum mismatch [ 1923.920821] BTRFS error (device loop5): open_ctree failed 23:47:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 54) 23:47:23 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xa801}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:23 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x408}]) 23:47:23 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2300}]) 23:47:23 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xc00000000000000}, 0x0) unshare(0x0) 23:47:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x64000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:23 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3f00}]) [ 1925.408640] IPVS: ftp: loaded support on port[0] = 21 23:47:23 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x500}]) [ 1925.460075] IPVS: ftp: loaded support on port[0] = 21 [ 1925.490677] BTRFS error (device loop0): superblock checksum mismatch 23:47:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x4000}]) [ 1925.491276] BTRFS error (device loop0): open_ctree failed [ 1925.521610] FAULT_INJECTION: forcing a failure. [ 1925.521610] name failslab, interval 1, probability 0, space 0, times 0 23:47:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x586}]) [ 1925.521630] CPU: 1 PID: 31216 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1925.521639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.521644] Call Trace: [ 1925.521664] dump_stack+0x1fc/0x2ef [ 1925.521685] should_fail.cold+0xa/0xf 23:47:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x8008}]) [ 1925.521704] ? setup_fault_attr+0x200/0x200 [ 1925.521720] ? lock_acquire+0x170/0x3c0 [ 1925.521742] __should_failslab+0x115/0x180 23:47:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x600}]) [ 1925.521760] should_failslab+0x5/0x10 [ 1925.521775] __kmalloc_track_caller+0x2a6/0x3c0 [ 1925.521790] ? btrfs_mount_root+0x364/0x1830 [ 1925.521809] kstrdup+0x36/0x70 [ 1925.521826] btrfs_mount_root+0x364/0x1830 [ 1925.521847] ? btrfs_decode_error+0x70/0x70 [ 1925.521863] ? __mutex_unlock_slowpath+0xea/0x610 [ 1925.521883] ? check_preemption_disabled+0x41/0x280 [ 1925.521905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1925.521919] ? pcpu_alloc+0xc9/0x1190 [ 1925.521935] ? __lockdep_init_map+0x100/0x5a0 [ 1925.521953] mount_fs+0xa3/0x310 [ 1925.521972] vfs_kern_mount.part.0+0x68/0x470 [ 1925.521985] ? kfree+0x110/0x210 [ 1925.522003] vfs_kern_mount+0x3c/0x60 [ 1925.522020] btrfs_mount+0x23a/0xaa0 [ 1925.522037] ? btrfs_show_options+0xfd0/0xfd0 [ 1925.522049] ? __mutex_unlock_slowpath+0xea/0x610 [ 1925.522068] ? check_preemption_disabled+0x41/0x280 [ 1925.522089] ? rcu_read_lock_sched_held+0x16c/0x1d0 23:47:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 55) 23:47:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x81fd}]) 23:47:24 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xe00000000000000}, 0x0) unshare(0x0) 23:47:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x700}]) 23:47:24 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xb603}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1925.522103] ? pcpu_alloc+0xc9/0x1190 [ 1925.522119] ? __lockdep_init_map+0x100/0x5a0 [ 1925.522138] mount_fs+0xa3/0x310 [ 1925.522157] vfs_kern_mount.part.0+0x68/0x470 [ 1925.522176] do_mount+0x115c/0x2f50 [ 1925.522193] ? cmp_ex_sort+0xc0/0xc0 [ 1925.522209] ? __do_page_fault+0x180/0xd60 [ 1925.522225] ? copy_mount_string+0x40/0x40 [ 1925.522248] ? memset+0x20/0x40 [ 1925.522263] ? copy_mount_options+0x26f/0x380 [ 1925.522282] ksys_mount+0xcf/0x130 [ 1925.522299] __x64_sys_mount+0xba/0x150 [ 1925.522315] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1925.522328] do_syscall_64+0xf9/0x620 [ 1925.522346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1925.522358] RIP: 0033:0x7fa0bfb0461a [ 1925.522373] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1925.522380] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1925.522393] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1925.522401] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1925.522409] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1925.522417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1925.522425] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1926.452827] IPVS: ftp: loaded support on port[0] = 21 [ 1926.473071] IPVS: ftp: loaded support on port[0] = 21 [ 1926.570389] FAULT_INJECTION: forcing a failure. [ 1926.570389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1926.570407] CPU: 0 PID: 31288 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1926.570416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.570421] Call Trace: [ 1926.570441] dump_stack+0x1fc/0x2ef [ 1926.570460] should_fail.cold+0xa/0xf [ 1926.570479] ? setup_fault_attr+0x200/0x200 [ 1926.570506] __alloc_pages_nodemask+0x239/0x2890 [ 1926.570524] ? mark_held_locks+0xf0/0xf0 [ 1926.570541] ? unwind_next_frame+0xeee/0x1400 [ 1926.570560] ? __lock_acquire+0x6de/0x3ff0 [ 1926.570583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1926.570597] ? is_bpf_text_address+0xd5/0x1b0 [ 1926.570617] ? __bpf_address_lookup+0x330/0x330 [ 1926.570633] ? check_preemption_disabled+0x41/0x280 [ 1926.570651] ? is_bpf_text_address+0xfc/0x1b0 [ 1926.570668] ? kernel_text_address+0xbd/0xf0 [ 1926.570687] cache_grow_begin+0xa4/0x8a0 [ 1926.570702] ? setup_fault_attr+0x200/0x200 [ 1926.570714] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1926.570731] cache_alloc_refill+0x273/0x340 [ 1926.570749] kmem_cache_alloc+0x346/0x370 [ 1926.570766] getname_kernel+0x4e/0x370 [ 1926.570779] kern_path+0x1b/0x40 [ 1926.570793] lookup_bdev+0xfc/0x220 [ 1926.570804] ? bd_acquire+0x440/0x440 [ 1926.570822] ? mark_held_locks+0xa6/0xf0 [ 1926.570839] blkdev_get_by_path+0x1b/0xd0 [ 1926.570855] btrfs_scan_one_device+0xd0/0xd00 [ 1926.570870] ? rcu_nmi_exit+0xb3/0x180 [ 1926.570886] ? retint_kernel+0x2d/0x2d [ 1926.570901] ? device_list_add+0xdd0/0xdd0 [ 1926.570924] btrfs_mount_root+0x9df/0x1830 [ 1926.570954] ? btrfs_decode_error+0x70/0x70 [ 1926.570972] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1926.570988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1926.571010] ? retint_kernel+0x2d/0x2d [ 1926.571035] mount_fs+0xa3/0x310 [ 1926.571054] vfs_kern_mount.part.0+0x68/0x470 [ 1926.571071] vfs_kern_mount+0x3c/0x60 [ 1926.571089] btrfs_mount+0x23a/0xaa0 [ 1926.571106] ? btrfs_show_options+0xfd0/0xfd0 [ 1926.571118] ? __mutex_unlock_slowpath+0xea/0x610 [ 1926.571138] ? check_preemption_disabled+0x41/0x280 [ 1926.571159] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1926.571174] ? pcpu_alloc+0xc9/0x1190 [ 1926.571190] ? __lockdep_init_map+0x100/0x5a0 [ 1926.571207] mount_fs+0xa3/0x310 [ 1926.571227] vfs_kern_mount.part.0+0x68/0x470 [ 1926.571245] do_mount+0x115c/0x2f50 [ 1926.571262] ? cmp_ex_sort+0xc0/0xc0 [ 1926.571278] ? __do_page_fault+0x180/0xd60 [ 1926.571295] ? copy_mount_string+0x40/0x40 [ 1926.571317] ? memset+0x20/0x40 [ 1926.571333] ? copy_mount_options+0x26f/0x380 [ 1926.571351] ksys_mount+0xcf/0x130 [ 1926.571368] __x64_sys_mount+0xba/0x150 [ 1926.571384] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1926.571398] do_syscall_64+0xf9/0x620 [ 1926.571416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1926.571427] RIP: 0033:0x7fa0bfb0461a [ 1926.571442] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1926.571450] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1926.571464] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1926.571473] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1926.571482] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1926.571490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1926.571499] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x660a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x8300}]) 23:47:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x804}]) 23:47:26 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x1000000000000000}, 0x0) unshare(0x0) 23:47:26 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xc0fe}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 56) [ 1928.177457] IPVS: ftp: loaded support on port[0] = 21 [ 1928.182654] IPVS: ftp: loaded support on port[0] = 21 23:47:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x900}]) 23:47:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x8604}]) [ 1928.281498] FAULT_INJECTION: forcing a failure. [ 1928.281498] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.281519] CPU: 1 PID: 31364 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:47:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xa00}]) 23:47:26 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x9000}]) [ 1928.281528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1928.281534] Call Trace: [ 1928.281554] dump_stack+0x1fc/0x2ef [ 1928.281575] should_fail.cold+0xa/0xf [ 1928.281591] ? vfs_kern_mount+0x3c/0x60 [ 1928.281607] ? setup_fault_attr+0x200/0x200 [ 1928.281621] ? blk_queue_enter+0x40b/0xb70 [ 1928.281643] __should_failslab+0x115/0x180 [ 1928.281660] should_failslab+0x5/0x10 23:47:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xb00}]) 23:47:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xe703}]) [ 1928.281674] kmem_cache_alloc_node+0x54/0x3b0 [ 1928.281693] create_task_io_context+0x2c/0x430 [ 1928.281711] generic_make_request_checks+0x1c4f/0x22e0 [ 1928.281733] ? should_fail_bio.isra.0+0xa0/0xa0 [ 1928.281749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1928.281763] ? kmem_cache_alloc+0x315/0x370 [ 1928.281784] generic_make_request+0x23f/0xdf0 [ 1928.281803] ? blk_put_request+0x110/0x110 [ 1928.281818] ? check_preemption_disabled+0x41/0x280 [ 1928.281837] ? alloc_buffer_head+0x20/0x130 [ 1928.281857] submit_bio+0xb1/0x430 [ 1928.281874] ? generic_make_request+0xdf0/0xdf0 [ 1928.281889] ? check_preemption_disabled+0x41/0x280 [ 1928.281909] ? guard_bio_eod+0x2a0/0x650 [ 1928.281926] submit_bh_wbc+0x5a7/0x760 [ 1928.281944] block_read_full_page+0x7cf/0xd10 [ 1928.281960] ? block_llseek+0xc0/0xc0 [ 1928.281979] ? __bread_gfp+0x300/0x300 [ 1928.281999] ? add_to_page_cache_locked+0x40/0x40 [ 1928.282027] do_read_cache_page+0x533/0x1170 [ 1928.282042] ? blkdev_writepages+0x20/0x20 [ 1928.282060] btrfs_scan_one_device+0x195/0xd00 [ 1928.282080] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1928.282094] ? debug_check_no_obj_freed+0x201/0x490 [ 1928.282111] ? device_list_add+0xdd0/0xdd0 [ 1928.282123] ? kfree+0x110/0x210 [ 1928.282139] ? btrfs_mount_root+0x107a/0x1830 [ 1928.282155] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1928.282174] btrfs_mount_root+0x9df/0x1830 [ 1928.282196] ? btrfs_decode_error+0x70/0x70 [ 1928.282212] ? __mutex_unlock_slowpath+0xea/0x610 [ 1928.282237] ? check_preemption_disabled+0x41/0x280 [ 1928.282258] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1928.282274] ? pcpu_alloc+0xc9/0x1190 23:47:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6a030000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:27 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xc402}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:27 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6000000000000000}, 0x0) unshare(0x0) 23:47:27 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xc00}]) 23:47:27 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf0ff}]) [ 1928.282290] ? __lockdep_init_map+0x100/0x5a0 [ 1928.282309] mount_fs+0xa3/0x310 [ 1928.282329] vfs_kern_mount.part.0+0x68/0x470 [ 1928.282341] ? kfree+0x110/0x210 [ 1928.282358] vfs_kern_mount+0x3c/0x60 [ 1928.282375] btrfs_mount+0x23a/0xaa0 [ 1928.282393] ? btrfs_show_options+0xfd0/0xfd0 [ 1928.282405] ? __mutex_unlock_slowpath+0xea/0x610 [ 1928.282424] ? check_preemption_disabled+0x41/0x280 [ 1928.282445] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1928.282459] ? pcpu_alloc+0xc9/0x1190 [ 1928.282475] ? __lockdep_init_map+0x100/0x5a0 [ 1928.282492] mount_fs+0xa3/0x310 [ 1928.282511] vfs_kern_mount.part.0+0x68/0x470 [ 1928.282529] do_mount+0x115c/0x2f50 [ 1928.282546] ? cmp_ex_sort+0xc0/0xc0 [ 1928.282563] ? __do_page_fault+0x180/0xd60 [ 1928.282579] ? copy_mount_string+0x40/0x40 [ 1928.282600] ? memset+0x20/0x40 [ 1928.282616] ? copy_mount_options+0x26f/0x380 [ 1928.282634] ksys_mount+0xcf/0x130 [ 1928.282651] __x64_sys_mount+0xba/0x150 [ 1928.282668] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1928.282681] do_syscall_64+0xf9/0x620 [ 1928.282700] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1928.282712] RIP: 0033:0x7fa0bfb0461a [ 1928.282726] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1928.282733] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1928.282748] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1928.282757] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1928.282765] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1928.282774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1928.282782] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1928.346639] BTRFS error (device loop5): superblock checksum mismatch [ 1928.347672] BTRFS error (device loop5): open_ctree failed [ 1928.416463] BTRFS error (device loop0): superblock checksum mismatch [ 1928.416940] BTRFS error (device loop0): open_ctree failed [ 1929.236046] IPVS: ftp: loaded support on port[0] = 21 [ 1929.253234] IPVS: ftp: loaded support on port[0] = 21 [ 1929.434754] BTRFS error (device loop0): superblock checksum mismatch [ 1929.435800] BTRFS error (device loop0): open_ctree failed 23:47:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 57) 23:47:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xd00}]) 23:47:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xfd81}]) 23:47:29 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xdc00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:29 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x6558000000000000}, 0x0) unshare(0x0) 23:47:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6e000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) [ 1930.711786] IPVS: ftp: loaded support on port[0] = 21 [ 1930.718219] IPVS: ftp: loaded support on port[0] = 21 23:47:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xfe01}]) 23:47:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xe00}]) 23:47:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xf00}]) 23:47:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xff01}]) [ 1930.892488] BTRFS error (device loop5): superblock checksum mismatch [ 1930.909844] BTRFS error (device loop5): open_ctree failed [ 1930.912116] FAULT_INJECTION: forcing a failure. [ 1930.912116] name failslab, interval 1, probability 0, space 0, times 0 23:47:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1100}]) [ 1930.912208] CPU: 1 PID: 31536 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1930.912216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.912221] Call Trace: [ 1930.912241] dump_stack+0x1fc/0x2ef [ 1930.912262] should_fail.cold+0xa/0xf 23:47:29 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xff0f}]) [ 1930.912288] ? setup_fault_attr+0x200/0x200 [ 1930.912306] ? __lock_acquire+0x6de/0x3ff0 [ 1930.912327] __should_failslab+0x115/0x180 [ 1930.912344] should_failslab+0x5/0x10 [ 1930.912357] kmem_cache_alloc+0x3f/0x370 [ 1930.912375] radix_tree_node_alloc.constprop.0+0x1e4/0x320 [ 1930.912393] __radix_tree_create+0x314/0x540 [ 1930.912417] page_cache_tree_insert+0xac/0x3f0 [ 1930.912435] ? file_check_and_advance_wb_err+0x3a0/0x3a0 [ 1930.912450] ? lock_acquire+0x170/0x3c0 [ 1930.912465] ? __add_to_page_cache_locked+0x45e/0xb60 [ 1930.912495] __add_to_page_cache_locked+0x46e/0xb60 [ 1930.912515] ? page_cache_tree_insert+0x3f0/0x3f0 [ 1930.912538] add_to_page_cache_lru+0x16a/0x680 [ 1930.912555] ? add_to_page_cache_locked+0x40/0x40 [ 1930.912577] pagecache_get_page+0x478/0xd50 [ 1930.912598] __getblk_slow+0x216/0x9e0 [ 1930.912623] __bread_gfp+0x218/0x300 [ 1930.912640] btrfs_read_dev_super+0x8a/0x230 [ 1930.912653] btrfs_get_bdev_and_sb+0xf6/0x2f0 [ 1930.912667] open_fs_devices+0x5a3/0xa50 [ 1930.912685] ? find_fsid+0xb0/0xb0 [ 1930.912710] btrfs_open_devices+0x114/0x150 [ 1930.912728] btrfs_mount_root+0xa60/0x1830 [ 1930.912746] ? btrfs_decode_error+0x70/0x70 [ 1930.912759] ? __mutex_unlock_slowpath+0xea/0x610 23:47:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 58) 23:47:30 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x8100000000000000}, 0x0) unshare(0x0) 23:47:30 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xf000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:30 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1200}]) 23:47:30 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0xfff0}]) [ 1930.912776] ? check_preemption_disabled+0x41/0x280 [ 1930.912796] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1930.912808] ? pcpu_alloc+0xc9/0x1190 [ 1930.912821] ? __lockdep_init_map+0x100/0x5a0 [ 1930.912837] mount_fs+0xa3/0x310 [ 1930.912856] vfs_kern_mount.part.0+0x68/0x470 [ 1930.912869] ? kfree+0x110/0x210 [ 1930.912884] vfs_kern_mount+0x3c/0x60 [ 1930.912900] btrfs_mount+0x23a/0xaa0 [ 1930.912917] ? btrfs_show_options+0xfd0/0xfd0 [ 1930.912929] ? __mutex_unlock_slowpath+0xea/0x610 [ 1930.912947] ? check_preemption_disabled+0x41/0x280 [ 1930.912967] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1930.912979] ? pcpu_alloc+0xc9/0x1190 [ 1930.912995] ? __lockdep_init_map+0x100/0x5a0 [ 1930.913011] mount_fs+0xa3/0x310 [ 1930.913028] vfs_kern_mount.part.0+0x68/0x470 [ 1930.913046] do_mount+0x115c/0x2f50 [ 1930.913062] ? cmp_ex_sort+0xc0/0xc0 [ 1930.913078] ? __do_page_fault+0x180/0xd60 [ 1930.913094] ? copy_mount_string+0x40/0x40 [ 1930.913116] ? memset+0x20/0x40 [ 1930.913129] ? copy_mount_options+0x26f/0x380 [ 1930.913147] ksys_mount+0xcf/0x130 [ 1930.913164] __x64_sys_mount+0xba/0x150 [ 1930.913178] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1930.913192] do_syscall_64+0xf9/0x620 [ 1930.913210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1930.913222] RIP: 0033:0x7fa0bfb0461a [ 1930.913237] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1930.913245] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1930.913259] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1930.913268] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1930.913277] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1930.913285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1930.913294] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1930.997611] BTRFS error (device loop5): superblock checksum mismatch [ 1931.038137] BTRFS error (device loop5): open_ctree failed [ 1931.680036] IPVS: ftp: loaded support on port[0] = 21 [ 1931.691990] IPVS: ftp: loaded support on port[0] = 21 [ 1931.987389] FAULT_INJECTION: forcing a failure. [ 1931.987389] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.093491] CPU: 0 PID: 31639 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1932.093500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1932.093504] Call Trace: [ 1932.093526] dump_stack+0x1fc/0x2ef [ 1932.093544] should_fail.cold+0xa/0xf [ 1932.093562] ? setup_fault_attr+0x200/0x200 [ 1932.093578] ? lock_acquire+0x170/0x3c0 [ 1932.093597] __should_failslab+0x115/0x180 [ 1932.093614] should_failslab+0x5/0x10 [ 1932.093628] kmem_cache_alloc+0x277/0x370 [ 1932.093645] getname_kernel+0x4e/0x370 [ 1932.093659] kern_path+0x1b/0x40 [ 1932.093672] lookup_bdev+0xfc/0x220 [ 1932.093684] ? bd_acquire+0x440/0x440 [ 1932.093700] ? retint_kernel+0x2d/0x2d [ 1932.093717] blkdev_get_by_path+0x1b/0xd0 [ 1932.093732] btrfs_get_bdev_and_sb+0x2f/0x2f0 [ 1932.093747] open_fs_devices+0x5a3/0xa50 [ 1932.093766] ? find_fsid+0xb0/0xb0 [ 1932.093780] ? btrfs_mount_root+0x107a/0x1830 [ 1932.093803] btrfs_open_devices+0x114/0x150 [ 1932.093819] btrfs_mount_root+0xa60/0x1830 [ 1932.093841] ? btrfs_decode_error+0x70/0x70 [ 1932.093857] ? retint_kernel+0x2d/0x2d [ 1932.093876] ? check_preemption_disabled+0x41/0x280 [ 1932.093896] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1932.093910] ? pcpu_alloc+0xc9/0x1190 [ 1932.093924] ? __lockdep_init_map+0x100/0x5a0 [ 1932.093941] mount_fs+0xa3/0x310 [ 1932.093965] vfs_kern_mount.part.0+0x68/0x470 [ 1932.093983] vfs_kern_mount+0x3c/0x60 [ 1932.094000] btrfs_mount+0x23a/0xaa0 [ 1932.094016] ? btrfs_show_options+0xfd0/0xfd0 [ 1932.094029] ? __mutex_unlock_slowpath+0xea/0x610 [ 1932.094046] ? check_preemption_disabled+0x41/0x280 [ 1932.094066] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1932.094080] ? pcpu_alloc+0xc9/0x1190 [ 1932.094095] ? __lockdep_init_map+0x100/0x5a0 [ 1932.094110] mount_fs+0xa3/0x310 [ 1932.094128] vfs_kern_mount.part.0+0x68/0x470 [ 1932.094146] do_mount+0x115c/0x2f50 [ 1932.094163] ? cmp_ex_sort+0xc0/0xc0 [ 1932.094180] ? __do_page_fault+0x180/0xd60 [ 1932.094195] ? copy_mount_string+0x40/0x40 [ 1932.094217] ? memset+0x20/0x40 [ 1932.094232] ? copy_mount_options+0x26f/0x380 [ 1932.094249] ksys_mount+0xcf/0x130 [ 1932.094266] __x64_sys_mount+0xba/0x150 [ 1932.094279] ? ksys_mount+0x130/0x130 [ 1932.094293] do_syscall_64+0xf9/0x620 [ 1932.094310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1932.094322] RIP: 0033:0x7fa0bfb0461a [ 1932.094335] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1932.094342] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1932.094355] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1932.094364] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1932.094371] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1932.094379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1932.094388] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 23:47:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x70000000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x15fff}]) 23:47:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1300}]) 23:47:31 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfc00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:31 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x88a8ffff00000000}, 0x0) unshare(0x0) 23:47:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 59) 23:47:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20000}]) 23:47:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1400}]) [ 1933.256563] IPVS: ftp: loaded support on port[0] = 21 [ 1933.272681] IPVS: ftp: loaded support on port[0] = 21 [ 1933.369686] FAULT_INJECTION: forcing a failure. [ 1933.369686] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.369713] CPU: 1 PID: 31699 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 23:47:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1500}]) [ 1933.369723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:47:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20b5a}]) [ 1933.369728] Call Trace: [ 1933.369749] dump_stack+0x1fc/0x2ef [ 1933.369769] should_fail.cold+0xa/0xf [ 1933.369788] ? setup_fault_attr+0x200/0x200 [ 1933.369805] ? __lock_acquire+0x6de/0x3ff0 23:47:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1600}]) [ 1933.369828] __should_failslab+0x115/0x180 [ 1933.369845] should_failslab+0x5/0x10 [ 1933.369859] kmem_cache_alloc+0x3f/0x370 [ 1933.369873] ? mempool_alloc+0x350/0x350 [ 1933.369885] mempool_alloc+0x146/0x350 [ 1933.369902] ? lock_acquire+0x170/0x3c0 [ 1933.369916] ? mempool_resize+0x790/0x790 [ 1933.369931] ? check_preemption_disabled+0x41/0x280 23:47:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c77}]) [ 1933.369948] ? alloc_buffer_head+0x20/0x130 [ 1933.369969] bio_alloc_bioset+0x389/0x5e0 [ 1933.369985] ? alloc_page_buffers+0x2da/0x5c0 [ 1933.369998] ? bvec_alloc+0x2f0/0x2f0 23:47:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x730a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x1800}]) [ 1933.370010] ? do_raw_spin_lock+0xcb/0x220 23:47:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c7f}]) [ 1933.370026] ? create_empty_buffers+0x4e7/0x760 [ 1933.370045] submit_bh_wbc+0x141/0x760 23:47:32 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfe80}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1933.370065] block_read_full_page+0x7cf/0xd10 23:47:32 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0x9effffff00000000}, 0x0) unshare(0x0) [ 1933.370081] ? block_llseek+0xc0/0xc0 [ 1933.370100] ? __bread_gfp+0x300/0x300 [ 1933.370120] ? add_to_page_cache_locked+0x40/0x40 [ 1933.370143] do_read_cache_page+0x533/0x1170 [ 1933.370158] ? blkdev_writepages+0x20/0x20 [ 1933.370176] btrfs_scan_one_device+0x195/0xd00 [ 1933.370194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1933.370209] ? debug_check_no_obj_freed+0x201/0x490 [ 1933.370224] ? device_list_add+0xdd0/0xdd0 [ 1933.370238] ? kfree+0x110/0x210 [ 1933.370254] ? btrfs_mount_root+0x107a/0x1830 [ 1933.370270] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1933.370288] btrfs_mount_root+0x9df/0x1830 [ 1933.370310] ? btrfs_decode_error+0x70/0x70 [ 1933.370325] ? __mutex_unlock_slowpath+0xea/0x610 [ 1933.370344] ? check_preemption_disabled+0x41/0x280 [ 1933.370366] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1933.370380] ? pcpu_alloc+0xc9/0x1190 [ 1933.370396] ? __lockdep_init_map+0x100/0x5a0 [ 1933.370413] mount_fs+0xa3/0x310 [ 1933.370432] vfs_kern_mount.part.0+0x68/0x470 [ 1933.370445] ? kfree+0x110/0x210 [ 1933.370462] vfs_kern_mount+0x3c/0x60 [ 1933.370479] btrfs_mount+0x23a/0xaa0 [ 1933.370496] ? btrfs_show_options+0xfd0/0xfd0 [ 1933.370508] ? __mutex_unlock_slowpath+0xea/0x610 [ 1933.370526] ? check_preemption_disabled+0x41/0x280 [ 1933.370547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1933.370560] ? pcpu_alloc+0xc9/0x1190 [ 1933.370576] ? __lockdep_init_map+0x100/0x5a0 [ 1933.370593] mount_fs+0xa3/0x310 [ 1933.370612] vfs_kern_mount.part.0+0x68/0x470 [ 1933.370631] do_mount+0x115c/0x2f50 [ 1933.370646] ? cmp_ex_sort+0xc0/0xc0 [ 1933.370663] ? __do_page_fault+0x180/0xd60 [ 1933.370679] ? copy_mount_string+0x40/0x40 [ 1933.370702] ? memset+0x20/0x40 [ 1933.370725] ? copy_mount_options+0x26f/0x380 [ 1933.370743] ksys_mount+0xcf/0x130 [ 1933.370760] __x64_sys_mount+0xba/0x150 [ 1933.370777] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1933.370792] do_syscall_64+0xf9/0x620 [ 1933.370810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1933.370822] RIP: 0033:0x7fa0bfb0461a [ 1933.370836] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1933.370844] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1933.370858] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1933.370867] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1933.370876] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1933.370884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1933.370893] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1933.415692] BTRFS error (device loop5): superblock checksum mismatch [ 1933.435910] BTRFS error (device loop5): open_ctree failed [ 1933.651434] BTRFS error (device loop0): superblock checksum mismatch [ 1933.664237] BTRFS error (device loop0): open_ctree failed [ 1934.373680] IPVS: ftp: loaded support on port[0] = 21 [ 1934.421438] IPVS: ftp: loaded support on port[0] = 21 [ 1934.529265] BTRFS error (device loop0): superblock checksum mismatch [ 1934.819806] BTRFS error (device loop0): open_ctree failed 23:47:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 60) 23:47:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2000}]) 23:47:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c81}]) 23:47:34 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xfec0}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) 23:47:34 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xf0ffffff00000000}, 0x0) unshare(0x0) 23:47:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x740a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x2300}]) [ 1935.956436] IPVS: ftp: loaded support on port[0] = 21 23:47:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c82}]) [ 1936.049476] BTRFS error (device loop5): superblock checksum mismatch [ 1936.051832] BTRFS error (device loop5): open_ctree failed [ 1936.105425] IPVS: ftp: loaded support on port[0] = 21 [ 1936.186119] FAULT_INJECTION: forcing a failure. [ 1936.186119] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.186229] CPU: 0 PID: 31857 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1936.186238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:47:34 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3000}]) [ 1936.186242] Call Trace: [ 1936.186263] dump_stack+0x1fc/0x2ef [ 1936.186284] should_fail.cold+0xa/0xf [ 1936.186302] ? setup_fault_attr+0x200/0x200 23:47:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c83}]) [ 1936.186318] ? lock_acquire+0x170/0x3c0 [ 1936.186349] __should_failslab+0x115/0x180 [ 1936.186366] should_failslab+0x5/0x10 [ 1936.186382] kmem_cache_alloc_trace+0x284/0x380 [ 1936.186399] ? dlm_unlock_lock_handler+0x9f0/0x9f0 [ 1936.186413] ? btrfs_kill_super+0x550/0x550 [ 1936.186427] sget_userns+0x122/0xcd0 [ 1936.186439] ? dlm_unlock_lock_handler+0x9f0/0x9f0 [ 1936.186458] ? btrfs_kill_super+0x550/0x550 [ 1936.186471] ? dlm_unlock_lock_handler+0x9f0/0x9f0 [ 1936.186482] ? btrfs_kill_super+0x550/0x550 [ 1936.186494] sget+0x102/0x140 [ 1936.186516] btrfs_mount_root+0xb1f/0x1830 23:47:35 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0xff00}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1936.186538] ? btrfs_decode_error+0x70/0x70 [ 1936.186558] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1936.186572] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1936.186592] ? retint_kernel+0x2d/0x2d [ 1936.186614] mount_fs+0xa3/0x310 23:47:35 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3d00}]) [ 1936.186633] vfs_kern_mount.part.0+0x68/0x470 [ 1936.186651] vfs_kern_mount+0x3c/0x60 [ 1936.186667] btrfs_mount+0x23a/0xaa0 [ 1936.186685] ? btrfs_show_options+0xfd0/0xfd0 [ 1936.186700] ? retint_kernel+0x2d/0x2d [ 1936.186723] ? __lockdep_init_map+0xeb/0x5a0 [ 1936.186737] ? __lockdep_init_map+0x100/0x5a0 [ 1936.186752] mount_fs+0xa3/0x310 [ 1936.186776] vfs_kern_mount.part.0+0x68/0x470 [ 1936.186795] do_mount+0x115c/0x2f50 [ 1936.186811] ? cmp_ex_sort+0xc0/0xc0 [ 1936.186826] ? __do_page_fault+0x180/0xd60 [ 1936.186841] ? copy_mount_string+0x40/0x40 [ 1936.186862] ? memset+0x20/0x40 [ 1936.186877] ? copy_mount_options+0x26f/0x380 [ 1936.186893] ksys_mount+0xcf/0x130 [ 1936.186910] __x64_sys_mount+0xba/0x150 [ 1936.186923] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1936.186935] do_syscall_64+0xf9/0x620 [ 1936.186951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1936.186962] RIP: 0033:0x7fa0bfb0461a [ 1936.186974] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1936.186982] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1936.186995] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1936.187002] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1936.187010] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1936.187016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1936.187023] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1936.744525] IPVS: ftp: loaded support on port[0] = 21 23:47:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 61) 23:47:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c85}]) 23:47:36 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xffffff7f00000000}, 0x0) unshare(0x0) 23:47:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x750a1500, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000000000010000000000", 0xcf, 0x10000}, {&(0x7f0000010200)}, {0x0, 0x0, 0x100ea0}, {0x0}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000015600)}, {0x0, 0x0, 0x510f40}], 0x0, &(0x7f0000000a40)=ANY=[]) 23:47:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x3f00}]) 23:47:36 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x40000}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1937.940184] IPVS: ftp: loaded support on port[0] = 21 [ 1937.992191] IPVS: ftp: loaded support on port[0] = 21 23:47:36 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x4000}]) 23:47:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x20c86}]) [ 1938.076503] FAULT_INJECTION: forcing a failure. [ 1938.076503] name failslab, interval 1, probability 0, space 0, times 0 23:47:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x70000}]) [ 1938.076521] CPU: 1 PID: 31979 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1938.076530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1938.076535] Call Trace: [ 1938.076555] dump_stack+0x1fc/0x2ef [ 1938.076580] should_fail.cold+0xa/0xf [ 1938.076600] ? setup_fault_attr+0x200/0x200 [ 1938.076616] ? __lock_acquire+0x6de/0x3ff0 23:47:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x5200}]) 23:47:37 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8, 0x1b, 0x1fffff}]}, 0x28}, 0x1, 0x8100}, 0x0) unshare(0x0) [ 1938.076638] __should_failslab+0x115/0x180 [ 1938.076656] should_failslab+0x5/0x10 [ 1938.076669] kmem_cache_alloc+0x3f/0x370 [ 1938.076687] radix_tree_node_alloc.constprop.0+0x1e4/0x320 [ 1938.076705] __radix_tree_create+0x314/0x540 [ 1938.076726] page_cache_tree_insert+0xac/0x3f0 [ 1938.076744] ? file_check_and_advance_wb_err+0x3a0/0x3a0 [ 1938.076758] ? lock_acquire+0x170/0x3c0 23:47:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x100000}]) [ 1938.076774] ? __add_to_page_cache_locked+0x45e/0xb60 [ 1938.076798] __add_to_page_cache_locked+0x46e/0xb60 23:47:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, 0x0, 0xa808) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d070000000000", 0x4e, 0x10000}, {0x0}, {0x0}, {&(0x7f0000011a00)}, {0x0, 0x0, 0x500720}, {0x0}, {0x0}, {0x0, 0x0, 0x506000}, {0x0}, {0x0, 0x0, 0x509f40}, {0x0}, {0x0}], 0x0, &(0x7f0000000a40)=ANY=[]) (fail_nth: 62) [ 1938.076817] ? page_cache_tree_insert+0x3f0/0x3f0 23:47:37 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x0, 0x6000}]) [ 1938.076841] add_to_page_cache_lru+0x16a/0x680 [ 1938.076859] ? add_to_page_cache_locked+0x40/0x40 23:47:37 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/107}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) unshare(0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcd02, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x39, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x8100, 0xfffffffffffff000}, 0x0) unshare(0x0) [ 1938.076883] pagecache_get_page+0x478/0xd50 [ 1938.076905] __getblk_slow+0x216/0x9e0 [ 1938.076931] __bread_gfp+0x218/0x300 [ 1938.076949] btrfs_read_dev_super+0x8a/0x230 [ 1938.076963] btrfs_get_bdev_and_sb+0xf6/0x2f0 [ 1938.076978] open_fs_devices+0x5a3/0xa50 [ 1938.076997] ? find_fsid+0xb0/0xb0 [ 1938.077021] btrfs_open_devices+0x114/0x150 [ 1938.077038] btrfs_mount_root+0xa60/0x1830 [ 1938.077062] ? btrfs_decode_error+0x70/0x70 [ 1938.077077] ? __mutex_unlock_slowpath+0xea/0x610 [ 1938.077097] ? check_preemption_disabled+0x41/0x280 [ 1938.077119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1938.077133] ? pcpu_alloc+0xc9/0x1190 [ 1938.077148] ? __lockdep_init_map+0x100/0x5a0 [ 1938.077165] mount_fs+0xa3/0x310 [ 1938.077185] vfs_kern_mount.part.0+0x68/0x470 [ 1938.077198] ? kfree+0x110/0x210 [ 1938.077214] vfs_kern_mount+0x3c/0x60 [ 1938.077232] btrfs_mount+0x23a/0xaa0 [ 1938.077257] ? btrfs_show_options+0xfd0/0xfd0 [ 1938.077270] ? __mutex_unlock_slowpath+0xea/0x610 [ 1938.077290] ? check_preemption_disabled+0x41/0x280 [ 1938.077312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1938.077326] ? pcpu_alloc+0xc9/0x1190 [ 1938.077343] ? __lockdep_init_map+0x100/0x5a0 [ 1938.077361] mount_fs+0xa3/0x310 [ 1938.077381] vfs_kern_mount.part.0+0x68/0x470 [ 1938.077401] do_mount+0x115c/0x2f50 [ 1938.077418] ? cmp_ex_sort+0xc0/0xc0 [ 1938.077434] ? __do_page_fault+0x180/0xd60 [ 1938.077451] ? copy_mount_string+0x40/0x40 [ 1938.077472] ? memset+0x20/0x40 [ 1938.077488] ? copy_mount_options+0x26f/0x380 [ 1938.077507] ksys_mount+0xcf/0x130 [ 1938.077524] __x64_sys_mount+0xba/0x150 [ 1938.077540] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1938.077553] do_syscall_64+0xf9/0x620 [ 1938.077572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1938.077584] RIP: 0033:0x7fa0bfb0461a [ 1938.077600] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1938.077608] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1938.077621] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1938.077629] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1938.077637] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1938.077646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1938.077654] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1938.124240] BTRFS error (device loop5): superblock checksum mismatch [ 1938.125481] BTRFS error (device loop5): open_ctree failed [ 1938.262075] BTRFS error (device loop5): superblock checksum mismatch [ 1938.301469] BTRFS error (device loop5): open_ctree failed [ 1938.869225] IPVS: ftp: loaded support on port[0] = 21 [ 1939.137711] IPVS: ftp: loaded support on port[0] = 21 [ 1939.291081] FAULT_INJECTION: forcing a failure. [ 1939.291081] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.291149] CPU: 0 PID: 32072 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1939.291162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.538236] Call Trace: [ 1939.538263] dump_stack+0x1fc/0x2ef [ 1939.538284] should_fail.cold+0xa/0xf [ 1939.538303] ? setup_fault_attr+0x200/0x200 [ 1939.538322] __should_failslab+0x115/0x180 [ 1939.538337] should_failslab+0x5/0x10 [ 1939.538348] __kmalloc+0x2ab/0x3c0 [ 1939.538362] ? close_fs_devices.part.0+0x2c9/0x8e0 [ 1939.538378] close_fs_devices.part.0+0x2c9/0x8e0 [ 1939.538401] btrfs_close_devices+0x95/0x1f0 [ 1939.538418] btrfs_mount_root+0x10b9/0x1830 [ 1939.538439] ? btrfs_decode_error+0x70/0x70 [ 1939.538456] ? rcu_nmi_exit+0xb3/0x180 [ 1939.590715] ? retint_kernel+0x2d/0x2d [ 1939.590732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1939.590749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1939.590766] ? rcu_nmi_exit+0xb3/0x180 [ 1939.590781] ? retint_kernel+0x2d/0x2d [ 1939.590800] mount_fs+0xa3/0x310 [ 1939.590820] vfs_kern_mount.part.0+0x68/0x470 [ 1939.590839] vfs_kern_mount+0x3c/0x60 [ 1939.590857] btrfs_mount+0x23a/0xaa0 [ 1939.590875] ? btrfs_show_options+0xfd0/0xfd0 [ 1939.590890] ? rcu_nmi_exit+0xb3/0x180 [ 1939.590905] ? retint_kernel+0x2d/0x2d [ 1939.590929] ? __lockdep_init_map+0xe5/0x5a0 [ 1939.590946] mount_fs+0xa3/0x310 [ 1939.590968] vfs_kern_mount.part.0+0x68/0x470 [ 1939.651882] do_mount+0x115c/0x2f50 [ 1939.651901] ? cmp_ex_sort+0xc0/0xc0 [ 1939.651918] ? __do_page_fault+0x180/0xd60 [ 1939.651934] ? copy_mount_string+0x40/0x40 [ 1939.651956] ? memset+0x20/0x40 [ 1939.651971] ? copy_mount_options+0x26f/0x380 [ 1939.651993] ksys_mount+0xcf/0x130 [ 1939.679024] __x64_sys_mount+0xba/0x150 [ 1939.679039] ? do_syscall_64+0x56/0x620 [ 1939.679053] do_syscall_64+0xf9/0x620 [ 1939.679073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1939.679085] RIP: 0033:0x7fa0bfb0461a [ 1939.679099] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1939.679107] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1939.679119] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1939.679128] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1939.679135] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1939.679143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1939.679151] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1939.863223] ------------[ cut here ]------------ [ 1939.863236] kernel BUG at fs/btrfs/volumes.c:1066! [ 1939.876534] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1939.876549] CPU: 1 PID: 32072 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1939.876557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.876577] RIP: 0010:close_fs_devices.part.0+0x6b7/0x8e0 [ 1939.876590] Code: 48 8b 44 24 20 c7 80 10 01 00 00 00 00 00 00 48 83 c4 48 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 70 ad 71 fe 0f 0b e8 69 ad 71 fe <0f> 0b e8 22 8d a7 fe e9 17 fd ff ff 48 8b 7c 24 18 e8 43 8a a7 fe [ 1939.876597] RSP: 0018:ffff888042a1f838 EFLAGS: 00010246 [ 1939.876609] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900068e2000 [ 1939.876617] RDX: 0000000000040000 RSI: ffffffff82f0d807 RDI: 0000000000000286 [ 1939.876624] RBP: ffff8880ac633990 R08: 0000000000000000 R09: 0000000000000000 [ 1939.876631] R10: 0000000000000005 R11: 0000000000000000 R12: 000000000000000b [ 1939.876639] R13: ffff8880b4138480 R14: dffffc0000000000 R15: ffff8880aa73b200 [ 1939.876649] FS: 00007fa0be457700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1939.876657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1939.876665] CR2: 00007fabde8a2000 CR3: 00000000a4cb9000 CR4: 00000000003406e0 [ 1939.876676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1939.876683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1939.876686] Call Trace: [ 1939.876706] btrfs_close_devices+0x95/0x1f0 [ 1939.876723] btrfs_mount_root+0x10b9/0x1830 [ 1939.876741] ? btrfs_decode_error+0x70/0x70 [ 1939.876755] ? rcu_nmi_exit+0xb3/0x180 [ 1939.876771] ? retint_kernel+0x2d/0x2d [ 1939.876784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1939.876798] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1939.876812] ? rcu_nmi_exit+0xb3/0x180 [ 1939.876826] ? retint_kernel+0x2d/0x2d [ 1939.876841] mount_fs+0xa3/0x310 [ 1939.876857] vfs_kern_mount.part.0+0x68/0x470 [ 1939.876873] vfs_kern_mount+0x3c/0x60 [ 1939.876887] btrfs_mount+0x23a/0xaa0 [ 1939.876903] ? btrfs_show_options+0xfd0/0xfd0 [ 1939.876917] ? rcu_nmi_exit+0xb3/0x180 [ 1939.876932] ? retint_kernel+0x2d/0x2d [ 1939.876968] ? __lockdep_init_map+0xe5/0x5a0 [ 1939.876981] mount_fs+0xa3/0x310 [ 1939.876997] vfs_kern_mount.part.0+0x68/0x470 [ 1939.877012] do_mount+0x115c/0x2f50 [ 1939.877028] ? cmp_ex_sort+0xc0/0xc0 [ 1939.877044] ? __do_page_fault+0x180/0xd60 [ 1939.877058] ? copy_mount_string+0x40/0x40 [ 1939.877076] ? memset+0x20/0x40 [ 1939.877090] ? copy_mount_options+0x26f/0x380 [ 1939.877105] ksys_mount+0xcf/0x130 [ 1939.877121] __x64_sys_mount+0xba/0x150 [ 1939.877133] ? do_syscall_64+0x56/0x620 [ 1939.877146] do_syscall_64+0xf9/0x620 [ 1939.877161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1939.877171] RIP: 0033:0x7fa0bfb0461a [ 1939.877184] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1939.877190] RSP: 002b:00007fa0be456f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1939.877202] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa0bfb0461a [ 1939.877209] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa0be456fe0 [ 1939.877217] RBP: 00007fa0be457020 R08: 00007fa0be457020 R09: 0000000020000000 [ 1939.877224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1939.877232] R13: 0000000020000100 R14: 00007fa0be456fe0 R15: 0000000020000a40 [ 1939.877242] Modules linked in: [ 1939.877259] ---[ end trace b0aa0422f674d814 ]--- [ 1939.877273] RIP: 0010:close_fs_devices.part.0+0x6b7/0x8e0 [ 1939.877284] Code: 48 8b 44 24 20 c7 80 10 01 00 00 00 00 00 00 48 83 c4 48 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 70 ad 71 fe 0f 0b e8 69 ad 71 fe <0f> 0b e8 22 8d a7 fe e9 17 fd ff ff 48 8b 7c 24 18 e8 43 8a a7 fe [ 1939.877291] RSP: 0018:ffff888042a1f838 EFLAGS: 00010246 [ 1939.877301] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900068e2000 [ 1939.877309] RDX: 0000000000040000 RSI: ffffffff82f0d807 RDI: 0000000000000286 [ 1939.877316] RBP: ffff8880ac633990 R08: 0000000000000000 R09: 0000000000000000 [ 1939.877323] R10: 0000000000000005 R11: 0000000000000000 R12: 000000000000000b [ 1939.877331] R13: ffff8880b4138480 R14: dffffc0000000000 R15: ffff8880aa73b200 [ 1939.877342] FS: 00007fa0be457700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1939.877350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1939.877357] CR2: 00007fabde8a2000 CR3: 00000000a4cb9000 CR4: 00000000003406e0 [ 1939.877367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1939.877374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1939.877380] Kernel panic - not syncing: Fatal exception [ 1939.877711] Kernel Offset: disabled [ 1940.366233] Rebooting in 86400 seconds..