.435378] ? loop_set_status64+0xe0/0xe0 [ 1373.439605] blkdev_ioctl+0x540/0x1830 [ 1373.443487] ? blkpg_ioctl+0x8d0/0x8d0 [ 1373.447372] ? trace_hardirqs_on+0x10/0x10 [ 1373.451609] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1373.456710] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1373.461712] block_ioctl+0xd9/0x120 [ 1373.465325] ? blkdev_fallocate+0x3a0/0x3a0 [ 1373.469644] do_vfs_ioctl+0x75a/0xff0 [ 1373.473429] ? lock_acquire+0x170/0x3f0 [ 1373.477386] ? ioctl_preallocate+0x1a0/0x1a0 [ 1373.481779] ? __fget+0x265/0x3e0 [ 1373.485212] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.489167] ? security_file_ioctl+0x83/0xb0 [ 1373.493557] SyS_ioctl+0x7f/0xb0 [ 1373.496906] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.500857] do_syscall_64+0x1d5/0x640 [ 1373.504729] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.509902] RIP: 0033:0x7faed27e5fb7 [ 1373.513593] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.521284] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1373.528527] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1373.535776] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1373.543021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1373.550283] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xa004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xa004) (async) 01:58:52 executing program 4: pkey_alloc(0x0, 0x7ffe9c3fe3ede1bb) (async) pkey_alloc(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7ff, 0x200000) [ 1373.586753] hfs: unable to parse mount options [ 1373.599003] CPU: 1 PID: 22999 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1373.606903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1373.616262] Call Trace: [ 1373.618852] dump_stack+0x1b2/0x281 [ 1373.618892] FAULT_INJECTION: forcing a failure. [ 1373.618892] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.622480] should_fail.cold+0x10a/0x149 [ 1373.622495] should_failslab+0xd6/0x130 [ 1373.622511] kmem_cache_alloc+0x28e/0x3c0 [ 1373.645922] get_empty_filp+0x86/0x3f0 [ 1373.649808] alloc_file+0x23/0x440 [ 1373.653344] __shmem_file_setup.part.0+0x198/0x3c0 [ 1373.658258] ? shmem_create+0x30/0x30 [ 1373.662039] ? __alloc_fd+0x1be/0x490 [ 1373.665823] SyS_memfd_create+0x1fc/0x3c0 [ 1373.669951] ? shmem_fcntl+0x120/0x120 [ 1373.673840] ? __do_page_fault+0x159/0xad0 [ 1373.678055] ? do_syscall_64+0x4c/0x640 [ 1373.682009] ? shmem_fcntl+0x120/0x120 [ 1373.685880] do_syscall_64+0x1d5/0x640 [ 1373.689755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.694926] RIP: 0033:0x7fd7232e41f9 [ 1373.698619] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1373.706315] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e41f9 [ 1373.713772] RDX: 00007fd721c58fe0 RSI: 0000000000000000 RDI: 00007fd72333d29c [ 1373.721139] RBP: 0000000000000000 R08: 00007fd721c58fd8 R09: 00007fd721c591d0 [ 1373.728395] R10: 00007fd721c58fdc R11: 0000000000000246 R12: 0000000020000080 01:58:52 executing program 4: pkey_alloc(0x0, 0x7ffe9c3fe3ede1bb) (async) pkey_alloc(0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7ff, 0x200000) 01:58:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r6, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x61b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000804}, 0x8004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x111}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca}]}]}]}, 0xa0}}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="dd781940dee56c8411f6ddbc89ac51eb755dde2a57671a371451b5d3a9352a848c01e803f21a25fd50c0e3e891eb10fe373958e7df517f364d7ad1f839a622424a", 0x41) [ 1373.735649] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000500 [ 1373.742919] CPU: 0 PID: 23010 Comm: syz-executor.1 Not tainted 4.14.288-syzkaller #0 [ 1373.743528] Bluetooth: hci0 command 0x0401 tx timeout [ 1373.750802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1373.750806] Call Trace: [ 1373.750824] dump_stack+0x1b2/0x281 [ 1373.750840] should_fail.cold+0x10a/0x149 [ 1373.750852] should_failslab+0xd6/0x130 [ 1373.750865] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1373.784360] apparmor_file_alloc_security+0x129/0x800 [ 1373.789571] security_file_alloc+0x66/0xa0 [ 1373.793824] ? selinux_is_enabled+0x5/0x50 [ 1373.798066] get_empty_filp+0x16b/0x3f0 [ 1373.802043] alloc_file+0x23/0x440 [ 1373.805594] sock_alloc_file+0x113/0x2e0 [ 1373.809663] ? sock_poll+0x220/0x220 [ 1373.813383] SyS_accept4+0x211/0x580 [ 1373.817185] ? SyS_listen+0x210/0x210 [ 1373.820990] ? __mutex_unlock_slowpath+0x75/0x770 [ 1373.825841] ? vfs_write+0x319/0x4d0 [ 1373.829569] ? fput_many+0xe/0x140 [ 1373.833114] ? SyS_write+0x14d/0x210 [ 1373.836833] ? SyS_read+0x210/0x210 [ 1373.840464] ? __do_page_fault+0x159/0xad0 [ 1373.844703] ? do_syscall_64+0x4c/0x640 [ 1373.848682] ? SyS_listen+0x210/0x210 [ 1373.852498] do_syscall_64+0x1d5/0x640 [ 1373.856392] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.861580] RIP: 0033:0x7f8feb6cf1f9 [ 1373.865387] RSP: 002b:00007f8fea044168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1373.873098] RAX: ffffffffffffffda RBX: 00007f8feb7e1f60 RCX: 00007f8feb6cf1f9 [ 1373.880369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 01:58:52 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 5) 01:58:52 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@gid={'gid', 0x3d, 0xee01}}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) [ 1373.887639] RBP: 00007f8fea0441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1373.894907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.902177] R13: 00007fff172d29af R14: 00007f8fea044300 R15: 0000000000022000 [ 1373.912221] hfs: can't find a HFS filesystem on dev loop2 01:58:52 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 12) 01:58:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r6, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x61b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000804}, 0x8004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x111}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca}]}]}]}, 0xa0}}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="dd781940dee56c8411f6ddbc89ac51eb755dde2a57671a371451b5d3a9352a848c01e803f21a25fd50c0e3e891eb10fe373958e7df517f364d7ad1f839a622424a", 0x41) [ 1373.988350] FAULT_INJECTION: forcing a failure. [ 1373.988350] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.031438] CPU: 1 PID: 23036 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1374.039355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1374.046119] hfs: unable to parse mount options [ 1374.048704] Call Trace: [ 1374.048723] dump_stack+0x1b2/0x281 [ 1374.048738] should_fail.cold+0x10a/0x149 [ 1374.048751] should_failslab+0xd6/0x130 [ 1374.048765] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1374.071683] FAULT_INJECTION: forcing a failure. [ 1374.071683] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.072400] apparmor_file_alloc_security+0x129/0x800 [ 1374.088789] security_file_alloc+0x66/0xa0 [ 1374.093024] ? selinux_is_enabled+0x5/0x50 [ 1374.097438] get_empty_filp+0x16b/0x3f0 [ 1374.101398] alloc_file+0x23/0x440 [ 1374.104934] __shmem_file_setup.part.0+0x198/0x3c0 [ 1374.109878] ? shmem_create+0x30/0x30 [ 1374.113668] ? __alloc_fd+0x1be/0x490 [ 1374.117476] SyS_memfd_create+0x1fc/0x3c0 [ 1374.121620] ? shmem_fcntl+0x120/0x120 [ 1374.125506] ? __do_page_fault+0x159/0xad0 [ 1374.129758] ? do_syscall_64+0x4c/0x640 [ 1374.133727] ? shmem_fcntl+0x120/0x120 [ 1374.137615] do_syscall_64+0x1d5/0x640 [ 1374.141498] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.146765] RIP: 0033:0x7fd7232e41f9 [ 1374.150473] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1374.158196] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e41f9 [ 1374.165479] RDX: 00007fd721c58fe0 RSI: 0000000000000000 RDI: 00007fd72333d29c [ 1374.172739] RBP: 0000000000000000 R08: 00007fd721c58fd8 R09: 00007fd721c591d0 [ 1374.179997] R10: 00007fd721c58fdc R11: 0000000000000246 R12: 0000000020000080 [ 1374.187289] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000500 [ 1374.194570] CPU: 0 PID: 23049 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1374.202463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1374.211820] Call Trace: [ 1374.214417] dump_stack+0x1b2/0x281 [ 1374.218049] should_fail.cold+0x10a/0x149 [ 1374.222233] should_failslab+0xd6/0x130 [ 1374.226219] kmem_cache_alloc+0x28e/0x3c0 [ 1374.230376] __kernfs_new_node+0x6f/0x470 [ 1374.234533] kernfs_new_node+0x7b/0xe0 [ 1374.238423] __kernfs_create_file+0x3d/0x320 [ 1374.242836] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1374.247596] ? kernfs_create_dir_ns+0x171/0x200 [ 1374.252296] internal_create_group+0x22b/0x710 [ 1374.256973] lo_ioctl+0x1137/0x1cd0 [ 1374.260605] ? loop_set_status64+0xe0/0xe0 [ 1374.264845] blkdev_ioctl+0x540/0x1830 [ 1374.268734] ? blkpg_ioctl+0x8d0/0x8d0 [ 1374.272623] ? trace_hardirqs_on+0x10/0x10 [ 1374.276868] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1374.281975] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1374.287086] block_ioctl+0xd9/0x120 [ 1374.290708] ? blkdev_fallocate+0x3a0/0x3a0 [ 1374.295022] do_vfs_ioctl+0x75a/0xff0 [ 1374.298819] ? lock_acquire+0x170/0x3f0 [ 1374.302783] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.307203] ? __fget+0x265/0x3e0 [ 1374.310643] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.314600] ? security_file_ioctl+0x83/0xb0 [ 1374.318991] SyS_ioctl+0x7f/0xb0 [ 1374.322335] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.326287] do_syscall_64+0x1d5/0x640 [ 1374.330245] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.335564] RIP: 0033:0x7faed27e5fb7 [ 1374.339251] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.346938] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1374.354204] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1374.361456] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1374.368717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1374.375993] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (fail_nth: 6) 01:58:53 executing program 4: pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x2000)=nil, 0x930, 0x1000006, 0x10, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec00000009e3e64062b6335c2c8fbe20a52933d731c97baff586e0af38ed66990900e8f330cb444d85e9b9ea6dcb54cb9cbd1f4e743b4a02c281b7cafccd5e7fef7b6613093b72f302edf8a6cfe78172df2f19fc9b90dca4858696438f3a6f8d176cb3767f6b503b4ba73d4913067ae2c1b8b01d6105e828cb2ea3c8e7a046b7ecebccafdcf7e5e3225723c2e776db4c4102a292c8353d492ed11fc76f4cc563cbdfe2e3fee6afa5d4b6096979c715063691fef73d25dea8cb76956a36640b", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2506000000bc00048014000780080001000100000008000400090000000c000780080004000300000044000780080003000000000008000200070000000800020000000000080003000500000008000200020000000800040000000000080001000b00000008000100080000000c00078008000300090000001300010062726f6164636173742d6c696e6b00000900010073797a300000000014000780080003000000000008000100070000001300010062726f6164636173742d6c696e6b0000100004800900010073797a30000000000c0001800800030002000000"], 0xec}, 0x1, 0x0, 0x0, 0x4048011}, 0x20040010) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe0, 0x1, 0xbb, 0x8001, 0xfff9, "85559a7684fabc0b98b17ee9f13320ed2c88433726648898b38cfdfac9bd5cb7fd137259fbe9d1a4605d9f0d9a06a2ca7d5fa7271043cac7ba85b5e48dd71124cb839638dfe3e787645892cd5f16e5d8ac3b49e2eadbf33314f43cff6d526b8ff7b47440cda4e9a11381c9c4387719e63ab95f18e59ca6bf721018917ff03feb"}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x9, "f183edc04a2011239078d83c47693e34b3452d2ebef24c7f18269230118ad612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0001}, 0x8880) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x4, 0x800) 01:58:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r6, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x61b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000804}, 0x8004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x111}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca}]}]}]}, 0xa0}}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async, rerun: 64) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="dd781940dee56c8411f6ddbc89ac51eb755dde2a57671a371451b5d3a9352a848c01e803f21a25fd50c0e3e891eb10fe373958e7df517f364d7ad1f839a622424a", 0x41) (rerun: 64) 01:58:53 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 6) 01:58:53 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 13) 01:58:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@gid={'gid', 0x3d, 0xee01}}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) [ 1374.393102] hfs: can't find a HFS filesystem on dev loop2 01:58:53 executing program 4: pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x2000)=nil, 0x930, 0x1000006, 0x10, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec00000009e3e64062b6335c2c8fbe20a52933d731c97baff586e0af38ed66990900e8f330cb444d85e9b9ea6dcb54cb9cbd1f4e743b4a02c281b7cafccd5e7fef7b6613093b72f302edf8a6cfe78172df2f19fc9b90dca4858696438f3a6f8d176cb3767f6b503b4ba73d4913067ae2c1b8b01d6105e828cb2ea3c8e7a046b7ecebccafdcf7e5e3225723c2e776db4c4102a292c8353d492ed11fc76f4cc563cbdfe2e3fee6afa5d4b6096979c715063691fef73d25dea8cb76956a36640b", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2506000000bc00048014000780080001000100000008000400090000000c000780080004000300000044000780080003000000000008000200070000000800020000000000080003000500000008000200020000000800040000000000080001000b00000008000100080000000c00078008000300090000001300010062726f6164636173742d6c696e6b00000900010073797a300000000014000780080003000000000008000100070000001300010062726f6164636173742d6c696e6b0000100004800900010073797a30000000000c0001800800030002000000"], 0xec}, 0x1, 0x0, 0x0, 0x4048011}, 0x20040010) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe0, 0x1, 0xbb, 0x8001, 0xfff9, "85559a7684fabc0b98b17ee9f13320ed2c88433726648898b38cfdfac9bd5cb7fd137259fbe9d1a4605d9f0d9a06a2ca7d5fa7271043cac7ba85b5e48dd71124cb839638dfe3e787645892cd5f16e5d8ac3b49e2eadbf33314f43cff6d526b8ff7b47440cda4e9a11381c9c4387719e63ab95f18e59ca6bf721018917ff03feb"}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x9, "f183edc04a2011239078d83c47693e34b3452d2ebef24c7f18269230118ad612"}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0001}, 0x8880) (async) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x4, 0x800) [ 1374.472272] FAULT_INJECTION: forcing a failure. [ 1374.472272] name failslab, interval 1, probability 0, space 0, times 0 01:58:53 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x401]}, 0x8) recvfrom$netrom(r0, &(0x7f0000000540)=""/89, 0x59, 0x40000002, &(0x7f00000005c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) accept4$netrom(r3, 0x0, 0x0, 0x80800) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x80000000, 0x4) dup(r3) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @rose, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r6 = dup(r3) r7 = accept$netrom(r6, &(0x7f0000000240)={{0x3, @rose}, [@remote, @default, @netrom, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48) sendto$netrom(r7, &(0x7f0000000300)="517eccb65c3c586915ab7bafe51c0e17db991877e471060e3b115c384180bf77698543fad6bced32c7dcb1487699e6a45170a713c77c98f7d74d5462b0e54ebfcadb2d61c93b8a4a8f05db8c3ed237681a57b51b413dd3e6c02ecf7f355745ac8a5f669186a2d364098f00707ecc6ebb6703074f19fce39a5e4237a7e747cb806f2b6c8a71fbd3525b11eabd8bbcdec2015796cd4d2dee5788a1c61fe658b8259a2c599a5e9955acb5bd5b1453068e829766117ea4fc5e88708e12fb9d66440c5db9609979a0bbc7c935757537ba9aa3c8f49596bf8765a67113051cfa708e211bddc5b4896adcb03ee03ec4ba8f", 0xee, 0x40800, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @null, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @bcast, 0x9, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b87cdb978d66efbafc0c66b87c69000066ef0f01b30000640f01c40f00d8f00fbb50f6660f73df0d9a0048c20066b9690300000f32d2855b23f7b60088", 0x41}], 0x1, 0xcb03907811928df5, &(0x7f0000000200)=[@flags={0x3, 0x2000}, @cr4={0x1, 0x52004}], 0x42) [ 1374.515918] CPU: 0 PID: 23069 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1374.523830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1374.533186] Call Trace: [ 1374.535796] dump_stack+0x1b2/0x281 [ 1374.539439] should_fail.cold+0x10a/0x149 [ 1374.543590] should_failslab+0xd6/0x130 [ 1374.547575] kmem_cache_alloc+0x28e/0x3c0 [ 1374.551725] getname_flags+0xc8/0x550 [ 1374.555533] do_sys_open+0x1ce/0x410 [ 1374.559246] ? filp_open+0x60/0x60 [ 1374.562786] ? do_syscall_64+0x4c/0x640 [ 1374.566755] ? SyS_open+0x30/0x30 [ 1374.570208] do_syscall_64+0x1d5/0x640 [ 1374.574103] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.579285] RIP: 0033:0x7fd723297114 [ 1374.582987] RSP: 002b:00007fd721c58eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1374.590690] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd723297114 [ 1374.593264] FAULT_INJECTION: forcing a failure. [ 1374.593264] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.597950] RDX: 0000000000000002 RSI: 00007fd721c58fe0 RDI: 00000000ffffff9c [ 1374.597957] RBP: 00007fd721c58fe0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1374.597961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1374.597967] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1374.638454] CPU: 1 PID: 23079 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1374.646385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1374.655722] Call Trace: [ 1374.658295] dump_stack+0x1b2/0x281 [ 1374.661904] should_fail.cold+0x10a/0x149 [ 1374.666035] should_failslab+0xd6/0x130 [ 1374.669989] kmem_cache_alloc+0x40/0x3c0 [ 1374.674125] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 1374.679779] idr_get_free_cmn+0x595/0x8d0 [ 1374.683909] ? trace_hardirqs_on+0x10/0x10 [ 1374.688126] idr_alloc_cmn+0xe8/0x1e0 [ 1374.691903] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 1374.696750] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1374.701746] ? __schedule+0x1450/0x1de0 [ 1374.705698] ? cpuacct_charge+0x1cf/0x350 [ 1374.709822] ? fs_reclaim_release+0xd0/0x110 [ 1374.714211] idr_alloc_cyclic+0xc2/0x1d0 [ 1374.718252] ? idr_alloc_cmn+0x1e0/0x1e0 [ 1374.722292] ? __radix_tree_preload+0x1c3/0x250 [ 1374.726947] __kernfs_new_node+0xaf/0x470 [ 1374.731077] kernfs_create_dir_ns+0x8c/0x200 [ 1374.735488] internal_create_group+0xe9/0x710 [ 1374.739965] lo_ioctl+0x1137/0x1cd0 [ 1374.743577] ? loop_set_status64+0xe0/0xe0 [ 1374.747799] blkdev_ioctl+0x540/0x1830 [ 1374.751680] ? blkpg_ioctl+0x8d0/0x8d0 [ 1374.755564] ? trace_hardirqs_on+0x10/0x10 [ 1374.759782] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1374.764862] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1374.769858] block_ioctl+0xd9/0x120 [ 1374.773466] ? blkdev_fallocate+0x3a0/0x3a0 [ 1374.777784] do_vfs_ioctl+0x75a/0xff0 [ 1374.781564] ? lock_acquire+0x170/0x3f0 [ 1374.785518] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.789904] ? __fget+0x265/0x3e0 [ 1374.793339] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.797497] ? security_file_ioctl+0x83/0xb0 [ 1374.801885] SyS_ioctl+0x7f/0xb0 [ 1374.805265] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.809221] do_syscall_64+0x1d5/0x640 01:58:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x42, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r3 = dup(0xffffffffffffffff) r4 = openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x8100, 0x70) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0xfff, 0x4) accept4$netrom(r3, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="324591cc", @ANYRES16=r5, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x1010}, 0x4000090) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r6, 0x602, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x1000, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004000) [ 1374.813092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.818264] RIP: 0033:0x7faed27e5fb7 [ 1374.821952] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.829667] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1374.836923] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1374.844285] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1374.851533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1374.858781] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:53 executing program 4: pkey_alloc(0x0, 0x0) (async) r0 = pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x2000)=nil, 0x930, 0x1000006, 0x10, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec00000009e3e64062b6335c2c8fbe20a52933d731c97baff586e0af38ed66990900e8f330cb444d85e9b9ea6dcb54cb9cbd1f4e743b4a02c281b7cafccd5e7fef7b6613093b72f302edf8a6cfe78172df2f19fc9b90dca4858696438f3a6f8d176cb3767f6b503b4ba73d4913067ae2c1b8b01d6105e828cb2ea3c8e7a046b7ecebccafdcf7e5e3225723c2e776db4c4102a292c8353d492ed11fc76f4cc563cbdfe2e3fee6afa5d4b6096979c715063691fef73d25dea8cb76956a36640b", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2506000000bc00048014000780080001000100000008000400090000000c000780080004000300000044000780080003000000000008000200070000000800020000000000080003000500000008000200020000000800040000000000080001000b00000008000100080000000c00078008000300090000001300010062726f6164636173742d6c696e6b00000900010073797a300000000014000780080003000000000008000100070000001300010062726f6164636173742d6c696e6b0000100004800900010073797a30000000000c0001800800030002000000"], 0xec}, 0x1, 0x0, 0x0, 0x4048011}, 0x20040010) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe0, 0x1, 0xbb, 0x8001, 0xfff9, "85559a7684fabc0b98b17ee9f13320ed2c88433726648898b38cfdfac9bd5cb7fd137259fbe9d1a4605d9f0d9a06a2ca7d5fa7271043cac7ba85b5e48dd71124cb839638dfe3e787645892cd5f16e5d8ac3b49e2eadbf33314f43cff6d526b8ff7b47440cda4e9a11381c9c4387719e63ab95f18e59ca6bf721018917ff03feb"}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x9, "f183edc04a2011239078d83c47693e34b3452d2ebef24c7f18269230118ad612"}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0001}, 0x8880) (async) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x4, 0x800) 01:58:53 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x401]}, 0x8) recvfrom$netrom(r0, &(0x7f0000000540)=""/89, 0x59, 0x40000002, &(0x7f00000005c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) accept4$netrom(r3, 0x0, 0x0, 0x80800) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x80000000, 0x4) dup(r3) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @rose, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r6 = dup(r3) r7 = accept$netrom(r6, &(0x7f0000000240)={{0x3, @rose}, [@remote, @default, @netrom, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48) sendto$netrom(r7, &(0x7f0000000300)="517eccb65c3c586915ab7bafe51c0e17db991877e471060e3b115c384180bf77698543fad6bced32c7dcb1487699e6a45170a713c77c98f7d74d5462b0e54ebfcadb2d61c93b8a4a8f05db8c3ed237681a57b51b413dd3e6c02ecf7f355745ac8a5f669186a2d364098f00707ecc6ebb6703074f19fce39a5e4237a7e747cb806f2b6c8a71fbd3525b11eabd8bbcdec2015796cd4d2dee5788a1c61fe658b8259a2c599a5e9955acb5bd5b1453068e829766117ea4fc5e88708e12fb9d66440c5db9609979a0bbc7c935757537ba9aa3c8f49596bf8765a67113051cfa708e211bddc5b4896adcb03ee03ec4ba8f", 0xee, 0x40800, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @null, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @bcast, 0x9, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b87cdb978d66efbafc0c66b87c69000066ef0f01b30000640f01c40f00d8f00fbb50f6660f73df0d9a0048c20066b9690300000f32d2855b23f7b60088", 0x41}], 0x1, 0xcb03907811928df5, &(0x7f0000000200)=[@flags={0x3, 0x2000}, @cr4={0x1, 0x52004}], 0x42) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x401]}, 0x8) (async) recvfrom$netrom(r0, &(0x7f0000000540)=""/89, 0x59, 0x40000002, &(0x7f00000005c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r1) (async) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) accept4$netrom(r3, 0x0, 0x0, 0x80800) (async) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x80000000, 0x4) (async) dup(r3) (async) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @rose, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) dup(r3) (async) accept$netrom(r6, &(0x7f0000000240)={{0x3, @rose}, [@remote, @default, @netrom, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48) (async) sendto$netrom(r7, &(0x7f0000000300)="517eccb65c3c586915ab7bafe51c0e17db991877e471060e3b115c384180bf77698543fad6bced32c7dcb1487699e6a45170a713c77c98f7d74d5462b0e54ebfcadb2d61c93b8a4a8f05db8c3ed237681a57b51b413dd3e6c02ecf7f355745ac8a5f669186a2d364098f00707ecc6ebb6703074f19fce39a5e4237a7e747cb806f2b6c8a71fbd3525b11eabd8bbcdec2015796cd4d2dee5788a1c61fe658b8259a2c599a5e9955acb5bd5b1453068e829766117ea4fc5e88708e12fb9d66440c5db9609979a0bbc7c935757537ba9aa3c8f49596bf8765a67113051cfa708e211bddc5b4896adcb03ee03ec4ba8f", 0xee, 0x40800, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @null, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @bcast, 0x9, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b87cdb978d66efbafc0c66b87c69000066ef0f01b30000640f01c40f00d8f00fbb50f6660f73df0d9a0048c20066b9690300000f32d2855b23f7b60088", 0x41}], 0x1, 0xcb03907811928df5, &(0x7f0000000200)=[@flags={0x3, 0x2000}, @cr4={0x1, 0x52004}], 0x42) (async) 01:58:53 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 7) 01:58:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x42, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async, rerun: 32) r3 = dup(0xffffffffffffffff) (rerun: 32) r4 = openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x8100, 0x70) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0xfff, 0x4) accept4$netrom(r3, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="324591cc", @ANYRES16=r5, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x1010}, 0x4000090) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r6, 0x602, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x1000, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004000) [ 1374.948789] hfs: can't find a HFS filesystem on dev loop2 [ 1375.008275] FAULT_INJECTION: forcing a failure. [ 1375.008275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1375.020101] CPU: 0 PID: 23105 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1375.027981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1375.037338] Call Trace: [ 1375.039932] dump_stack+0x1b2/0x281 [ 1375.043569] should_fail.cold+0x10a/0x149 [ 1375.047722] __alloc_pages_nodemask+0x22c/0x2720 [ 1375.052485] ? static_obj+0x50/0x50 [ 1375.056117] ? trace_hardirqs_on+0x10/0x10 [ 1375.060360] ? __lock_acquire+0x5fc/0x3f20 [ 1375.064651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.069495] ? __lock_acquire+0x5fc/0x3f20 [ 1375.073730] ? simple_xattr_get+0xe5/0x160 [ 1375.077970] ? fsnotify+0x974/0x11b0 [ 1375.081690] ? shmem_setattr+0x241/0xbf0 [ 1375.085785] ? __fsnotify_inode_delete+0x20/0x20 [ 1375.090546] cache_grow_begin+0x91/0x700 [ 1375.094612] ? fs_reclaim_release+0xd0/0x110 [ 1375.099035] ? check_preemption_disabled+0x35/0x240 [ 1375.104147] cache_alloc_refill+0x273/0x350 01:58:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x42, 0x80000) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r3 = dup(0xffffffffffffffff) r4 = openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x8100, 0x70) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0xfff, 0x4) (async) accept4$netrom(r3, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="324591cc", @ANYRES16=r5, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x1010}, 0x4000090) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r6, 0x602, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x1000, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004000) 01:58:53 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x401]}, 0x8) recvfrom$netrom(r0, &(0x7f0000000540)=""/89, 0x59, 0x40000002, &(0x7f00000005c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) accept4$netrom(r3, 0x0, 0x0, 0x80800) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x80000000, 0x4) dup(r3) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @rose, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r6 = dup(r3) r7 = accept$netrom(r6, &(0x7f0000000240)={{0x3, @rose}, [@remote, @default, @netrom, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48) sendto$netrom(r7, &(0x7f0000000300)="517eccb65c3c586915ab7bafe51c0e17db991877e471060e3b115c384180bf77698543fad6bced32c7dcb1487699e6a45170a713c77c98f7d74d5462b0e54ebfcadb2d61c93b8a4a8f05db8c3ed237681a57b51b413dd3e6c02ecf7f355745ac8a5f669186a2d364098f00707ecc6ebb6703074f19fce39a5e4237a7e747cb806f2b6c8a71fbd3525b11eabd8bbcdec2015796cd4d2dee5788a1c61fe658b8259a2c599a5e9955acb5bd5b1453068e829766117ea4fc5e88708e12fb9d66440c5db9609979a0bbc7c935757537ba9aa3c8f49596bf8765a67113051cfa708e211bddc5b4896adcb03ee03ec4ba8f", 0xee, 0x40800, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @null, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @bcast, 0x9, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b87cdb978d66efbafc0c66b87c69000066ef0f01b30000640f01c40f00d8f00fbb50f6660f73df0d9a0048c20066b9690300000f32d2855b23f7b60088", 0x41}], 0x1, 0xcb03907811928df5, &(0x7f0000000200)=[@flags={0x3, 0x2000}, @cr4={0x1, 0x52004}], 0x42) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x401]}, 0x8) (async) recvfrom$netrom(r0, &(0x7f0000000540)=""/89, 0x59, 0x40000002, &(0x7f00000005c0)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r1) (async) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) accept4$netrom(r3, 0x0, 0x0, 0x80800) (async) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x80000000, 0x4) (async) dup(r3) (async) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @default, @rose, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) dup(r3) (async) accept$netrom(r6, &(0x7f0000000240)={{0x3, @rose}, [@remote, @default, @netrom, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48) (async) sendto$netrom(r7, &(0x7f0000000300)="517eccb65c3c586915ab7bafe51c0e17db991877e471060e3b115c384180bf77698543fad6bced32c7dcb1487699e6a45170a713c77c98f7d74d5462b0e54ebfcadb2d61c93b8a4a8f05db8c3ed237681a57b51b413dd3e6c02ecf7f355745ac8a5f669186a2d364098f00707ecc6ebb6703074f19fce39a5e4237a7e747cb806f2b6c8a71fbd3525b11eabd8bbcdec2015796cd4d2dee5788a1c61fe658b8259a2c599a5e9955acb5bd5b1453068e829766117ea4fc5e88708e12fb9d66440c5db9609979a0bbc7c935757537ba9aa3c8f49596bf8765a67113051cfa708e211bddc5b4896adcb03ee03ec4ba8f", 0xee, 0x40800, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @null, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @bcast, 0x9, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b87cdb978d66efbafc0c66b87c69000066ef0f01b30000640f01c40f00d8f00fbb50f6660f73df0d9a0048c20066b9690300000f32d2855b23f7b60088", 0x41}], 0x1, 0xcb03907811928df5, &(0x7f0000000200)=[@flags={0x3, 0x2000}, @cr4={0x1, 0x52004}], 0x42) (async) 01:58:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socketpair(0x21, 0x5, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xc8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xae2, @mcast1, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x393c, 0x4) rt_sigpending(&(0x7f0000000640), 0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x9ff9d59aa5b86689, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) [ 1375.108490] kmem_cache_alloc+0x333/0x3c0 [ 1375.112641] getname_flags+0xc8/0x550 [ 1375.116450] do_sys_open+0x1ce/0x410 [ 1375.120169] ? filp_open+0x60/0x60 [ 1375.123710] ? do_syscall_64+0x4c/0x640 [ 1375.127684] ? SyS_open+0x30/0x30 [ 1375.131138] do_syscall_64+0x1d5/0x640 [ 1375.135031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.140217] RIP: 0033:0x7fd723297114 [ 1375.143950] RSP: 002b:00007fd721c58eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1375.151654] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd723297114 01:58:54 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 14) [ 1375.158915] RDX: 0000000000000002 RSI: 00007fd721c58fe0 RDI: 00000000ffffff9c [ 1375.166164] RBP: 00007fd721c58fe0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1375.173423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1375.180704] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1375.221284] hfs: can't find a HFS filesystem on dev loop3 [ 1375.228288] FAULT_INJECTION: forcing a failure. [ 1375.228288] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.249618] CPU: 1 PID: 23154 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1375.257518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1375.266877] Call Trace: [ 1375.269462] dump_stack+0x1b2/0x281 [ 1375.273093] should_fail.cold+0x10a/0x149 [ 1375.277245] should_failslab+0xd6/0x130 [ 1375.281227] kmem_cache_alloc+0x28e/0x3c0 [ 1375.285382] __kernfs_new_node+0x6f/0x470 [ 1375.289537] kernfs_new_node+0x7b/0xe0 [ 1375.293426] __kernfs_create_file+0x3d/0x320 [ 1375.297841] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1375.298200] hfs: unable to parse mount options [ 1375.302509] ? kernfs_create_dir_ns+0x171/0x200 [ 1375.311748] internal_create_group+0x22b/0x710 [ 1375.316339] lo_ioctl+0x1137/0x1cd0 [ 1375.320011] ? loop_set_status64+0xe0/0xe0 [ 1375.324251] blkdev_ioctl+0x540/0x1830 [ 1375.328142] ? blkpg_ioctl+0x8d0/0x8d0 [ 1375.332031] ? trace_hardirqs_on+0x10/0x10 [ 1375.336275] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1375.341382] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1375.346394] block_ioctl+0xd9/0x120 [ 1375.350030] ? blkdev_fallocate+0x3a0/0x3a0 [ 1375.354328] do_vfs_ioctl+0x75a/0xff0 [ 1375.358108] ? lock_acquire+0x170/0x3f0 [ 1375.362058] ? ioctl_preallocate+0x1a0/0x1a0 [ 1375.366447] ? __fget+0x265/0x3e0 [ 1375.369892] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.373844] ? security_file_ioctl+0x83/0xb0 [ 1375.378228] SyS_ioctl+0x7f/0xb0 [ 1375.381570] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.385523] do_syscall_64+0x1d5/0x640 [ 1375.389391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.394560] RIP: 0033:0x7faed27e5fb7 [ 1375.398249] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1375.406038] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1375.413289] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 01:58:54 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@gid={'gid', 0x3d, 0xee01}}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) socketpair(0x21, 0x5, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xc8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xae2, @mcast1, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x393c, 0x4) (async) rt_sigpending(&(0x7f0000000640), 0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x9ff9d59aa5b86689, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) 01:58:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:58:54 executing program 4: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc91f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff8e}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb9b6}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @rose, @bcast, @remote, @rose, @remote, @null]}, &(0x7f0000000200)=0x48) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = signalfd(r3, &(0x7f0000000140)={[0x8000000000000001]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x280, 0x4) pkey_alloc(0x0, 0x0) 01:58:54 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 8) [ 1375.420710] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1375.427956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1375.435202] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1375.448943] hfs: can't find a HFS filesystem on dev loop2 01:58:54 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 15) 01:58:54 executing program 4: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc91f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff8e}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb9b6}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @rose, @bcast, @remote, @rose, @remote, @null]}, &(0x7f0000000200)=0x48) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r4 = signalfd(r3, &(0x7f0000000140)={[0x8000000000000001]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4}) (async) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x280, 0x4) (async, rerun: 32) pkey_alloc(0x0, 0x0) (rerun: 32) 01:58:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf250a0000004c00098008000100ff00000008000200feffffff08000200060000000800020002000000080002000800000008000100070000000800010009000000080002000800000008000100070000001c00028004000400040004000c00038008000100ff03000004000400b40002800c00038008000200ff03000008000100000800000800020004000000340003800800020000080000080002000100000008000200fc430000080002000600000008000200070000000800010006000000020000000800020009000000080001000900000008000200c30000000800020004000000080002000000018072aa77868a7b6600080001000700000008000200050000001c000380080002000000000008000200080000000800010000000000b45abb240bbbe3a5a341de9429b8ee8acfc7f28245f89daa265f515c117c096e509bae0000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socketpair(0x21, 0x5, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xc8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xae2, @mcast1, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x393c, 0x4) rt_sigpending(&(0x7f0000000640), 0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x9ff9d59aa5b86689, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf250a0000004c00098008000100ff00000008000200feffffff08000200060000000800020002000000080002000800000008000100070000000800010009000000080002000800000008000100070000001c00028004000400040004000c00038008000100ff03000004000400b40002800c00038008000200ff03000008000100000800000800020004000000340003800800020000080000080002000100000008000200fc430000080002000600000008000200070000000800010006000000020000000800020009000000080001000900000008000200c30000000800020004000000080002000000018072aa77868a7b6600080001000700000008000200050000001c000380080002000000000008000200080000000800010000000000b45abb240bbbe3a5a341de9429b8ee8acfc7f28245f89daa265f515c117c096e509bae0000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) socketpair(0x21, 0x5, 0xff, &(0x7f0000000240)) (async) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xc8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xae2, @mcast1, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x393c, 0x4) (async) rt_sigpending(&(0x7f0000000640), 0x8) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x9ff9d59aa5b86689, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) (async) 01:58:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1375.554805] hfs: unable to parse mount options [ 1375.571616] FAULT_INJECTION: forcing a failure. [ 1375.571616] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.598805] FAULT_INJECTION: forcing a failure. [ 1375.598805] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.611307] CPU: 1 PID: 23186 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1375.619193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1375.628631] Call Trace: [ 1375.631224] dump_stack+0x1b2/0x281 [ 1375.634859] should_fail.cold+0x10a/0x149 [ 1375.639044] should_failslab+0xd6/0x130 [ 1375.643024] kmem_cache_alloc+0x28e/0x3c0 [ 1375.647180] get_empty_filp+0x86/0x3f0 [ 1375.651066] path_openat+0x84/0x2970 [ 1375.654788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.659636] ? path_lookupat+0x780/0x780 [ 1375.663710] ? trace_hardirqs_on+0x10/0x10 [ 1375.667952] ? fsnotify+0x974/0x11b0 [ 1375.671669] ? shmem_setattr+0x241/0xbf0 [ 1375.675735] do_filp_open+0x179/0x3c0 [ 1375.679536] ? may_open_dev+0xe0/0xe0 [ 1375.683338] ? __alloc_fd+0x1be/0x490 [ 1375.687144] ? lock_downgrade+0x740/0x740 [ 1375.691294] ? do_raw_spin_unlock+0x164/0x220 [ 1375.695789] ? _raw_spin_unlock+0x29/0x40 [ 1375.699933] ? __alloc_fd+0x1be/0x490 [ 1375.703736] do_sys_open+0x296/0x410 [ 1375.707461] ? filp_open+0x60/0x60 [ 1375.711007] ? do_syscall_64+0x4c/0x640 [ 1375.714980] ? SyS_open+0x30/0x30 [ 1375.718433] do_syscall_64+0x1d5/0x640 [ 1375.722340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.727526] RIP: 0033:0x7fd723297114 [ 1375.731233] RSP: 002b:00007fd721c58eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1375.738942] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd723297114 [ 1375.746214] RDX: 0000000000000002 RSI: 00007fd721c58fe0 RDI: 00000000ffffff9c 01:58:54 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @rose, @rose, @remote, @remote, @null, @default]}, &(0x7f0000000100)=0x48) accept$netrom(r0, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:58:54 executing program 4: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc91f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff8e}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb9b6}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @rose, @bcast, @remote, @rose, @remote, @null]}, &(0x7f0000000200)=0x48) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = signalfd(r3, &(0x7f0000000140)={[0x8000000000000001]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x280, 0x4) pkey_alloc(0x0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc91f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff8e}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb9b6}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) (async) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @rose, @bcast, @remote, @rose, @remote, @null]}, &(0x7f0000000200)=0x48) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) signalfd(r3, &(0x7f0000000140)={[0x8000000000000001]}, 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4}) (async) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x280, 0x4) (async) pkey_alloc(0x0, 0x0) (async) 01:58:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:58:54 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@gid={'gid', 0x3d, 0xee01}}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) [ 1375.753485] RBP: 00007fd721c58fe0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1375.760749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1375.768022] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1375.784302] CPU: 0 PID: 23189 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1375.792203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1375.801645] Call Trace: 01:58:54 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 9) [ 1375.804238] dump_stack+0x1b2/0x281 [ 1375.807875] should_fail.cold+0x10a/0x149 [ 1375.812039] should_failslab+0xd6/0x130 [ 1375.816042] kmem_cache_alloc+0x28e/0x3c0 [ 1375.820209] __kernfs_new_node+0x6f/0x470 [ 1375.824365] kernfs_new_node+0x7b/0xe0 [ 1375.828253] __kernfs_create_file+0x3d/0x320 [ 1375.832664] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1375.837330] ? kernfs_create_dir_ns+0x171/0x200 [ 1375.842000] internal_create_group+0x22b/0x710 [ 1375.846587] lo_ioctl+0x1137/0x1cd0 [ 1375.850220] ? loop_set_status64+0xe0/0xe0 01:58:54 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @rose, @rose, @remote, @remote, @null, @default]}, &(0x7f0000000100)=0x48) accept$netrom(r0, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @rose, @rose, @remote, @remote, @null, @default]}, &(0x7f0000000100)=0x48) (async) accept$netrom(r0, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000001c0)=0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) [ 1375.854455] blkdev_ioctl+0x540/0x1830 [ 1375.858349] ? blkpg_ioctl+0x8d0/0x8d0 [ 1375.862237] ? trace_hardirqs_on+0x10/0x10 [ 1375.866477] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1375.871499] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1375.876264] block_ioctl+0xd9/0x120 [ 1375.879892] ? blkdev_fallocate+0x3a0/0x3a0 [ 1375.884228] do_vfs_ioctl+0x75a/0xff0 [ 1375.888035] ? lock_acquire+0x170/0x3f0 [ 1375.892013] ? ioctl_preallocate+0x1a0/0x1a0 [ 1375.893121] hfs: unable to parse mount options [ 1375.896438] ? __fget+0x265/0x3e0 [ 1375.896453] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.896470] ? security_file_ioctl+0x83/0xb0 [ 1375.896480] SyS_ioctl+0x7f/0xb0 [ 1375.896490] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.901636] FAULT_INJECTION: forcing a failure. [ 1375.901636] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.904626] do_syscall_64+0x1d5/0x640 [ 1375.904643] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.904651] RIP: 0033:0x7faed27e5fb7 [ 1375.904656] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:58:54 executing program 1: rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x81800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:58:54 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xb, 0x7ff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10000) [ 1375.904667] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1375.904671] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1375.904676] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1375.904680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1375.904685] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1375.993125] Bluetooth: hci0 command 0x0401 tx timeout [ 1376.108196] CPU: 1 PID: 23225 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1376.116131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1376.125498] Call Trace: [ 1376.128093] dump_stack+0x1b2/0x281 [ 1376.131730] should_fail.cold+0x10a/0x149 [ 1376.135895] should_failslab+0xd6/0x130 [ 1376.139876] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1376.144550] apparmor_file_alloc_security+0x129/0x800 [ 1376.149751] security_file_alloc+0x66/0xa0 [ 1376.153987] ? selinux_is_enabled+0x5/0x50 [ 1376.158224] get_empty_filp+0x16b/0x3f0 [ 1376.162205] path_openat+0x84/0x2970 [ 1376.165923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1376.170987] ? path_lookupat+0x780/0x780 [ 1376.175053] ? trace_hardirqs_on+0x10/0x10 [ 1376.179292] ? fsnotify+0x974/0x11b0 [ 1376.183011] ? shmem_setattr+0x241/0xbf0 [ 1376.187093] do_filp_open+0x179/0x3c0 [ 1376.190896] ? may_open_dev+0xe0/0xe0 [ 1376.194703] ? __alloc_fd+0x1be/0x490 [ 1376.198505] ? lock_downgrade+0x740/0x740 [ 1376.199755] hfs: can't find a HFS filesystem on dev loop2 [ 1376.202653] ? do_raw_spin_unlock+0x164/0x220 [ 1376.202664] ? _raw_spin_unlock+0x29/0x40 [ 1376.202676] ? __alloc_fd+0x1be/0x490 [ 1376.220617] do_sys_open+0x296/0x410 [ 1376.224334] ? filp_open+0x60/0x60 [ 1376.227879] ? do_syscall_64+0x4c/0x640 [ 1376.231875] ? SyS_open+0x30/0x30 [ 1376.235328] do_syscall_64+0x1d5/0x640 [ 1376.239225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1376.244412] RIP: 0033:0x7fd723297114 [ 1376.248117] RSP: 002b:00007fd721c58eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 01:58:55 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 16) 01:58:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:55 executing program 1: rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x81800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:58:55 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @rose, @rose, @remote, @remote, @null, @default]}, &(0x7f0000000100)=0x48) accept$netrom(r0, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @rose, @rose, @remote, @remote, @null, @default]}, &(0x7f0000000100)=0x48) (async) accept$netrom(r0, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @rose, @netrom, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000001c0)=0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) 01:58:55 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) r0 = dup(0xffffffffffffffff) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xb, 0x7ff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10000) 01:58:55 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 10) [ 1376.255828] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd723297114 [ 1376.263092] RDX: 0000000000000002 RSI: 00007fd721c58fe0 RDI: 00000000ffffff9c [ 1376.270368] RBP: 00007fd721c58fe0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1376.277718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1376.284973] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1376.402444] hfs: unable to parse mount options [ 1376.410963] FAULT_INJECTION: forcing a failure. [ 1376.410963] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.412069] FAULT_INJECTION: forcing a failure. [ 1376.412069] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.438312] CPU: 1 PID: 23293 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1376.446209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1376.455560] Call Trace: [ 1376.458142] dump_stack+0x1b2/0x281 [ 1376.461765] should_fail.cold+0x10a/0x149 [ 1376.465916] should_failslab+0xd6/0x130 [ 1376.469892] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1376.474558] ? loop_get_status64+0x100/0x100 [ 1376.478952] __kthread_create_on_node+0xbe/0x3a0 [ 1376.483696] ? kthread_park+0x130/0x130 [ 1376.487672] ? loop_get_status64+0x100/0x100 [ 1376.492075] kthread_create_on_node+0xa8/0xd0 [ 1376.496552] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1376.501551] ? __lockdep_init_map+0x100/0x560 [ 1376.506037] ? __lockdep_init_map+0x100/0x560 [ 1376.510524] lo_ioctl+0xcd9/0x1cd0 [ 1376.514060] ? loop_set_status64+0xe0/0xe0 [ 1376.518299] blkdev_ioctl+0x540/0x1830 [ 1376.522176] ? blkpg_ioctl+0x8d0/0x8d0 [ 1376.526058] ? trace_hardirqs_on+0x10/0x10 [ 1376.530286] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1376.535373] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1376.540386] block_ioctl+0xd9/0x120 [ 1376.544000] ? blkdev_fallocate+0x3a0/0x3a0 [ 1376.548320] do_vfs_ioctl+0x75a/0xff0 [ 1376.552115] ? lock_acquire+0x170/0x3f0 [ 1376.556082] ? ioctl_preallocate+0x1a0/0x1a0 [ 1376.560493] ? __fget+0x265/0x3e0 [ 1376.563950] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.567920] ? security_file_ioctl+0x83/0xb0 [ 1376.572330] SyS_ioctl+0x7f/0xb0 [ 1376.575691] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.579669] do_syscall_64+0x1d5/0x640 [ 1376.583562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1376.588741] RIP: 0033:0x7fd7232e3fb7 [ 1376.592440] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:58:55 executing program 1: rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x81800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x81800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) [ 1376.600131] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1376.607391] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1376.614669] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1376.621929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1376.629212] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1376.637561] CPU: 0 PID: 23283 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1376.645488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1376.654834] Call Trace: [ 1376.657421] dump_stack+0x1b2/0x281 [ 1376.661050] should_fail.cold+0x10a/0x149 [ 1376.665196] should_failslab+0xd6/0x130 [ 1376.669166] kmem_cache_alloc+0x28e/0x3c0 [ 1376.673318] __kernfs_new_node+0x6f/0x470 [ 1376.677468] kernfs_new_node+0x7b/0xe0 [ 1376.681359] __kernfs_create_file+0x3d/0x320 [ 1376.685771] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1376.690439] ? kernfs_create_dir_ns+0x171/0x200 [ 1376.695114] internal_create_group+0x22b/0x710 [ 1376.699701] lo_ioctl+0x1137/0x1cd0 01:58:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "556ba297eddd41f628be1b82adc9a3fa", "ed04c6e49a9f332574673e0728fb7846"}}}, 0x2b) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)="c3c77cd95e51ac31ded8cc3cd7cf3e711b956e9551094c146e9addf72f457340ba0a600135d9664d438ff9391e3565dd1eba9a82b16b0fc2ff91da8741ebb5a268b4020720a5676331fbe884be2a876b4dc6fbde2e19c9599cc8fbedaca4f516b539336c3103014dbe90cf2bb73192b10494e3946d735b99b512b2c948c1b1a195a45126f757158cd1caf207f69e487b1d2d25e812f0f80b18b1b073035d42f4bb96de41169171d1bd371bad8a4c1ae20a0305b59e8f59d7864c107e1f87f07133ee853f8218") 01:58:55 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xb, 0x7ff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10000) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xb, 0x7ff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10000) (async) [ 1376.703340] ? loop_set_status64+0xe0/0xe0 [ 1376.707584] blkdev_ioctl+0x540/0x1830 [ 1376.711478] ? blkpg_ioctl+0x8d0/0x8d0 [ 1376.715365] ? trace_hardirqs_on+0x10/0x10 [ 1376.719694] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1376.724805] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1376.729834] block_ioctl+0xd9/0x120 [ 1376.733463] ? blkdev_fallocate+0x3a0/0x3a0 [ 1376.737795] do_vfs_ioctl+0x75a/0xff0 [ 1376.741602] ? lock_acquire+0x170/0x3f0 [ 1376.745582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1376.749989] ? __fget+0x265/0x3e0 01:58:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "556ba297eddd41f628be1b82adc9a3fa", "ed04c6e49a9f332574673e0728fb7846"}}}, 0x2b) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)="c3c77cd95e51ac31ded8cc3cd7cf3e711b956e9551094c146e9addf72f457340ba0a600135d9664d438ff9391e3565dd1eba9a82b16b0fc2ff91da8741ebb5a268b4020720a5676331fbe884be2a876b4dc6fbde2e19c9599cc8fbedaca4f516b539336c3103014dbe90cf2bb73192b10494e3946d735b99b512b2c948c1b1a195a45126f757158cd1caf207f69e487b1d2d25e812f0f80b18b1b073035d42f4bb96de41169171d1bd371bad8a4c1ae20a0305b59e8f59d7864c107e1f87f07133ee853f8218") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "556ba297eddd41f628be1b82adc9a3fa", "ed04c6e49a9f332574673e0728fb7846"}}}, 0x2b) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)="c3c77cd95e51ac31ded8cc3cd7cf3e711b956e9551094c146e9addf72f457340ba0a600135d9664d438ff9391e3565dd1eba9a82b16b0fc2ff91da8741ebb5a268b4020720a5676331fbe884be2a876b4dc6fbde2e19c9599cc8fbedaca4f516b539336c3103014dbe90cf2bb73192b10494e3946d735b99b512b2c948c1b1a195a45126f757158cd1caf207f69e487b1d2d25e812f0f80b18b1b073035d42f4bb96de41169171d1bd371bad8a4c1ae20a0305b59e8f59d7864c107e1f87f07133ee853f8218") (async) [ 1376.753463] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.757440] ? security_file_ioctl+0x83/0xb0 [ 1376.761852] SyS_ioctl+0x7f/0xb0 [ 1376.765234] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.769211] do_syscall_64+0x1d5/0x640 [ 1376.773105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1376.778292] RIP: 0033:0x7faed27e5fb7 [ 1376.781997] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.789700] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1376.796969] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 01:58:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "556ba297eddd41f628be1b82adc9a3fa", "ed04c6e49a9f332574673e0728fb7846"}}}, 0x2b) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)="c3c77cd95e51ac31ded8cc3cd7cf3e711b956e9551094c146e9addf72f457340ba0a600135d9664d438ff9391e3565dd1eba9a82b16b0fc2ff91da8741ebb5a268b4020720a5676331fbe884be2a876b4dc6fbde2e19c9599cc8fbedaca4f516b539336c3103014dbe90cf2bb73192b10494e3946d735b99b512b2c948c1b1a195a45126f757158cd1caf207f69e487b1d2d25e812f0f80b18b1b073035d42f4bb96de41169171d1bd371bad8a4c1ae20a0305b59e8f59d7864c107e1f87f07133ee853f8218") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "556ba297eddd41f628be1b82adc9a3fa", "ed04c6e49a9f332574673e0728fb7846"}}}, 0x2b) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)="c3c77cd95e51ac31ded8cc3cd7cf3e711b956e9551094c146e9addf72f457340ba0a600135d9664d438ff9391e3565dd1eba9a82b16b0fc2ff91da8741ebb5a268b4020720a5676331fbe884be2a876b4dc6fbde2e19c9599cc8fbedaca4f516b539336c3103014dbe90cf2bb73192b10494e3946d735b99b512b2c948c1b1a195a45126f757158cd1caf207f69e487b1d2d25e812f0f80b18b1b073035d42f4bb96de41169171d1bd371bad8a4c1ae20a0305b59e8f59d7864c107e1f87f07133ee853f8218") (async) 01:58:55 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 11) [ 1376.804238] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1376.811511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1376.818791] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:55 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 17) 01:58:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:55 executing program 4: pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8) r1 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x90, 0x31, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff69a3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4010) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="6d1ec746ebca6814295bc3b562e7c731d001aecd099a3b616b8f38becccc269c21944ddf712c7cf39e48433c995e86c535a25c99181d57f3c40ab29d2fa3d37e0f85054fcae03ebeb716818454ab4d925975672742c150300aa1bd13d99d4b967a211abb5f3529a77506ed1d0d71ec95048cc3ccea9ff236e3e40ea09516023d35a54fed9853ccb6180cbd7f8f4a81cea630a8503475c392b536d49326c713be04aea3918682eff2804f97def7cf006e61ee2bd353ae04260a33f55c", 0xbc, r1}, 0x68) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @remote, @rose, @netrom, @default, @bcast, @null, @null]}, &(0x7f00000002c0)=0x48, 0x1800) signalfd(r2, &(0x7f0000000300)={[0x100]}, 0x8) pkey_alloc(0x0, 0x0) [ 1376.852914] hfs: can't find a HFS filesystem on dev loop2 01:58:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x1a) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1376.897057] FAULT_INJECTION: forcing a failure. [ 1376.897057] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.946977] hfs: unable to parse mount options [ 1376.955776] CPU: 1 PID: 23334 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1376.963791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1376.973143] Call Trace: [ 1376.975736] dump_stack+0x1b2/0x281 [ 1376.979457] should_fail.cold+0x10a/0x149 [ 1376.983612] should_failslab+0xd6/0x130 [ 1376.987600] kmem_cache_alloc+0x28e/0x3c0 [ 1376.991755] __kernfs_new_node+0x6f/0x470 01:58:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x1a) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(0xffffffffffffffff) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x1a) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:58:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ec6027c06182b3eb57d49a5fcc3340143090000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 1376.995907] kernfs_create_dir_ns+0x8c/0x200 [ 1377.000322] internal_create_group+0xe9/0x710 [ 1377.004824] lo_ioctl+0x1137/0x1cd0 [ 1377.008453] ? loop_set_status64+0xe0/0xe0 [ 1377.012692] blkdev_ioctl+0x540/0x1830 [ 1377.016584] ? blkpg_ioctl+0x8d0/0x8d0 [ 1377.020471] ? trace_hardirqs_on+0x10/0x10 [ 1377.024707] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.029812] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1377.034831] block_ioctl+0xd9/0x120 [ 1377.038453] ? blkdev_fallocate+0x3a0/0x3a0 [ 1377.042758] do_vfs_ioctl+0x75a/0xff0 [ 1377.046568] ? lock_acquire+0x170/0x3f0 [ 1377.050524] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.054923] ? __fget+0x265/0x3e0 [ 1377.058355] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.062311] ? security_file_ioctl+0x83/0xb0 [ 1377.066830] SyS_ioctl+0x7f/0xb0 [ 1377.070179] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.074146] do_syscall_64+0x1d5/0x640 [ 1377.078029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.083205] RIP: 0033:0x7fd7232e3fb7 [ 1377.086911] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:58:56 executing program 4: pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8) r1 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x90, 0x31, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff69a3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4010) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="6d1ec746ebca6814295bc3b562e7c731d001aecd099a3b616b8f38becccc269c21944ddf712c7cf39e48433c995e86c535a25c99181d57f3c40ab29d2fa3d37e0f85054fcae03ebeb716818454ab4d925975672742c150300aa1bd13d99d4b967a211abb5f3529a77506ed1d0d71ec95048cc3ccea9ff236e3e40ea09516023d35a54fed9853ccb6180cbd7f8f4a81cea630a8503475c392b536d49326c713be04aea3918682eff2804f97def7cf006e61ee2bd353ae04260a33f55c", 0xbc, r1}, 0x68) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @remote, @rose, @netrom, @default, @bcast, @null, @null]}, &(0x7f00000002c0)=0x48, 0x1800) signalfd(r2, &(0x7f0000000300)={[0x100]}, 0x8) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8) (async) accept$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x90, 0x31, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff69a3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="6d1ec746ebca6814295bc3b562e7c731d001aecd099a3b616b8f38becccc269c21944ddf712c7cf39e48433c995e86c535a25c99181d57f3c40ab29d2fa3d37e0f85054fcae03ebeb716818454ab4d925975672742c150300aa1bd13d99d4b967a211abb5f3529a77506ed1d0d71ec95048cc3ccea9ff236e3e40ea09516023d35a54fed9853ccb6180cbd7f8f4a81cea630a8503475c392b536d49326c713be04aea3918682eff2804f97def7cf006e61ee2bd353ae04260a33f55c", 0xbc, r1}, 0x68) (async) accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @remote, @rose, @netrom, @default, @bcast, @null, @null]}, &(0x7f00000002c0)=0x48, 0x1800) (async) signalfd(r2, &(0x7f0000000300)={[0x100]}, 0x8) (async) pkey_alloc(0x0, 0x0) (async) [ 1377.094600] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1377.101854] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1377.109109] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1377.116368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1377.123713] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1377.146548] FAULT_INJECTION: forcing a failure. [ 1377.146548] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.161287] hfs: can't find a HFS filesystem on dev loop3 [ 1377.166325] CPU: 1 PID: 23349 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1377.174719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1377.184075] Call Trace: [ 1377.186700] dump_stack+0x1b2/0x281 [ 1377.190332] should_fail.cold+0x10a/0x149 [ 1377.194652] should_failslab+0xd6/0x130 [ 1377.198630] kmem_cache_alloc+0x28e/0x3c0 [ 1377.202787] __kernfs_new_node+0x6f/0x470 [ 1377.206945] kernfs_new_node+0x7b/0xe0 [ 1377.210838] __kernfs_create_file+0x3d/0x320 [ 1377.215249] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1377.219918] ? kernfs_create_dir_ns+0x171/0x200 [ 1377.224590] internal_create_group+0x22b/0x710 [ 1377.229184] lo_ioctl+0x1137/0x1cd0 [ 1377.232825] ? loop_set_status64+0xe0/0xe0 [ 1377.237058] blkdev_ioctl+0x540/0x1830 [ 1377.240947] ? blkpg_ioctl+0x8d0/0x8d0 [ 1377.244836] ? trace_hardirqs_on+0x10/0x10 01:58:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ec6027c06182b3eb57d49a5fcc3340143090000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ec6027c06182b3eb57d49a5fcc3340143090000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) [ 1377.249074] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.254175] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1377.259471] block_ioctl+0xd9/0x120 [ 1377.263105] ? blkdev_fallocate+0x3a0/0x3a0 [ 1377.267438] do_vfs_ioctl+0x75a/0xff0 [ 1377.271243] ? lock_acquire+0x170/0x3f0 [ 1377.275218] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.279632] ? __fget+0x265/0x3e0 [ 1377.283085] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.287124] ? security_file_ioctl+0x83/0xb0 [ 1377.291532] SyS_ioctl+0x7f/0xb0 [ 1377.294891] ? do_vfs_ioctl+0xff0/0xff0 01:58:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x1a) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(0xffffffffffffffff) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x1a) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) [ 1377.298866] do_syscall_64+0x1d5/0x640 [ 1377.302770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.307951] RIP: 0033:0x7faed27e5fb7 [ 1377.311667] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.319374] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1377.326637] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1377.333900] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1377.341192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:58:56 executing program 4: pkey_alloc(0x0, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8) r1 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x90, 0x31, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff69a3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="6d1ec746ebca6814295bc3b562e7c731d001aecd099a3b616b8f38becccc269c21944ddf712c7cf39e48433c995e86c535a25c99181d57f3c40ab29d2fa3d37e0f85054fcae03ebeb716818454ab4d925975672742c150300aa1bd13d99d4b967a211abb5f3529a77506ed1d0d71ec95048cc3ccea9ff236e3e40ea09516023d35a54fed9853ccb6180cbd7f8f4a81cea630a8503475c392b536d49326c713be04aea3918682eff2804f97def7cf006e61ee2bd353ae04260a33f55c", 0xbc, r1}, 0x68) (async) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @remote, @rose, @netrom, @default, @bcast, @null, @null]}, &(0x7f00000002c0)=0x48, 0x1800) signalfd(r2, &(0x7f0000000300)={[0x100]}, 0x8) (async) pkey_alloc(0x0, 0x0) [ 1377.348461] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:56 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 12) [ 1377.416204] hfs: can't find a HFS filesystem on dev loop2 [ 1377.430087] hfs: unable to parse mount options [ 1377.440200] FAULT_INJECTION: forcing a failure. [ 1377.440200] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.452526] CPU: 1 PID: 23409 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1377.460425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1377.469899] Call Trace: [ 1377.472490] dump_stack+0x1b2/0x281 [ 1377.476127] should_fail.cold+0x10a/0x149 [ 1377.480281] should_failslab+0xd6/0x130 [ 1377.484259] kmem_cache_alloc+0x28e/0x3c0 [ 1377.488419] __kernfs_new_node+0x6f/0x470 [ 1377.492581] kernfs_new_node+0x7b/0xe0 [ 1377.496649] __kernfs_create_file+0x3d/0x320 [ 1377.501058] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1377.505726] ? kernfs_create_dir_ns+0x171/0x200 [ 1377.510405] internal_create_group+0x22b/0x710 [ 1377.514999] lo_ioctl+0x1137/0x1cd0 [ 1377.518634] ? loop_set_status64+0xe0/0xe0 [ 1377.522905] blkdev_ioctl+0x540/0x1830 [ 1377.526794] ? blkpg_ioctl+0x8d0/0x8d0 [ 1377.530683] ? trace_hardirqs_on+0x10/0x10 [ 1377.534922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.540056] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1377.545077] block_ioctl+0xd9/0x120 [ 1377.548703] ? blkdev_fallocate+0x3a0/0x3a0 [ 1377.553033] do_vfs_ioctl+0x75a/0xff0 [ 1377.556833] ? lock_acquire+0x170/0x3f0 [ 1377.560809] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.565218] ? __fget+0x265/0x3e0 [ 1377.568672] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.572643] ? security_file_ioctl+0x83/0xb0 [ 1377.577051] SyS_ioctl+0x7f/0xb0 [ 1377.580411] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.584401] do_syscall_64+0x1d5/0x640 [ 1377.588296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.593481] RIP: 0033:0x7fd7232e3fb7 [ 1377.597180] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.604889] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1377.612156] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1377.619431] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1377.626703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1377.634239] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:56 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 18) 01:58:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ec6027c06182b3eb57d49a5fcc3340143090000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ec6027c06182b3eb57d49a5fcc3340143090000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf2513000000380101800d0001007564703a73797a3100000000080003000000000044000400200001000a004e2400000009ff01000000000000000000000000000106000000200002000a004e2000000001200100000000000000000000000000020040004014000280080003007500000008000300be0c00000d0001007564703a73797a320000000038000400200001000a004e2400000002ff020000000000000000000000000001060000001400020002004e24000000000000000000000000380004001400010002004e23000000000000000000000000200002000a004e230000bc96fc0000000000000000000000000000000700000044000400200001000a004e23f0000000ff010000000000000000000000000001e0ffffff200002000a004e22000000affe80000000000000000000000000002304000000"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) 01:58:56 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001140)={r1, r2, 0x7, 0x1000, &(0x7f0000000140)="a43aea86eb848eba207ceb0ab5d6d0c4f5de190ada16f6fb4d4c70a81030a90cfbc179eb5a9a3a0f484621ee76dbb725b753698cb7962bba43c974b78eb32ea7fd14c89a5321df85984de443a95b847f0f3d1828a7dfb5db428f9dd8d2ebcc431672953015fe56b47321dd0e7c9723bb93409f7f81d0d4a919e65bb9e72f3de67c0bc294a85953cc0de963dd8021e8c0718ff9746f5081a1818ec42b3998730d170ecad5e87f43a91576a63ac311d0e8ba71aeb47aaf00117b9c676898b01cee8012ebb2b8431ae22e687a10e7e8dfcc2fc626835eb93deacf9fdf2cc3f970f4740060fb67798e87b26fcd61dd0b3c5d2e62e8949b419e39e7ff70bba90ad640ee9e865b2a6540d5fd5900c27ea76a92059b04b33c94982a879dc0a53cd5973a3eadeb7d007c62243a85c10b92adbd40cbbe0ce2bd458546eb98238975c16f82e1057b3468f2965737b89b6cce785a2dc77079c45b74c07d475482d9dd6fe66a6ee570296ed6f8546c8ab98ebf159524dcdb3c2fd430cf9fb92509fd586d65dda32b7690bacf96bfbb2804b731115e7c985330954c4ea5bb60af6f8ae6023bd67034ebce87c269c5c24c335c891eb20e56958797746fa04640731a5547c53f2609f34816b736049e4934bb5785a344e1dbabc2ddc6fcb9271a048a73c6ee09098e38846335e68c1dfee349022b726197171a948a1980c130423389d87e82ddf1414dbdcb8a5184b464bb3656be9da3c2062d99b9ffec962eb93b384797acddd4149c539155b7eb074f99f27f60115fee4b16a98362778f253122e3f7b5b4bb859bfa9f6530314aafc5db1fcc4f7e9564e38943cfe45d195c32ba2e8dc21379fe68b1f76448e92ee0f9325f37b0ae34dc4988f04a3f65d245a0dc33c9bf692291e555c696ca0f4017e5da1380d910931d300cb82d27e68ada882fdf926b60b85c9160ed83b62bd33d0845f218e56b814a13895c93ae3c9eac55602405485561c981ebc69d96cb2413671e8296ec6b81d367a973c9e68cdf1d85a4eda386c38ac1ec9d406a361ac8c7117de20b95aeaf7b9888adf3b3b7880eacc20e829b9e8078a6e1f07c095d29d6a7e96e4cea4f6a9862f001387b8a630051cb23cf07da8c24d5f1df52fc19cec496334c1f3077790c9a3a20b14b93a2bba62ec6b678d006d3efab1111fdf0ff4195ff84c103f112eae8848e3ba6cf6b31af3696c9d625bf84036ae56e34243216b6327dac342da57f996c6434f9e114b67ebad89c0d47e9728a3405f0c6a2890dca62e7c5777caaed4ff13883dc4f562bb00864884148927423ac412020be3dc293249cae0bc58d80cc0a2549f876a81b928a1ed087ccd5f03083b2cb6aa6900a360eefe41bdd793ea4be1b9bcd656add38711cda04524824fedd392e997d4b9b458a5c1eb4e44022141d328cb8dcd529768007c90dd08420af845735b61d7c4b5adf1f97a14eadd60e2d7865eba9a36a4ac13fb5122976748cab06b96e8029ac340c22a9734cbb68d097cea64eb641e8c921a7120e398007451f9e5598d7b1a09ef031f129da671dee83352b91be2041751ed80243e1e35337a650188c2a83cfede68d55667ae7c5b19d23e45aca53ec52ee7915591201b91cedfebaebe5e8634f713938ae6c36348834b8686856c7bb2fae599d7a320245e7ef5669b426ff1c07cfd4b307d7ac75fe667b257d391b707dc1b15ec184c4f631c36f6d322657a24ef1c2cf7ebca91e7820cdf1303ceb31e769d8ae4e3d6e5f946a55e5aa0e7d50b84bf1f5eb976f7930b60b61142458d4cb251dc87e6d41d18302a1e9b88c19de6e6899ed348e1b97a90c17057155cad2ab7fe567ec03172fc2d4ca0e3110bc0b88cc572c2193fcdd1d0075ed454e9daf5122afa96dfd0da806100105c0167e5266ac2c3cc0beb51990f213520c20e65d63ad72cc90a9530dfedfff3f89bb95c72be36ac252ad7a454339decba3f02bd49a11b5942ff39ebcb790ef20fe288fea1f9f0ea98cd21e9cf43c9f494e8da08f921627b208b43f25e09a45b65867985cbab46f5c8f8d1debca762afd382058ae529e98aad8c65bb0e0e3d4b04ab050d1a2fa6de68b67045e6396f7684e47ddd65c268dcf17682f33537e109494ba49b693cf2f4f2bf82bbe51cded313500392e581cd4333d7d0b922572d72b1f52e6ebf867d4288d0ced0ddba94b996061a7ab698d3821ba097f4b1b5cd881ab026000e09a6400456641bbeddd6f98749cedf47da5a75c7e69b7fbbb572e0e6a91e9e339ae41648ead2022c5399cbae1963ff4d36e75390c45de659de728ca70896b403c8244131a3d7f613b7745ebe82d25df896a997cebc82106f14af24c4ccc9c5fe1bdbb28e0eb5b6e5385373dd73f11580bc6b11ce30cda64bc93913721ff2e3f7fc307508c70d12ea916c6d77479a90d7a92b6b33e72e054911a8fb728bcef4595dff3ff25bf8c0c4d04c82f7b9e9ca2c01c0fc6f88d21204b6250e34d36aa2d47965e3b3b4d9cb8670be679eb5b757965ed6caa822e3e13ada836a258341d41fd2ccfdb0aeaf30af9a19755643bc263acaac596ad51031fd14b167ebfb803f59d2b5cb7dd6328f76be94d08bd9733476ab948b23eb3c6d62543c31aa6f2eca5406e9a92f3eee3e8b2c6b84233c266b4095676c0d1cf7ea42566235546fa74ad5d6c5ca9c828dd8871b4ec99203a5c17c022ea3116316d4236068676fca438aeabe197ba10e8a63f076637389ae97ced8290662825ee93627e558af75455917704380272da98266a57cfe59e58075d91ecf29098f9df7ed00ea8554f920941d4f0e5550961b8b8248d6fe632a753918a564a7423f3c37c439d3c24c6570a88bc41cec69c99172a165ceaac9f71eec63d436f4867f07b737d52adc13ee083b7302dd54afc379f1a098ad7a56fc2b0e36fdf96d7a8a2669ad3eece51e206b40c655e1a9051fdb1af67b5c9b365c59c8e601c2bfb731f0c977b767c7ee1c3074ec7179a0874ab697117a31275f81be02045c214a2d70fff81095a8af2d89419ae5f1bde7f03cdbfdd5a4d71ff84b6eea6de3b958d16b34773f8e44935989c803b3db124222f9858ed5b1fa69ffb13e999b553523d1524c7e461963575a1c984cdb59cc3f4f5d54510599b1b106b8e934a64e67a710fb8b9fdc3527f995528c4489a143105aad57941ba4753943e7cb8e9ca3f8a6241d182bea96e80bc32ff44b372471173550e4f32cfc8d47afc0568639483f3eba9a8737be6a9ee21cd9f9f2e45004abfd4d8c1aa1c93188436b78a9132c2e488886e18f4ab23198fcd2cb2f6784fd296fc682e72e7d7b6fdcc80a357cc816ee189df1fd2fac906ac019c70cad6f67b6736c1bcc4ff875cf5693d3881b4b483448aa2e97d1fc0dab5cd2c38211e7292f0acc202097aaaf2df5613577d5b09e1742c55d0dfaea563efbf3cb9e34409984d6a7adb3fdfe23252f32fcfc8a6f6fad761e25e2f129ee3c146edff8fd924eee4300407b097284e78a8642f38d70c1283c6c553ea36c0be7056660341a7d14223393895416f783e18b98f84db09bcfe631cdc43bb78c0cdca91e3b56794abd644722a77c2c60fa6b8571c7b323503ae399843a2b1b12553ccce5197e067cc8665c541cfded2b68e8d7ad5fc311b3790e2b9b45791b8c5e9681640f95f821818eee940273c811b0a4c3720bd3c4dc2c4f589c0e4711024fc7d55d6095f999b470a7ba00a352fe475a51df062ae0d453fe257b2343917ac499bd6ecf568af8afe807b29bcf207f66549777e0fa701b5493a92125cd5f749fbd5e50b1fbcdc759a3372de0537947759c9b55ccb1aff6f050b6d771157b55c601415fb7e96df40fe6e82cb5476d22513dbdc270e4452eec6c6f42f85100a211a260dc2128e53b58b165086a2ae37a7bf4327450de17c3d5e58d681ab8e25b9aed7b53acbc18d2edf2dfb75c99edb1e60c8dd7a7c6bbbe6e8ec683a0ed958fb844781dbea31cef9f8a40fde54fc4dcd35bf5b619cfcc6e23e961d7f3f93315150e4b53f1d96464d3d3bb833f511d80c5a27e4cf29c39f0c7b59bf6cffd0ab01d83c4b7bd330835e351904d8f3b43ae59ff882be399de38c86f1b3ef1bf0df1d064344bd1fa7ae580513bb185c51cd30307f53617e282b941386ee941d681620863276297487f7d34b46a2c08544adae46c7558863ec3e4a57231291b100019b245b652626a1107bd63ccd293c11de1152c9514e7d324b638488106c487336acdae10814492db6e4de7388f63900bbfd017139643f6d983529b86b216550539a967f7fe12951ea148ac9d2b2c08b70570ba207840371b7870540105aa4dc3cbedfa6b6dd0a568fa9cb18f170eaa601a6742dacb113c13de07dbe6963c88abc0c3d8c255ea343cd080578ceb3c0ae0b6f6a0a743a1a265344b05918fcef6ed2a6d7eb0a9a36bd6e7650ed83372fc5e051b92f59c7ad09333298ce5da68aa4d98db26d4a1a9ea16a6af24c3282cdeea76eaa811841ee3adf3f3bbfc812aa1516b79847c04cc000404382fdc616d09f84206cbd533365c14abbc9d50787319669a92b9c9e5fe8fc888654d2c31cc7e0e57640424bc7d433e7505d2dee026353bd27ad28b646b72cbd49e300b2cd5e506a9cf6516018bc4ae2001e7086e4cc3049b6d2e67d59211ce332689c977159fac8ad634cdb4bfb29c0f020f741e40976e7d16b219d851be2b1b6f5870b65d17701509abccdc5225d45566fbf487681f5c81bcd81efbf3f6777c9f6ce450b11ff317c4f65d1333f20802c61dcf97a42e668ba471f453ffca7543272accfe29aca8c326fb5668705f1a45662b928911187c165993b0a43f97b022bd6a8adb2a2d7710f4c0dcfe6166583a80110cb7215fe40f75260c036d835871c7bf4f2be23832270df7d16e90f5f0cbb9c426ac5e77ca15c5db8382764e92080d5cdadfa3b6c7b08a1ae5ad8fccc890e7707c1df0da7fdebba85ff6a6f838cec6319464b533083eea7008a346ee3c1d0cfd294d0357570f0cf6c7bd5a0b31d2e47c1310c297ade907e286fe0465f663b557b2d48715a95ec08c97202ec0ca4972cee207df5e8883a9abd701bb86746363f06f354d90823db32a3d016f2d94123caf7b681773cf2c98d07e52e2cd89ca18262efab5b659ac8fbcf46fa842a350af5338eba06b23d735d4ea448b0b42f5a73830673bed7896cd8259370de959a706f54291238122e359245ec1e05375b7fea3f0b763c5fe3af9b726b7329e46d8920cfc38b21216eaa01c69bdb5c2b79387693f0e12cf629f95bea174ca77ed55da9207a998bc8cd5b8bb780e530981bb94e3374379e15f92d76ebc8f97a67367c5baa8a8fceb415a86dd2c7eea54fc3c7ab2c2bf0616ae81c36674d4a34af2643cd96e86570b996ddae22a0e197ea6fe6034e4863a29223092d1c8757ddcee5ba0d1998f52856d1d62e53914736d45c01c41bf183d0b30f35635104274775b02937f1d352a444a41a2d92bb8d60d5da609450dc83b2c1f2c4b00a60064a100a053d19d349a52412fe14d61a4123451a550237189830ee83a995fad3c02b626a24e17fe8d8eac0282429a5ebb6cd23ec0a30b8cbab08002efbb681042c857d00524e2f4a1c766edb33146ca6aa93a910ce651a4a057189dcb5ca46059783b15eece446768aacb92899afc1711d3e4cd43816d1b28b204c2d679696fb796132c3f261fce5170f1024463b46d2df5efe10388c261c9f8e0eac67092d089f232d6c3ebb9eea4f7383dbc7994c515caa416ac386375cd0e11115", 0x0, 0x3f, 0x4cab, 0x6, 0x1, 0x0, 0x1000, 'syz0\x00'}) socketpair(0x18, 0xa, 0x3, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="28000400b8affd39036f8fb64bb20cd16febb93562352600bf42324fb3d9bc448d40e4ea9e4e81c0ac83b401b0bdb2ae316c722276f3bfbfb9a6b9fbc3cb87300750b23dc1fcb9ae2ea40865cb9d66e3d2ab7f16469d7d36b1b199f9da809e14e300d0e798af6da1ab16cc799ce671ba7828e8e799c84c11b08080", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250d000000140005000000000000009e1c864902993e570000"], 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r7 = accept4$netrom(r0, &(0x7f0000001580)={{0x3, @rose}, [@rose, @null, @netrom, @bcast, @null, @rose, @rose, @default]}, &(0x7f0000001600)=0x48, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000001680)={r7, r2, 0x0, 0x0, &(0x7f0000001640), 0xff, 0x7f, 0x0, 0x4, 0x69, 0x3, 0x3, 'syz1\x00'}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r6, 0x0) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf250d0000001400038008000100b60500000800020004000000140001800d00010069623a776c616e30000000002400098008000100f9ffffff080002000600000008000200fcffffff08000100030000c4d7704b525524c79eb283f534"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1) accept4$netrom(r5, 0x0, 0x0, 0x0) 01:58:56 executing program 4: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, r0) pkey_alloc(0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) 01:58:56 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask}, {@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) [ 1377.703806] hfs: can't find a HFS filesystem on dev loop3 01:58:56 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 13) 01:58:56 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001140)={r1, r2, 0x7, 0x1000, &(0x7f0000000140)="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", 0x0, 0x3f, 0x4cab, 0x6, 0x1, 0x0, 0x1000, 'syz0\x00'}) socketpair(0x18, 0xa, 0x3, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="28000400b8affd39036f8fb64bb20cd16febb93562352600bf42324fb3d9bc448d40e4ea9e4e81c0ac83b401b0bdb2ae316c722276f3bfbfb9a6b9fbc3cb87300750b23dc1fcb9ae2ea40865cb9d66e3d2ab7f16469d7d36b1b199f9da809e14e300d0e798af6da1ab16cc799ce671ba7828e8e799c84c11b08080", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250d000000140005000000000000009e1c864902993e570000"], 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r7 = accept4$netrom(r0, &(0x7f0000001580)={{0x3, @rose}, [@rose, @null, @netrom, @bcast, @null, @rose, @rose, @default]}, &(0x7f0000001600)=0x48, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000001680)={r7, r2, 0x0, 0x0, &(0x7f0000001640), 0xff, 0x7f, 0x0, 0x4, 0x69, 0x3, 0x3, 'syz1\x00'}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r6, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf250d0000001400038008000100b60500000800020004000000140001800d00010069623a776c616e30000000002400098008000100f9ffffff080002000600000008000200fcffffff08000100030000c4d7704b525524c79eb283f534"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) accept4$netrom(r5, 0x0, 0x0, 0x0) [ 1377.773245] FAULT_INJECTION: forcing a failure. [ 1377.773245] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.797485] hfs: unable to parse mount options [ 1377.806406] CPU: 1 PID: 23439 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1377.814311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 01:58:56 executing program 4: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, r0) pkey_alloc(0x0, 0x0) (async) getrusage(0x1, &(0x7f0000000000)) [ 1377.823663] Call Trace: [ 1377.826256] dump_stack+0x1b2/0x281 [ 1377.829891] should_fail.cold+0x10a/0x149 [ 1377.834048] should_failslab+0xd6/0x130 [ 1377.838032] kmem_cache_alloc+0x28e/0x3c0 [ 1377.842194] __kernfs_new_node+0x6f/0x470 [ 1377.846351] kernfs_new_node+0x7b/0xe0 [ 1377.850242] __kernfs_create_file+0x3d/0x320 [ 1377.854649] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1377.859336] ? kernfs_create_dir_ns+0x171/0x200 [ 1377.864011] internal_create_group+0x22b/0x710 [ 1377.868602] lo_ioctl+0x1137/0x1cd0 01:58:56 executing program 0: r0 = getuid() syz_mount_image$gfs2meta(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="e3a2e3d88ddddb4d53d52855b31125862b5a1c813605b975aedee7cc83549d55763c0e236afba9625b8f07a05ef7c87e603ab8dba96c745ebbb1e145de53a48852b8bd511529d646185b132418b289506bee42f9f28bd157b5174d3c4cd6555ac915bf0704561a660d17ce6cdebb16e5", 0x70, 0xff}, {&(0x7f00000001c0)="16eb05cb82763123404b1e70c430192f111d17a179b8e82646217f3be2cd80dd79c09edce452b18888a4fa75f2a1d2a888c924e064ed04b97f5f6bd10ab296fb01d56c497f3c9e1747fc4cfe7a2a78b141fd42a9fbfaa4983af21699995d9e6f6bb194d9492718f64e169ce93c32187cdc85154b4bfc843036c55fe3fb74d188677dbf6e485c06327c52a678c6d6154e3ba0ba70640fc3d1d4e0b2a22f841330ea70c6c425e70c9f67a43915bbf487910f030abee80bf8717d2d9bc8b33d2fca8e92001fbcf2d48a48bcd6ae172a1dedaca21eab8afb4d3ec7d93fe53d", 0xdd, 0x3323}, {&(0x7f00000002c0)="ced2a56c6213bb5f54a37786c42a6176dbe15fcff039b4224891927241982bb4b206a3d2a62498711d87910f16211113264c34d44d09efe680973ed38c34c6a5f7f01e41a1cbb304273eb873189784f374aa5d6e69dd647e04f373184f9f08dc08cb5ad29a140f78def424a3c24ce59c4d1b59037c9d753de754762f12fec22a4117a53d6413839307b6f63d820db3074603293cc0c90510b31566589efb1ce89178fbe0485ed63fed7267626ca03820bc5931329e8dd9925554cbf8257b736c7b4028e950e0d48e7daed6c7fd", 0xcd, 0xf6}], 0x1080800, &(0x7f0000000440)={[], [{@fowner_gt}, {@uid_lt={'uid<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x8082, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000500)=0x40000) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x56, 0x4) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) [ 1377.872236] ? loop_set_status64+0xe0/0xe0 [ 1377.876472] blkdev_ioctl+0x540/0x1830 [ 1377.880360] ? blkpg_ioctl+0x8d0/0x8d0 [ 1377.884245] ? trace_hardirqs_on+0x10/0x10 [ 1377.888480] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.893670] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1377.898691] block_ioctl+0xd9/0x120 [ 1377.902324] ? blkdev_fallocate+0x3a0/0x3a0 [ 1377.906650] do_vfs_ioctl+0x75a/0xff0 [ 1377.910456] ? lock_acquire+0x170/0x3f0 [ 1377.914434] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.918844] ? __fget+0x265/0x3e0 [ 1377.922303] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.926276] ? security_file_ioctl+0x83/0xb0 [ 1377.930686] SyS_ioctl+0x7f/0xb0 [ 1377.934053] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.938029] do_syscall_64+0x1d5/0x640 [ 1377.941922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.947106] RIP: 0033:0x7faed27e5fb7 [ 1377.950815] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.958529] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1377.965801] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1377.973071] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1377.980349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1377.987616] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1378.003843] hfs: can't find a HFS filesystem on dev loop2 [ 1378.010038] FAULT_INJECTION: forcing a failure. [ 1378.010038] name failslab, interval 1, probability 0, space 0, times 0 01:58:56 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) [ 1378.026697] CPU: 1 PID: 23452 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1378.034764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1378.044117] Call Trace: [ 1378.046701] dump_stack+0x1b2/0x281 [ 1378.050328] should_fail.cold+0x10a/0x149 [ 1378.054466] should_failslab+0xd6/0x130 [ 1378.058425] kmem_cache_alloc+0x28e/0x3c0 [ 1378.062556] __kernfs_new_node+0x6f/0x470 [ 1378.066689] kernfs_new_node+0x7b/0xe0 [ 1378.070560] __kernfs_create_file+0x3d/0x320 [ 1378.074966] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1378.079617] ? kernfs_create_dir_ns+0x171/0x200 [ 1378.084270] internal_create_group+0x22b/0x710 [ 1378.088867] lo_ioctl+0x1137/0x1cd0 [ 1378.092498] ? loop_set_status64+0xe0/0xe0 [ 1378.096831] blkdev_ioctl+0x540/0x1830 [ 1378.100736] ? blkpg_ioctl+0x8d0/0x8d0 [ 1378.104617] ? trace_hardirqs_on+0x10/0x10 [ 1378.108844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1378.113938] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1378.118959] block_ioctl+0xd9/0x120 [ 1378.122574] ? blkdev_fallocate+0x3a0/0x3a0 [ 1378.126905] do_vfs_ioctl+0x75a/0xff0 [ 1378.130695] ? lock_acquire+0x170/0x3f0 [ 1378.134669] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.139090] ? __fget+0x265/0x3e0 [ 1378.142562] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.146528] ? security_file_ioctl+0x83/0xb0 [ 1378.150937] SyS_ioctl+0x7f/0xb0 [ 1378.154298] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.158284] do_syscall_64+0x1d5/0x640 [ 1378.162163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.167339] RIP: 0033:0x7fd7232e3fb7 01:58:57 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 19) [ 1378.171032] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.178735] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1378.185998] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1378.193260] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1378.200516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1378.207771] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1378.216604] Bluetooth: hci0 command 0x0401 tx timeout 01:58:57 executing program 4: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, r0) (async) pkey_alloc(0x0, 0x0) (async) getrusage(0x1, &(0x7f0000000000)) 01:58:57 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001140)={r1, r2, 0x7, 0x1000, &(0x7f0000000140)="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", 0x0, 0x3f, 0x4cab, 0x6, 0x1, 0x0, 0x1000, 'syz0\x00'}) (async) socketpair(0x18, 0xa, 0x3, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="28000400b8affd39036f8fb64bb20cd16febb93562352600bf42324fb3d9bc448d40e4ea9e4e81c0ac83b401b0bdb2ae316c722276f3bfbfb9a6b9fbc3cb87300750b23dc1fcb9ae2ea40865cb9d66e3d2ab7f16469d7d36b1b199f9da809e14e300d0e798af6da1ab16cc799ce671ba7828e8e799c84c11b08080", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250d000000140005000000000000009e1c864902993e570000"], 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) (async, rerun: 64) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async, rerun: 64) r7 = accept4$netrom(r0, &(0x7f0000001580)={{0x3, @rose}, [@rose, @null, @netrom, @bcast, @null, @rose, @rose, @default]}, &(0x7f0000001600)=0x48, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000001680)={r7, r2, 0x0, 0x0, &(0x7f0000001640), 0xff, 0x7f, 0x0, 0x4, 0x69, 0x3, 0x3, 'syz1\x00'}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r6, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf250d0000001400038008000100b60500000800020004000000140001800d00010069623a776c616e30000000002400098008000100f9ffffff080002000600000008000200fcffffff08000100030000c4d7704b525524c79eb283f534"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async, rerun: 32) accept4$netrom(r5, 0x0, 0x0, 0x0) [ 1378.330433] FAULT_INJECTION: forcing a failure. [ 1378.330433] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.331921] hfs: unable to parse mount options [ 1378.379123] CPU: 0 PID: 23486 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1378.387027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1378.394866] hfs: can't find a HFS filesystem on dev loop3 [ 1378.396392] Call Trace: [ 1378.396408] dump_stack+0x1b2/0x281 [ 1378.396424] should_fail.cold+0x10a/0x149 [ 1378.396438] should_failslab+0xd6/0x130 [ 1378.396450] __kmalloc+0x2c1/0x400 [ 1378.396464] ? kobject_get_path+0xb5/0x230 [ 1378.410340] print_req_error: I/O error, dev loop0, sector 0 [ 1378.412353] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1378.412366] kobject_get_path+0xb5/0x230 [ 1378.412378] kobject_uevent_env+0x230/0xf30 [ 1378.443573] ? internal_create_group+0x48f/0x710 [ 1378.448321] lo_ioctl+0x11a6/0x1cd0 [ 1378.451958] ? loop_set_status64+0xe0/0xe0 [ 1378.456176] blkdev_ioctl+0x540/0x1830 [ 1378.460048] ? blkpg_ioctl+0x8d0/0x8d0 [ 1378.463917] ? trace_hardirqs_on+0x10/0x10 [ 1378.468144] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1378.473232] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1378.478233] block_ioctl+0xd9/0x120 [ 1378.481843] ? blkdev_fallocate+0x3a0/0x3a0 [ 1378.486147] do_vfs_ioctl+0x75a/0xff0 [ 1378.489946] ? lock_acquire+0x170/0x3f0 [ 1378.493903] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.498294] ? __fget+0x265/0x3e0 [ 1378.501727] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.505686] ? security_file_ioctl+0x83/0xb0 [ 1378.510076] SyS_ioctl+0x7f/0xb0 [ 1378.513425] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.517381] do_syscall_64+0x1d5/0x640 [ 1378.521255] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:58:57 executing program 0: r0 = getuid() syz_mount_image$gfs2meta(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="e3a2e3d88ddddb4d53d52855b31125862b5a1c813605b975aedee7cc83549d55763c0e236afba9625b8f07a05ef7c87e603ab8dba96c745ebbb1e145de53a48852b8bd511529d646185b132418b289506bee42f9f28bd157b5174d3c4cd6555ac915bf0704561a660d17ce6cdebb16e5", 0x70, 0xff}, {&(0x7f00000001c0)="16eb05cb82763123404b1e70c430192f111d17a179b8e82646217f3be2cd80dd79c09edce452b18888a4fa75f2a1d2a888c924e064ed04b97f5f6bd10ab296fb01d56c497f3c9e1747fc4cfe7a2a78b141fd42a9fbfaa4983af21699995d9e6f6bb194d9492718f64e169ce93c32187cdc85154b4bfc843036c55fe3fb74d188677dbf6e485c06327c52a678c6d6154e3ba0ba70640fc3d1d4e0b2a22f841330ea70c6c425e70c9f67a43915bbf487910f030abee80bf8717d2d9bc8b33d2fca8e92001fbcf2d48a48bcd6ae172a1dedaca21eab8afb4d3ec7d93fe53d", 0xdd, 0x3323}, {&(0x7f00000002c0)="ced2a56c6213bb5f54a37786c42a6176dbe15fcff039b4224891927241982bb4b206a3d2a62498711d87910f16211113264c34d44d09efe680973ed38c34c6a5f7f01e41a1cbb304273eb873189784f374aa5d6e69dd647e04f373184f9f08dc08cb5ad29a140f78def424a3c24ce59c4d1b59037c9d753de754762f12fec22a4117a53d6413839307b6f63d820db3074603293cc0c90510b31566589efb1ce89178fbe0485ed63fed7267626ca03820bc5931329e8dd9925554cbf8257b736c7b4028e950e0d48e7daed6c7fd", 0xcd, 0xf6}], 0x1080800, &(0x7f0000000440)={[], [{@fowner_gt}, {@uid_lt={'uid<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x8082, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000500)=0x40000) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x56, 0x4) (async) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:58:57 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) [ 1378.526425] RIP: 0033:0x7faed27e5fb7 [ 1378.530116] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.537805] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1378.545063] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1378.552314] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1378.559570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1378.566821] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:57 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:57 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 14) 01:58:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x304, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64fc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1668}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc422}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6a7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd446}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe904}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf711b796}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x42040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) [ 1378.695876] FAULT_INJECTION: forcing a failure. [ 1378.695876] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.707418] CPU: 1 PID: 23517 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1378.715346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1378.724701] Call Trace: [ 1378.727301] dump_stack+0x1b2/0x281 [ 1378.730470] hfs: can't find a HFS filesystem on dev loop2 [ 1378.730971] should_fail.cold+0x10a/0x149 [ 1378.740632] should_failslab+0xd6/0x130 [ 1378.744587] kmem_cache_alloc+0x40/0x3c0 [ 1378.748629] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 1378.754235] idr_get_free_cmn+0x595/0x8d0 [ 1378.758388] idr_alloc_cmn+0xe8/0x1e0 [ 1378.762168] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 1378.766987] ? kernfs_add_one+0x4c/0x3a0 [ 1378.771025] ? fs_reclaim_release+0xd0/0x110 [ 1378.775412] idr_alloc_cyclic+0xc2/0x1d0 [ 1378.779453] ? idr_alloc_cmn+0x1e0/0x1e0 [ 1378.783512] ? __radix_tree_preload+0x1c3/0x250 [ 1378.788173] __kernfs_new_node+0xaf/0x470 [ 1378.792430] kernfs_new_node+0x7b/0xe0 [ 1378.796408] __kernfs_create_file+0x3d/0x320 [ 1378.800945] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1378.805601] ? kernfs_create_dir_ns+0x171/0x200 [ 1378.810271] internal_create_group+0x22b/0x710 [ 1378.814851] lo_ioctl+0x1137/0x1cd0 [ 1378.818482] ? loop_set_status64+0xe0/0xe0 [ 1378.822709] blkdev_ioctl+0x540/0x1830 [ 1378.826597] ? blkpg_ioctl+0x8d0/0x8d0 [ 1378.830467] ? trace_hardirqs_on+0x10/0x10 [ 1378.834705] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1378.839792] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1378.844790] block_ioctl+0xd9/0x120 [ 1378.848397] ? blkdev_fallocate+0x3a0/0x3a0 [ 1378.852697] do_vfs_ioctl+0x75a/0xff0 [ 1378.856477] ? lock_acquire+0x170/0x3f0 [ 1378.860431] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.864825] ? __fget+0x265/0x3e0 [ 1378.868255] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.872216] ? security_file_ioctl+0x83/0xb0 [ 1378.876601] SyS_ioctl+0x7f/0xb0 [ 1378.880205] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.884162] do_syscall_64+0x1d5/0x640 [ 1378.888028] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:58:57 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) [ 1378.893456] RIP: 0033:0x7fd7232e3fb7 [ 1378.897161] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.904849] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1378.912098] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1378.919344] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1378.926627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1378.933894] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:57 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 20) [ 1378.970479] hfs: unable to parse mount options 01:58:57 executing program 0: r0 = getuid() syz_mount_image$gfs2meta(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="e3a2e3d88ddddb4d53d52855b31125862b5a1c813605b975aedee7cc83549d55763c0e236afba9625b8f07a05ef7c87e603ab8dba96c745ebbb1e145de53a48852b8bd511529d646185b132418b289506bee42f9f28bd157b5174d3c4cd6555ac915bf0704561a660d17ce6cdebb16e5", 0x70, 0xff}, {&(0x7f00000001c0)="16eb05cb82763123404b1e70c430192f111d17a179b8e82646217f3be2cd80dd79c09edce452b18888a4fa75f2a1d2a888c924e064ed04b97f5f6bd10ab296fb01d56c497f3c9e1747fc4cfe7a2a78b141fd42a9fbfaa4983af21699995d9e6f6bb194d9492718f64e169ce93c32187cdc85154b4bfc843036c55fe3fb74d188677dbf6e485c06327c52a678c6d6154e3ba0ba70640fc3d1d4e0b2a22f841330ea70c6c425e70c9f67a43915bbf487910f030abee80bf8717d2d9bc8b33d2fca8e92001fbcf2d48a48bcd6ae172a1dedaca21eab8afb4d3ec7d93fe53d", 0xdd, 0x3323}, {&(0x7f00000002c0)="ced2a56c6213bb5f54a37786c42a6176dbe15fcff039b4224891927241982bb4b206a3d2a62498711d87910f16211113264c34d44d09efe680973ed38c34c6a5f7f01e41a1cbb304273eb873189784f374aa5d6e69dd647e04f373184f9f08dc08cb5ad29a140f78def424a3c24ce59c4d1b59037c9d753de754762f12fec22a4117a53d6413839307b6f63d820db3074603293cc0c90510b31566589efb1ce89178fbe0485ed63fed7267626ca03820bc5931329e8dd9925554cbf8257b736c7b4028e950e0d48e7daed6c7fd", 0xcd, 0xf6}], 0x1080800, &(0x7f0000000440)={[], [{@fowner_gt}, {@uid_lt={'uid<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x8082, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000500)=0x40000) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x56, 0x4) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) getuid() (async) syz_mount_image$gfs2meta(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="e3a2e3d88ddddb4d53d52855b31125862b5a1c813605b975aedee7cc83549d55763c0e236afba9625b8f07a05ef7c87e603ab8dba96c745ebbb1e145de53a48852b8bd511529d646185b132418b289506bee42f9f28bd157b5174d3c4cd6555ac915bf0704561a660d17ce6cdebb16e5", 0x70, 0xff}, {&(0x7f00000001c0)="16eb05cb82763123404b1e70c430192f111d17a179b8e82646217f3be2cd80dd79c09edce452b18888a4fa75f2a1d2a888c924e064ed04b97f5f6bd10ab296fb01d56c497f3c9e1747fc4cfe7a2a78b141fd42a9fbfaa4983af21699995d9e6f6bb194d9492718f64e169ce93c32187cdc85154b4bfc843036c55fe3fb74d188677dbf6e485c06327c52a678c6d6154e3ba0ba70640fc3d1d4e0b2a22f841330ea70c6c425e70c9f67a43915bbf487910f030abee80bf8717d2d9bc8b33d2fca8e92001fbcf2d48a48bcd6ae172a1dedaca21eab8afb4d3ec7d93fe53d", 0xdd, 0x3323}, {&(0x7f00000002c0)="ced2a56c6213bb5f54a37786c42a6176dbe15fcff039b4224891927241982bb4b206a3d2a62498711d87910f16211113264c34d44d09efe680973ed38c34c6a5f7f01e41a1cbb304273eb873189784f374aa5d6e69dd647e04f373184f9f08dc08cb5ad29a140f78def424a3c24ce59c4d1b59037c9d753de754762f12fec22a4117a53d6413839307b6f63d820db3074603293cc0c90510b31566589efb1ce89178fbe0485ed63fed7267626ca03820bc5931329e8dd9925554cbf8257b736c7b4028e950e0d48e7daed6c7fd", 0xcd, 0xf6}], 0x1080800, &(0x7f0000000440)={[], [{@fowner_gt}, {@uid_lt={'uid<', r0}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x8082, 0x0) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000500)=0x40000) (async) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x56, 0x4) (async) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) 01:58:57 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) (async) 01:58:57 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x304, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64fc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1668}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc422}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6a7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd446}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe904}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf711b796}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x42040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) [ 1379.057589] FAULT_INJECTION: forcing a failure. [ 1379.057589] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.081877] CPU: 0 PID: 23540 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1379.089783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1379.099140] Call Trace: [ 1379.101819] dump_stack+0x1b2/0x281 [ 1379.105494] should_fail.cold+0x10a/0x149 [ 1379.109660] should_failslab+0xd6/0x130 [ 1379.113645] kmem_cache_alloc_node+0x263/0x410 [ 1379.118238] __alloc_skb+0x5c/0x510 [ 1379.121873] kobject_uevent_env+0x882/0xf30 [ 1379.126205] lo_ioctl+0x11a6/0x1cd0 [ 1379.129846] ? loop_set_status64+0xe0/0xe0 [ 1379.134092] blkdev_ioctl+0x540/0x1830 [ 1379.137980] ? blkpg_ioctl+0x8d0/0x8d0 [ 1379.141864] ? trace_hardirqs_on+0x10/0x10 [ 1379.146121] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.151234] ? debug_check_no_obj_freed+0x2c0/0x680 01:58:58 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x248, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffc7d4}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x385b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x280000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000650000000000000005dbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3ff100006000b000a000d0008000b00010000800600050000f8000008000b000100000006000500e7000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000780)={'ip_vti0\x00', r2, 0x80, 0x7, 0x0, 0x40, {{0x49, 0x4, 0x3, 0x17, 0x124, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x28, 0x64, 0x0, 0xd, [0xf3b6, 0x0, 0x0, 0x2, 0x7, 0x88ba, 0x593, 0x100, 0x4]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x42, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010100, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast1, @broadcast]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x11, "c2df72d7a74150bdb1cebd3c7e87b9"}]}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x10, "61879cca430035ac607c93083c27"}, {0x1, 0xc, "90e6ef2d78bf0dfd69ab"}, {0x2, 0x7, "3b97795bb1"}, {0x2, 0x6, "b92ca640"}, {0x7, 0x2}, {0x7, 0xa, "4dbc17b13fccb97d"}, {0x0, 0x12, "85796614311ca50fdd6f873457ada27b"}]}, @timestamp={0x44, 0x14, 0x52, 0x0, 0x1, [0x8, 0x9, 0x3f, 0x2]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0x2}, {0x6, 0xd, "2aa988c4b94cfe4e9bb3ec"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xb8, [@broadcast, @multicast2, @remote, @private=0xa010101, @multicast1, @remote, @private=0xa010101]}, @generic={0x83, 0x9, "b35072e2553825"}]}}}}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf25010000000000000009410000004c001800000603647000"/97], 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x2, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, ["", "", "", "", ""]}, 0x34}}, 0x4800) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 01:58:58 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x248, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffc7d4}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x385b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x280000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000650000000000000005dbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3ff100006000b000a000d0008000b00010000800600050000f8000008000b000100000006000500e7000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000780)={'ip_vti0\x00', r2, 0x80, 0x7, 0x0, 0x40, {{0x49, 0x4, 0x3, 0x17, 0x124, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x28, 0x64, 0x0, 0xd, [0xf3b6, 0x0, 0x0, 0x2, 0x7, 0x88ba, 0x593, 0x100, 0x4]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x42, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010100, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast1, @broadcast]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x11, "c2df72d7a74150bdb1cebd3c7e87b9"}]}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x10, "61879cca430035ac607c93083c27"}, {0x1, 0xc, "90e6ef2d78bf0dfd69ab"}, {0x2, 0x7, "3b97795bb1"}, {0x2, 0x6, "b92ca640"}, {0x7, 0x2}, {0x7, 0xa, "4dbc17b13fccb97d"}, {0x0, 0x12, "85796614311ca50fdd6f873457ada27b"}]}, @timestamp={0x44, 0x14, 0x52, 0x0, 0x1, [0x8, 0x9, 0x3f, 0x2]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0x2}, {0x6, 0xd, "2aa988c4b94cfe4e9bb3ec"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xb8, [@broadcast, @multicast2, @remote, @private=0xa010101, @multicast1, @remote, @private=0xa010101]}, @generic={0x83, 0x9, "b35072e2553825"}]}}}}}) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf25010000000000000009410000004c001800000603647000"/97], 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x2, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, ["", "", "", "", ""]}, 0x34}}, 0x4800) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) [ 1379.156258] block_ioctl+0xd9/0x120 [ 1379.159892] ? blkdev_fallocate+0x3a0/0x3a0 [ 1379.164214] do_vfs_ioctl+0x75a/0xff0 [ 1379.168107] ? lock_acquire+0x170/0x3f0 [ 1379.172092] ? ioctl_preallocate+0x1a0/0x1a0 [ 1379.176511] ? __fget+0x265/0x3e0 [ 1379.179966] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.183943] ? security_file_ioctl+0x83/0xb0 [ 1379.188354] SyS_ioctl+0x7f/0xb0 [ 1379.191730] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.195709] do_syscall_64+0x1d5/0x640 [ 1379.199606] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1379.204804] RIP: 0033:0x7faed27e5fb7 [ 1379.208510] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.216216] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1379.223475] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1379.230735] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1379.237996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1379.245265] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x304, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64fc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1668}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc422}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6a7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd446}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe904}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf711b796}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x42040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) 01:58:58 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x248, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffc7d4}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x385b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x280000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 64) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000650000000000000005dbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3ff100006000b000a000d0008000b00010000800600050000f8000008000b000100000006000500e7000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000780)={'ip_vti0\x00', r2, 0x80, 0x7, 0x0, 0x40, {{0x49, 0x4, 0x3, 0x17, 0x124, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x28, 0x64, 0x0, 0xd, [0xf3b6, 0x0, 0x0, 0x2, 0x7, 0x88ba, 0x593, 0x100, 0x4]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x42, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010100, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast1, @broadcast]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x11, "c2df72d7a74150bdb1cebd3c7e87b9"}]}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x10, "61879cca430035ac607c93083c27"}, {0x1, 0xc, "90e6ef2d78bf0dfd69ab"}, {0x2, 0x7, "3b97795bb1"}, {0x2, 0x6, "b92ca640"}, {0x7, 0x2}, {0x7, 0xa, "4dbc17b13fccb97d"}, {0x0, 0x12, "85796614311ca50fdd6f873457ada27b"}]}, @timestamp={0x44, 0x14, 0x52, 0x0, 0x1, [0x8, 0x9, 0x3f, 0x2]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0x2}, {0x6, 0xd, "2aa988c4b94cfe4e9bb3ec"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xb8, [@broadcast, @multicast2, @remote, @private=0xa010101, @multicast1, @remote, @private=0xa010101]}, @generic={0x83, 0x9, "b35072e2553825"}]}}}}}) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf25010000000000000009410000004c001800000603647000"/97], 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x2, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, ["", "", "", "", ""]}, 0x34}}, 0x4800) (async) pkey_alloc(0x0, 0x0) (async, rerun: 64) pkey_alloc(0x0, 0x0) (rerun: 64) [ 1379.257759] hfs: can't find a HFS filesystem on dev loop2 [ 1379.278026] hfs: can't find a HFS filesystem on dev loop3 [ 1379.281836] hfs: unable to parse mount options 01:58:58 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 15) 01:58:58 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) 01:58:58 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 21) 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$incfs(0xffffffffffffffff, 0x0, 0x200, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c310000000000000000003485f266cfc5d34f35e1cd75e7b3dc03ac0813ca8128ac415d8269d1d5d8f4f5731989ff17ba7911e8fbdfab0d8fcf051da9da986168a3455c7655794db2d14b8aeed21b41858acd1b3b86f02bf147d1fca5a69fc7b9c1483549048d276b6cdeb26fb6bac81212e4ff64b992b21943531f6ad9cf927e8f6add2cd0471723f7c3ffe16b510966c5eac244f77b2c703a49bc9217a6e024329e54b512bd22209423bd31f616dbef789b5154a41587a13411d1cf7841e7daa8de9ff17c4ded3e534de8a18e9c767fb1d2744af0", @ANYRES32=0x0, @ANYBLOB="002007000000000000000009482700a000670000042f9078ac1414bbac1414aa01441cf45000000002000010000000000000000f5ffffffff700008000440870200000000944147481ac1414bb00001000ac1414aa0000007f8917787f000001ffffffff0a01010200000000e0000001443c64410000000000000002ac1414bb00000001ac1414aa00000008ffffffff000000057f0000010000000964010102000000086401010100000c8f"]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x35}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0278}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x250b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbc}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c805}, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:58:58 executing program 4: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)}], 0x800000, &(0x7f00000002c0)={[{@gid}, {}, {@file_umask}, {@umask={'umask', 0x3d, 0x3f}}, {@part}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr}, {@appraise_type}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) pkey_alloc(0x0, 0x0) mlockall(0x7) pkey_alloc(0x0, 0x0) [ 1379.411466] FAULT_INJECTION: forcing a failure. [ 1379.411466] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.447102] CPU: 1 PID: 23595 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1379.455004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1379.464358] Call Trace: [ 1379.466948] dump_stack+0x1b2/0x281 [ 1379.467202] hfs: unable to parse mount options [ 1379.470585] should_fail.cold+0x10a/0x149 [ 1379.470599] should_failslab+0xd6/0x130 [ 1379.470613] kmem_cache_alloc+0x28e/0x3c0 [ 1379.487419] __kernfs_new_node+0x6f/0x470 [ 1379.491578] kernfs_new_node+0x7b/0xe0 [ 1379.495467] __kernfs_create_file+0x3d/0x320 [ 1379.499876] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1379.504548] ? kernfs_create_dir_ns+0x171/0x200 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$incfs(0xffffffffffffffff, 0x0, 0x200, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c310000000000000000003485f266cfc5d34f35e1cd75e7b3dc03ac0813ca8128ac415d8269d1d5d8f4f5731989ff17ba7911e8fbdfab0d8fcf051da9da986168a3455c7655794db2d14b8aeed21b41858acd1b3b86f02bf147d1fca5a69fc7b9c1483549048d276b6cdeb26fb6bac81212e4ff64b992b21943531f6ad9cf927e8f6add2cd0471723f7c3ffe16b510966c5eac244f77b2c703a49bc9217a6e024329e54b512bd22209423bd31f616dbef789b5154a41587a13411d1cf7841e7daa8de9ff17c4ded3e534de8a18e9c767fb1d2744af0", @ANYRES32=0x0, @ANYBLOB="002007000000000000000009482700a000670000042f9078ac1414bbac1414aa01441cf45000000002000010000000000000000f5ffffffff700008000440870200000000944147481ac1414bb00001000ac1414aa0000007f8917787f000001ffffffff0a01010200000000e0000001443c64410000000000000002ac1414bb00000001ac1414aa00000008ffffffff000000057f0000010000000964010102000000086401010100000c8f"]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x35}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0278}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x250b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbc}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c805}, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x35}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0278}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x250b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) dup(r0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbc}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c805}, 0x0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) [ 1379.509226] internal_create_group+0x22b/0x710 [ 1379.513815] lo_ioctl+0x1137/0x1cd0 [ 1379.517451] ? loop_set_status64+0xe0/0xe0 [ 1379.521690] blkdev_ioctl+0x540/0x1830 [ 1379.525582] ? blkpg_ioctl+0x8d0/0x8d0 [ 1379.529468] ? trace_hardirqs_on+0x10/0x10 [ 1379.533708] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.538840] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1379.543872] block_ioctl+0xd9/0x120 [ 1379.547495] ? blkdev_fallocate+0x3a0/0x3a0 [ 1379.551825] do_vfs_ioctl+0x75a/0xff0 [ 1379.555631] ? lock_acquire+0x170/0x3f0 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$incfs(0xffffffffffffffff, 0x0, 0x200, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c310000000000000000003485f266cfc5d34f35e1cd75e7b3dc03ac0813ca8128ac415d8269d1d5d8f4f5731989ff17ba7911e8fbdfab0d8fcf051da9da986168a3455c7655794db2d14b8aeed21b41858acd1b3b86f02bf147d1fca5a69fc7b9c1483549048d276b6cdeb26fb6bac81212e4ff64b992b21943531f6ad9cf927e8f6add2cd0471723f7c3ffe16b510966c5eac244f77b2c703a49bc9217a6e024329e54b512bd22209423bd31f616dbef789b5154a41587a13411d1cf7841e7daa8de9ff17c4ded3e534de8a18e9c767fb1d2744af0", @ANYRES32=0x0, @ANYBLOB="002007000000000000000009482700a000670000042f9078ac1414bbac1414aa01441cf45000000002000010000000000000000f5ffffffff700008000440870200000000944147481ac1414bb00001000ac1414aa0000007f8917787f000001ffffffff0a01010200000000e0000001443c64410000000000000002ac1414bb00000001ac1414aa00000008ffffffff000000057f0000010000000964010102000000086401010100000c8f"]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x35}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0278}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x250b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbc}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c805}, 0x0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1379.559608] ? ioctl_preallocate+0x1a0/0x1a0 [ 1379.564025] ? __fget+0x265/0x3e0 [ 1379.567483] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.571462] ? security_file_ioctl+0x83/0xb0 [ 1379.575874] SyS_ioctl+0x7f/0xb0 [ 1379.579242] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.583220] do_syscall_64+0x1d5/0x640 [ 1379.587109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1379.592292] RIP: 0033:0x7fd7232e3fb7 [ 1379.595998] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.603703] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x60) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8473}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}}, 0x4) [ 1379.610977] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1379.618336] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1379.625605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1379.632874] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1379.643104] FAULT_INJECTION: forcing a failure. [ 1379.643104] name failslab, interval 1, probability 0, space 0, times 0 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) [ 1379.669033] CPU: 1 PID: 23599 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1379.676936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1379.686389] Call Trace: [ 1379.688976] dump_stack+0x1b2/0x281 [ 1379.692608] should_fail.cold+0x10a/0x149 [ 1379.697019] should_failslab+0xd6/0x130 [ 1379.701001] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1379.706128] __kmalloc_node_track_caller+0x38/0x70 [ 1379.711060] __alloc_skb+0x96/0x510 [ 1379.714695] kobject_uevent_env+0x882/0xf30 [ 1379.719032] lo_ioctl+0x11a6/0x1cd0 [ 1379.722662] ? loop_set_status64+0xe0/0xe0 [ 1379.726898] blkdev_ioctl+0x540/0x1830 [ 1379.730785] ? blkpg_ioctl+0x8d0/0x8d0 [ 1379.734674] ? trace_hardirqs_on+0x10/0x10 [ 1379.738910] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.744014] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1379.749023] block_ioctl+0xd9/0x120 [ 1379.752631] ? blkdev_fallocate+0x3a0/0x3a0 [ 1379.756933] do_vfs_ioctl+0x75a/0xff0 [ 1379.760726] ? lock_acquire+0x170/0x3f0 [ 1379.764696] ? ioctl_preallocate+0x1a0/0x1a0 [ 1379.769096] ? __fget+0x265/0x3e0 [ 1379.772529] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.776507] ? security_file_ioctl+0x83/0xb0 [ 1379.780898] SyS_ioctl+0x7f/0xb0 [ 1379.784248] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.788211] do_syscall_64+0x1d5/0x640 [ 1379.792082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1379.797259] RIP: 0033:0x7faed27e5fb7 [ 1379.800948] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.808636] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1379.815889] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1379.823145] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1379.830431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1379.837868] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1379.862540] hfs: can't find a HFS filesystem on dev loop3 [ 1379.865047] hfs: unable to parse mount options [ 1379.873217] hfs: can't find a HFS filesystem on dev loop2 01:58:58 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 16) 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x60) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8473}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}}, 0x4) 01:58:58 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\'.#'}}]}) 01:58:58 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 22) 01:58:58 executing program 4: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)}], 0x800000, &(0x7f00000002c0)={[{@gid}, {}, {@file_umask}, {@umask={'umask', 0x3d, 0x3f}}, {@part}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr}, {@appraise_type}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) pkey_alloc(0x0, 0x0) mlockall(0x7) pkey_alloc(0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)}], 0x800000, &(0x7f00000002c0)={[{@gid}, {}, {@file_umask}, {@umask={'umask', 0x3d, 0x3f}}, {@part}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr}, {@appraise_type}]}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x100) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) pkey_alloc(0x0, 0x0) (async) mlockall(0x7) (async) pkey_alloc(0x0, 0x0) (async) 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) 01:58:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x60) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8473}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x60) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8473}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}}, 0x4) (async) [ 1380.016485] FAULT_INJECTION: forcing a failure. [ 1380.016485] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.036992] CPU: 1 PID: 23654 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1380.044896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1380.049813] FAULT_INJECTION: forcing a failure. [ 1380.049813] name failslab, interval 1, probability 0, space 0, times 0 01:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="fa50bde189dc9b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1380.054268] Call Trace: [ 1380.054285] dump_stack+0x1b2/0x281 [ 1380.054299] should_fail.cold+0x10a/0x149 [ 1380.054311] should_failslab+0xd6/0x130 [ 1380.054324] kmem_cache_alloc+0x28e/0x3c0 [ 1380.054336] __kernfs_new_node+0x6f/0x470 [ 1380.054352] kernfs_new_node+0x7b/0xe0 [ 1380.091938] __kernfs_create_file+0x3d/0x320 [ 1380.096353] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1380.101028] ? kernfs_create_dir_ns+0x171/0x200 [ 1380.105693] internal_create_group+0x22b/0x710 [ 1380.110268] lo_ioctl+0x1137/0x1cd0 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="fa50bde189dc9b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1380.113901] ? loop_set_status64+0xe0/0xe0 [ 1380.118135] blkdev_ioctl+0x540/0x1830 [ 1380.122021] ? blkpg_ioctl+0x8d0/0x8d0 [ 1380.125904] ? trace_hardirqs_on+0x10/0x10 [ 1380.130138] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1380.135245] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1380.140280] block_ioctl+0xd9/0x120 [ 1380.143984] ? blkdev_fallocate+0x3a0/0x3a0 [ 1380.148291] do_vfs_ioctl+0x75a/0xff0 [ 1380.152084] ? lock_acquire+0x170/0x3f0 [ 1380.156075] ? ioctl_preallocate+0x1a0/0x1a0 [ 1380.160487] ? __fget+0x265/0x3e0 [ 1380.163946] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.167919] ? security_file_ioctl+0x83/0xb0 [ 1380.172326] SyS_ioctl+0x7f/0xb0 [ 1380.175689] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.179665] do_syscall_64+0x1d5/0x640 [ 1380.183548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1380.188731] RIP: 0033:0x7fd7232e3fb7 [ 1380.192431] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.200186] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1380.207536] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="fa50bde189dc9b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1380.214801] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1380.222164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1380.229519] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1380.238317] CPU: 0 PID: 23659 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1380.246213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1380.255565] Call Trace: [ 1380.258151] dump_stack+0x1b2/0x281 [ 1380.261784] should_fail.cold+0x10a/0x149 [ 1380.265937] should_failslab+0xd6/0x130 [ 1380.270019] kmem_cache_alloc_node+0x263/0x410 [ 1380.274607] __alloc_skb+0x5c/0x510 [ 1380.278234] kobject_uevent_env+0x882/0xf30 [ 1380.282561] lo_ioctl+0x11a6/0x1cd0 [ 1380.286189] ? loop_set_status64+0xe0/0xe0 [ 1380.290437] blkdev_ioctl+0x540/0x1830 [ 1380.294320] ? blkpg_ioctl+0x8d0/0x8d0 [ 1380.298211] ? trace_hardirqs_on+0x10/0x10 [ 1380.302427] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1380.307510] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1380.312524] block_ioctl+0xd9/0x120 [ 1380.316181] ? blkdev_fallocate+0x3a0/0x3a0 [ 1380.320632] do_vfs_ioctl+0x75a/0xff0 [ 1380.324435] ? lock_acquire+0x170/0x3f0 [ 1380.328397] ? ioctl_preallocate+0x1a0/0x1a0 [ 1380.332787] ? __fget+0x265/0x3e0 [ 1380.336225] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.340200] ? security_file_ioctl+0x83/0xb0 [ 1380.344589] SyS_ioctl+0x7f/0xb0 [ 1380.347936] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.351916] do_syscall_64+0x1d5/0x640 [ 1380.355809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1380.360986] RIP: 0033:0x7faed27e5fb7 [ 1380.364694] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.372383] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1380.379634] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1380.386900] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1380.394155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1380.401405] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1380.422932] Bluetooth: hci0 command 0x0401 tx timeout [ 1380.436532] hfs: unable to parse mount options [ 1380.437517] hfs: can't find a HFS filesystem on dev loop3 [ 1380.473472] hfs: can't find a HFS filesystem on dev loop2 01:58:59 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 17) 01:58:59 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@any, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x1000001, 0x10010, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000400), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)="e7", 0x1}, 0x68) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="696100000000000000000d000000ad492ece6dd7c4442b40fad02050d8c681a68ca8fa3c9261c88163a187ff6334a4180697aec748ee666350c1a711247a5174a95b73d8b7d54b00f45b02ba01008e3f"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = accept$netrom(r6, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000200)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYBLOB="feb9e45783ba59f570feb5c325dfbf5c22152d2e7b972a30ef5145fb1bb95b1abf6f28448c780de30000", @ANYRES64=r8, @ANYRES8=r0, @ANYRESDEC=r8], 0x1f4}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:58:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 01:58:59 executing program 4: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)}], 0x800000, &(0x7f00000002c0)={[{@gid}, {}, {@file_umask}, {@umask={'umask', 0x3d, 0x3f}}, {@part}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr}, {@appraise_type}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) pkey_alloc(0x0, 0x0) mlockall(0x7) (async) pkey_alloc(0x0, 0x0) 01:58:59 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 23) [ 1380.620638] hfs: unable to parse mount options [ 1380.628207] FAULT_INJECTION: forcing a failure. [ 1380.628207] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.659957] hfs: unable to parse mount options [ 1380.667895] CPU: 1 PID: 23715 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1380.675792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1380.685145] Call Trace: [ 1380.687734] dump_stack+0x1b2/0x281 [ 1380.691372] should_fail.cold+0x10a/0x149 [ 1380.695614] should_failslab+0xd6/0x130 [ 1380.699593] kmem_cache_alloc+0x28e/0x3c0 [ 1380.703748] __kernfs_new_node+0x6f/0x470 [ 1380.707904] kernfs_new_node+0x7b/0xe0 [ 1380.711797] __kernfs_create_file+0x3d/0x320 [ 1380.716212] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1380.720879] ? kernfs_create_dir_ns+0x171/0x200 [ 1380.725553] internal_create_group+0x22b/0x710 [ 1380.730152] lo_ioctl+0x1137/0x1cd0 [ 1380.733785] ? loop_set_status64+0xe0/0xe0 [ 1380.738054] blkdev_ioctl+0x540/0x1830 [ 1380.741946] ? blkpg_ioctl+0x8d0/0x8d0 [ 1380.745833] ? trace_hardirqs_on+0x10/0x10 [ 1380.750074] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1380.755178] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1380.760202] block_ioctl+0xd9/0x120 [ 1380.763832] ? blkdev_fallocate+0x3a0/0x3a0 [ 1380.768152] do_vfs_ioctl+0x75a/0xff0 [ 1380.771954] ? lock_acquire+0x170/0x3f0 [ 1380.775931] ? ioctl_preallocate+0x1a0/0x1a0 [ 1380.780345] ? __fget+0x265/0x3e0 [ 1380.783815] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.787790] ? security_file_ioctl+0x83/0xb0 [ 1380.792210] SyS_ioctl+0x7f/0xb0 [ 1380.795579] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.799555] do_syscall_64+0x1d5/0x640 [ 1380.803449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1380.808633] RIP: 0033:0x7fd7232e3fb7 [ 1380.812347] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:58:59 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@any, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x1000001, 0x10010, r1, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000400), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)="e7", 0x1}, 0x68) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="696100000000000000000d000000ad492ece6dd7c4442b40fad02050d8c681a68ca8fa3c9261c88163a187ff6334a4180697aec748ee666350c1a711247a5174a95b73d8b7d54b00f45b02ba01008e3f"], 0x14}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = accept$netrom(r6, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000200)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYBLOB="feb9e45783ba59f570feb5c325dfbf5c22152d2e7b972a30ef5145fb1bb95b1abf6f28448c780de30000", @ANYRES64=r8, @ANYRES8=r0, @ANYRESDEC=r8], 0x1f4}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1380.820145] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1380.822112] FAULT_INJECTION: forcing a failure. [ 1380.822112] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.827419] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1380.827425] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1380.827430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1380.827434] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)={0x120c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1084, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "67fdcb220bc8080082774a3e9ce7df891c6bc5ea539d6dc8c0e112e0ee85ac057d6b"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1c7}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xdfa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @mcast2, 0xfffff35c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x44001}, 0x18000) r2 = dup(r0) accept4$netrom(r2, 0x0, 0x0, 0x0) [ 1380.912828] CPU: 0 PID: 23728 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1380.920734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1380.930139] Call Trace: [ 1380.932725] dump_stack+0x1b2/0x281 [ 1380.936359] should_fail.cold+0x10a/0x149 [ 1380.940506] should_failslab+0xd6/0x130 [ 1380.944482] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1380.949599] __kmalloc_node_track_caller+0x38/0x70 [ 1380.954533] __alloc_skb+0x96/0x510 [ 1380.958159] kobject_uevent_env+0x882/0xf30 [ 1380.962487] lo_ioctl+0x11a6/0x1cd0 [ 1380.966115] ? loop_set_status64+0xe0/0xe0 [ 1380.970437] blkdev_ioctl+0x540/0x1830 [ 1380.974409] ? blkpg_ioctl+0x8d0/0x8d0 [ 1380.978379] ? trace_hardirqs_on+0x10/0x10 [ 1380.982616] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1380.987720] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1380.992742] block_ioctl+0xd9/0x120 [ 1380.996362] ? blkdev_fallocate+0x3a0/0x3a0 [ 1381.001029] do_vfs_ioctl+0x75a/0xff0 [ 1381.004820] ? lock_acquire+0x170/0x3f0 [ 1381.008777] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.013168] ? __fget+0x265/0x3e0 [ 1381.016601] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.020561] ? security_file_ioctl+0x83/0xb0 [ 1381.024964] SyS_ioctl+0x7f/0xb0 [ 1381.028312] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.032276] do_syscall_64+0x1d5/0x640 [ 1381.036216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.041395] RIP: 0033:0x7faed27e5fb7 [ 1381.045087] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.052791] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)={0x120c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1084, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "67fdcb220bc8080082774a3e9ce7df891c6bc5ea539d6dc8c0e112e0ee85ac057d6b"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1c7}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xdfa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @mcast2, 0xfffff35c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x44001}, 0x18000) (async, rerun: 64) r2 = dup(r0) (rerun: 64) accept4$netrom(r2, 0x0, 0x0, 0x0) 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)={0x120c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1084, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "67fdcb220bc8080082774a3e9ce7df891c6bc5ea539d6dc8c0e112e0ee85ac057d6b"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1c7}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xdfa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @mcast2, 0xfffff35c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x44001}, 0x18000) r2 = dup(r0) accept4$netrom(r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)={0x120c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1084, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "67fdcb220bc8080082774a3e9ce7df891c6bc5ea539d6dc8c0e112e0ee85ac057d6b"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1c7}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xdfa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @mcast2, 0xfffff35c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x44001}, 0x18000) (async) dup(r0) (async) accept4$netrom(r2, 0x0, 0x0, 0x0) (async) 01:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) memfd_create(&(0x7f0000000000)='-\x00', 0x0) [ 1381.060047] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1381.067327] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1381.074592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1381.081856] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1381.095692] hfs: can't find a HFS filesystem on dev loop2 01:59:00 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 18) 01:59:00 executing program 0: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@any, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x1000001, 0x10010, r1, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async, rerun: 32) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000400), 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)="e7", 0x1}, 0x68) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="696100000000000000000d000000ad492ece6dd7c4442b40fad02050d8c681a68ca8fa3c9261c88163a187ff6334a4180697aec748ee666350c1a711247a5174a95b73d8b7d54b00f45b02ba01008e3f"], 0x14}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = accept$netrom(r6, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000200)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYBLOB="feb9e45783ba59f570feb5c325dfbf5c22152d2e7b972a30ef5145fb1bb95b1abf6f28448c780de30000", @ANYRES64=r8, @ANYRES8=r0, @ANYRESDEC=r8], 0x1f4}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) memfd_create(&(0x7f0000000000)='-\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) memfd_create(&(0x7f0000000000)='-\x00', 0x0) (async) 01:59:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}]}) 01:59:00 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 24) 01:59:00 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) [ 1381.135248] hfs: can't find a HFS filesystem on dev loop3 01:59:00 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1) (async, rerun: 64) pkey_alloc(0x0, 0x0) (rerun: 64) pkey_alloc(0x0, 0x0) 01:59:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x2, {{0xa, 0x4e21, 0x8, @private0, 0x5}}}, 0x88) 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) memfd_create(&(0x7f0000000000)='-\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) memfd_create(&(0x7f0000000000)='-\x00', 0x0) (async) [ 1381.281525] FAULT_INJECTION: forcing a failure. [ 1381.281525] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.309368] CPU: 1 PID: 23798 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1381.317270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1381.326661] Call Trace: [ 1381.329286] dump_stack+0x1b2/0x281 [ 1381.332924] should_fail.cold+0x10a/0x149 [ 1381.337075] should_failslab+0xd6/0x130 [ 1381.341048] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1381.346161] __kmalloc_node_track_caller+0x38/0x70 [ 1381.349620] FAULT_INJECTION: forcing a failure. [ 1381.349620] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.351088] __alloc_skb+0x96/0x510 [ 1381.351105] kobject_uevent_env+0x882/0xf30 [ 1381.370218] lo_ioctl+0x11a6/0x1cd0 [ 1381.373837] ? loop_set_status64+0xe0/0xe0 [ 1381.378072] blkdev_ioctl+0x540/0x1830 [ 1381.381972] ? blkpg_ioctl+0x8d0/0x8d0 [ 1381.385843] ? trace_hardirqs_on+0x10/0x10 [ 1381.390071] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1381.395253] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1381.400265] block_ioctl+0xd9/0x120 [ 1381.403876] ? blkdev_fallocate+0x3a0/0x3a0 [ 1381.408181] do_vfs_ioctl+0x75a/0xff0 [ 1381.412001] ? lock_acquire+0x170/0x3f0 [ 1381.415956] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.420357] ? __fget+0x265/0x3e0 [ 1381.423790] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.427749] ? security_file_ioctl+0x83/0xb0 [ 1381.432139] SyS_ioctl+0x7f/0xb0 [ 1381.435484] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.439448] do_syscall_64+0x1d5/0x640 [ 1381.443329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.448508] RIP: 0033:0x7faed27e5fb7 [ 1381.452213] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.459908] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1381.467170] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1381.474447] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 01:59:00 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) [ 1381.481709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1381.488966] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1381.496233] CPU: 0 PID: 23796 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1381.504117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1381.510918] hfs: can't find a HFS filesystem on dev loop2 [ 1381.513460] Call Trace: [ 1381.513478] dump_stack+0x1b2/0x281 [ 1381.513493] should_fail.cold+0x10a/0x149 [ 1381.513507] should_failslab+0xd6/0x130 [ 1381.513519] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1381.513531] ? dev_uevent_filter+0xd0/0xd0 [ 1381.513540] kobject_uevent_env+0x20c/0xf30 [ 1381.513554] ? internal_create_group+0x48f/0x710 [ 1381.551321] lo_ioctl+0x11a6/0x1cd0 [ 1381.554959] ? loop_set_status64+0xe0/0xe0 [ 1381.559233] blkdev_ioctl+0x540/0x1830 [ 1381.563122] ? blkpg_ioctl+0x8d0/0x8d0 [ 1381.567029] ? trace_hardirqs_on+0x10/0x10 [ 1381.571271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1381.576377] ? debug_check_no_obj_freed+0x2c0/0x680 01:59:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x2, {{0xa, 0x4e21, 0x8, @private0, 0x5}}}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) dup(r0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x2, {{0xa, 0x4e21, 0x8, @private0, 0x5}}}, 0x88) (async) 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000007f0b12b5eb70ddfee04afa3e2531a05ca3aa5691057285b244d33c03ef389db700cfa2daa43d261f42af22d28429d7fa94b96a3f7c84d8d8fbde3936376ed7afa5ad91b848791567d80733a950abbd104a0841c66ca65b215384f117e65e8ce90d2b8b73d745de54cfeb562402466642ed43be838336a4d85c04", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250a000000280003801400020076657468305f6d616376746170000000060007004e23000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) recvfrom$netrom(r2, &(0x7f0000000140)=""/158, 0x9e, 0x21, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) lseek(r2, 0x1000, 0x3) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xad5b, 'syz0\x00', @bcast, 0x54, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) [ 1381.581401] block_ioctl+0xd9/0x120 [ 1381.585115] ? blkdev_fallocate+0x3a0/0x3a0 [ 1381.589439] do_vfs_ioctl+0x75a/0xff0 [ 1381.592213] hfs: unable to parse mount options [ 1381.593237] ? lock_acquire+0x170/0x3f0 [ 1381.593248] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.593259] ? __fget+0x265/0x3e0 [ 1381.593270] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.613598] ? security_file_ioctl+0x83/0xb0 [ 1381.618013] SyS_ioctl+0x7f/0xb0 [ 1381.621388] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.625368] do_syscall_64+0x1d5/0x640 [ 1381.629264] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.634450] RIP: 0033:0x7fd7232e3fb7 [ 1381.638154] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.645869] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1381.653138] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1381.660405] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1381.667672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1381.674941] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:00 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 19) 01:59:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async, rerun: 32) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x2, {{0xa, 0x4e21, 0x8, @private0, 0x5}}}, 0x88) (rerun: 32) 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000007f0b12b5eb70ddfee04afa3e2531a05ca3aa5691057285b244d33c03ef389db700cfa2daa43d261f42af22d28429d7fa94b96a3f7c84d8d8fbde3936376ed7afa5ad91b848791567d80733a950abbd104a0841c66ca65b215384f117e65e8ce90d2b8b73d745de54cfeb562402466642ed43be838336a4d85c04", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250a000000280003801400020076657468305f6d616376746170000000060007004e23000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async) recvfrom$netrom(r2, &(0x7f0000000140)=""/158, 0x9e, 0x21, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) lseek(r2, 0x1000, 0x3) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xad5b, 'syz0\x00', @bcast, 0x54, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) 01:59:00 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) 01:59:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}) 01:59:00 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 25) [ 1381.731953] hfs: can't find a HFS filesystem on dev loop3 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000007f0b12b5eb70ddfee04afa3e2531a05ca3aa5691057285b244d33c03ef389db700cfa2daa43d261f42af22d28429d7fa94b96a3f7c84d8d8fbde3936376ed7afa5ad91b848791567d80733a950abbd104a0841c66ca65b215384f117e65e8ce90d2b8b73d745de54cfeb562402466642ed43be838336a4d85c04", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250a000000280003801400020076657468305f6d616376746170000000060007004e23000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) recvfrom$netrom(r2, &(0x7f0000000140)=""/158, 0x9e, 0x21, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) lseek(r2, 0x1000, 0x3) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xad5b, 'syz0\x00', @bcast, 0x54, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000007f0b12b5eb70ddfee04afa3e2531a05ca3aa5691057285b244d33c03ef389db700cfa2daa43d261f42af22d28429d7fa94b96a3f7c84d8d8fbde3936376ed7afa5ad91b848791567d80733a950abbd104a0841c66ca65b215384f117e65e8ce90d2b8b73d745de54cfeb562402466642ed43be838336a4d85c04", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250a000000280003801400020076657468305f6d616376746170000000060007004e23000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async) recvfrom$netrom(r2, &(0x7f0000000140)=""/158, 0x9e, 0x21, 0x0, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) lseek(r2, 0x1000, 0x3) (async) accept$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xad5b, 'syz0\x00', @bcast, 0x54, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) (async) [ 1381.841130] FAULT_INJECTION: forcing a failure. [ 1381.841130] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.853653] FAULT_INJECTION: forcing a failure. [ 1381.853653] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.866391] CPU: 0 PID: 23857 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1381.874378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1381.883736] Call Trace: [ 1381.886330] dump_stack+0x1b2/0x281 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0800000010000000000000000000000000000007000000090000000000000000000000ff0f000000000000"], 0x48900) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000881) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = dup(r0) r4 = dup(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x5, 0x81, 0xc1, 0x0, 0x8, 0x48, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1000, 0x33, 0x0, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0xf, r4, 0x3) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x4000001, 0x10010, r3, 0x83000000) openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x101200, 0x151) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x412040, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000280)={0x0, 0xffffffffffffffcc}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4008004) [ 1381.889975] should_fail.cold+0x10a/0x149 [ 1381.894154] should_failslab+0xd6/0x130 [ 1381.898130] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1381.903237] __kmalloc_node_track_caller+0x38/0x70 [ 1381.908169] __alloc_skb+0x96/0x510 [ 1381.911806] kobject_uevent_env+0x882/0xf30 [ 1381.916224] lo_ioctl+0x11a6/0x1cd0 [ 1381.919900] ? loop_set_status64+0xe0/0xe0 [ 1381.924140] blkdev_ioctl+0x540/0x1830 [ 1381.928058] ? blkpg_ioctl+0x8d0/0x8d0 [ 1381.931966] ? trace_hardirqs_on+0x10/0x10 [ 1381.936207] ? _raw_spin_unlock_irqrestore+0x66/0xe0 01:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0800000010000000000000000000000000000007000000090000000000000000000000ff0f000000000000"], 0x48900) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000881) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = dup(r0) r4 = dup(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x5, 0x81, 0xc1, 0x0, 0x8, 0x48, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1000, 0x33, 0x0, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0xf, r4, 0x3) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x4000001, 0x10010, r3, 0x83000000) openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x101200, 0x151) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x412040, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000280)={0x0, 0xffffffffffffffcc}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4008004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000881) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) dup(r0) (async) dup(r2) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x5, 0x81, 0xc1, 0x0, 0x8, 0x48, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1000, 0x33, 0x0, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0xf, r4, 0x3) (async) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x4000001, 0x10010, r3, 0x83000000) (async) openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x101200, 0x151) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x412040, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000280)={0x0, 0xffffffffffffffcc}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4008004) (async) [ 1381.941397] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1381.946564] block_ioctl+0xd9/0x120 [ 1381.950209] ? blkdev_fallocate+0x3a0/0x3a0 [ 1381.954533] do_vfs_ioctl+0x75a/0xff0 [ 1381.958335] ? lock_acquire+0x170/0x3f0 [ 1381.962318] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.966829] ? __fget+0x265/0x3e0 [ 1381.970389] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.974371] ? security_file_ioctl+0x83/0xb0 [ 1381.978784] SyS_ioctl+0x7f/0xb0 [ 1381.982157] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.986138] do_syscall_64+0x1d5/0x640 [ 1381.990042] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.995237] RIP: 0033:0x7faed27e5fb7 [ 1381.998943] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.006660] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1382.013925] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1382.021459] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1382.028710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1382.035960] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1382.043228] CPU: 1 PID: 23858 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1382.051118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1382.060468] Call Trace: [ 1382.063059] dump_stack+0x1b2/0x281 [ 1382.066692] should_fail.cold+0x10a/0x149 [ 1382.070844] should_failslab+0xd6/0x130 [ 1382.074820] __kmalloc+0x2c1/0x400 [ 1382.078365] ? kobject_get_path+0xb5/0x230 [ 1382.082599] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1382.088080] kobject_get_path+0xb5/0x230 [ 1382.088312] hfs: can't find a HFS filesystem on dev loop2 [ 1382.092145] kobject_uevent_env+0x230/0xf30 [ 1382.092160] ? internal_create_group+0x48f/0x710 [ 1382.092175] lo_ioctl+0x11a6/0x1cd0 [ 1382.092189] ? loop_set_status64+0xe0/0xe0 [ 1382.114919] blkdev_ioctl+0x540/0x1830 [ 1382.118828] ? blkpg_ioctl+0x8d0/0x8d0 [ 1382.121964] hfs: unable to parse mount options [ 1382.122752] ? trace_hardirqs_on+0x10/0x10 [ 1382.122767] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.122776] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1382.122790] block_ioctl+0xd9/0x120 [ 1382.122802] ? blkdev_fallocate+0x3a0/0x3a0 [ 1382.149758] do_vfs_ioctl+0x75a/0xff0 [ 1382.153566] ? lock_acquire+0x170/0x3f0 [ 1382.157548] ? ioctl_preallocate+0x1a0/0x1a0 [ 1382.161961] ? __fget+0x265/0x3e0 [ 1382.165418] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.169389] ? security_file_ioctl+0x83/0xb0 [ 1382.173798] SyS_ioctl+0x7f/0xb0 [ 1382.177165] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.181143] do_syscall_64+0x1d5/0x640 [ 1382.185130] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:59:01 executing program 4: pkey_alloc(0x0, 0x0) (async, rerun: 32) pkey_alloc(0x0, 0x0) (async, rerun: 32) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) [ 1382.190330] RIP: 0033:0x7fd7232e3fb7 [ 1382.194073] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.201782] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1382.209051] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1382.216320] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1382.223588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1382.230861] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:01 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 20) 01:59:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0800000010000000000000000000000000000007000000090000000000000000000000ff0f000000000000"], 0x48900) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0800000010000000000000000000000000000007000000090000000000000000000000ff0f000000000000"], 0x48900) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000881) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) r3 = dup(r0) (async) r4 = dup(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x5, 0x81, 0xc1, 0x0, 0x8, 0x48, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1000, 0x33, 0x0, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0xf, r4, 0x3) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x4000001, 0x10010, r3, 0x83000000) openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x101200, 0x151) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf250500000034000980080002000400000008000100050000000800010009000000080001000700000008000100090000000800020006000000dc0001802c00040014000100020000000000000000001400020002004e22ac1414bb000000000000000044000400200001000a004e21000001010000000000000000000000000000000000080000200002000a004e240000000600000000000000000000ffffac14142a00800c7c0c000280080003001f0000003400028008000200010100000800fc000e000000080004000800000008000400e3120000080002000400000008000200000000000d0001007564703a73797a31000000000e0001006574683a766c616e3000000008000300080000000c0003800800030003000000180004801300010062726f6164636173742d6c696e6b0000000000000000"], 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x412040, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000280)={0x0, 0xffffffffffffffcc}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4008004) 01:59:01 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 26) 01:59:01 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) 01:59:01 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}]}) [ 1382.278898] hfs: can't find a HFS filesystem on dev loop3 [ 1382.396983] FAULT_INJECTION: forcing a failure. [ 1382.396983] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.427914] FAULT_INJECTION: forcing a failure. [ 1382.427914] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.431943] hfs: unable to parse mount options 01:59:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001100)="dd2f8b939efa04f148211814a2c2f5e6eb970c588bb2930af76d263001245d2e61cd465dcb6db39e3e4c43bb47d038e74d31e0115ec952736a1eb8b833fc63d68e87243c413db5e3ea21422c50731f9f445e8d18bd3568618f3f815e57ea7d6d8649d380bbdf2242f355a2fd3cae14d29f200c23fd4f571e0e3849aba6730c99062dc93b5fd6697f6bcedc6084d3aa6e5a1e7e68b6d22832c29ec569bd75d7c57e5006ef57d57c883508c87d8f9ec6dde456bd7800b6cb2c02a4f1861665eb272bb4d9fe0f402e8581f2aa5c6a95134210f108e513e93be9063549e3c262d0f5e107a7500c10e4c7d6497582a44b08", 0xef, r0}, 0x68) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)="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") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x410702, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x400a004) [ 1382.440072] CPU: 0 PID: 23944 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1382.444412] Bluetooth: hci0 command 0x0401 tx timeout [ 1382.452116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1382.452120] Call Trace: [ 1382.452138] dump_stack+0x1b2/0x281 [ 1382.452153] should_fail.cold+0x10a/0x149 [ 1382.452169] should_failslab+0xd6/0x130 [ 1382.480981] kmem_cache_alloc_node+0x263/0x410 [ 1382.485570] __alloc_skb+0x5c/0x510 [ 1382.489209] kobject_uevent_env+0x882/0xf30 [ 1382.493541] lo_ioctl+0x11a6/0x1cd0 [ 1382.497179] ? loop_set_status64+0xe0/0xe0 [ 1382.501408] blkdev_ioctl+0x540/0x1830 [ 1382.505307] ? blkpg_ioctl+0x8d0/0x8d0 [ 1382.509197] ? trace_hardirqs_on+0x10/0x10 [ 1382.513440] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.518894] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1382.523903] block_ioctl+0xd9/0x120 [ 1382.527524] ? blkdev_fallocate+0x3a0/0x3a0 [ 1382.531838] do_vfs_ioctl+0x75a/0xff0 [ 1382.535632] ? lock_acquire+0x170/0x3f0 [ 1382.539624] ? ioctl_preallocate+0x1a0/0x1a0 [ 1382.544024] ? __fget+0x265/0x3e0 [ 1382.547471] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.551484] ? security_file_ioctl+0x83/0xb0 [ 1382.555890] SyS_ioctl+0x7f/0xb0 [ 1382.559244] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.563204] do_syscall_64+0x1d5/0x640 [ 1382.567081] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1382.572260] RIP: 0033:0x7faed27e5fb7 [ 1382.575953] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.583644] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1382.590898] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1382.598150] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1382.605411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1382.612676] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1382.619945] CPU: 1 PID: 23936 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1382.627828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1382.637182] Call Trace: [ 1382.639782] dump_stack+0x1b2/0x281 [ 1382.643413] should_fail.cold+0x10a/0x149 [ 1382.647565] should_failslab+0xd6/0x130 [ 1382.651546] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1382.656240] ? dev_uevent_filter+0xd0/0xd0 [ 1382.660477] kobject_uevent_env+0x20c/0xf30 [ 1382.664799] ? internal_create_group+0x48f/0x710 [ 1382.669560] lo_ioctl+0x11a6/0x1cd0 [ 1382.673192] ? loop_set_status64+0xe0/0xe0 [ 1382.677426] blkdev_ioctl+0x540/0x1830 [ 1382.678460] hfs: can't find a HFS filesystem on dev loop2 [ 1382.681749] ? blkpg_ioctl+0x8d0/0x8d0 [ 1382.681761] ? trace_hardirqs_on+0x10/0x10 [ 1382.681776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.700509] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1382.705534] block_ioctl+0xd9/0x120 [ 1382.709164] ? blkdev_fallocate+0x3a0/0x3a0 [ 1382.713489] do_vfs_ioctl+0x75a/0xff0 [ 1382.717295] ? lock_acquire+0x170/0x3f0 [ 1382.721273] ? ioctl_preallocate+0x1a0/0x1a0 [ 1382.725687] ? __fget+0x265/0x3e0 [ 1382.729144] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.733232] ? security_file_ioctl+0x83/0xb0 [ 1382.737657] SyS_ioctl+0x7f/0xb0 [ 1382.741021] ? do_vfs_ioctl+0xff0/0xff0 01:59:01 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14954000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e52415ebc07f090cf82483838759be65726fb3eb6b76bf"}}, @TIPC_NLA_NODE_ID={0x81, 0x3, "6a0502ca7596be0ab10aa489133087c9ade0d15b043ad11f344afd8f5c7ca550e234e86f7b9019bdcf5aae9c9e598aa4434236dbb7d87b863137e99c5f62eca0a1d737c9fd30878ffda6c5832ea7b444ccc387819e7b53e63db9dc316167cd7290f85f301dbc3e79b5871eabc35a22539f33ce71ce342d530bd46fb875"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6103f617c10541a4db99ab26c29103ecc2604f0369"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x801}, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100001d, r0) 01:59:01 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14954000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e52415ebc07f090cf82483838759be65726fb3eb6b76bf"}}, @TIPC_NLA_NODE_ID={0x81, 0x3, "6a0502ca7596be0ab10aa489133087c9ade0d15b043ad11f344afd8f5c7ca550e234e86f7b9019bdcf5aae9c9e598aa4434236dbb7d87b863137e99c5f62eca0a1d737c9fd30878ffda6c5832ea7b444ccc387819e7b53e63db9dc316167cd7290f85f301dbc3e79b5871eabc35a22539f33ce71ce342d530bd46fb875"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6103f617c10541a4db99ab26c29103ecc2604f0369"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x801}, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100001d, r0) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) (async) pkey_alloc(0x0, 0x3) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14954000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e52415ebc07f090cf82483838759be65726fb3eb6b76bf"}}, @TIPC_NLA_NODE_ID={0x81, 0x3, "6a0502ca7596be0ab10aa489133087c9ade0d15b043ad11f344afd8f5c7ca550e234e86f7b9019bdcf5aae9c9e598aa4434236dbb7d87b863137e99c5f62eca0a1d737c9fd30878ffda6c5832ea7b444ccc387819e7b53e63db9dc316167cd7290f85f301dbc3e79b5871eabc35a22539f33ce71ce342d530bd46fb875"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6103f617c10541a4db99ab26c29103ecc2604f0369"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x801}, 0x5) (async) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100001d, r0) (async) [ 1382.745002] do_syscall_64+0x1d5/0x640 [ 1382.748899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1382.754085] RIP: 0033:0x7fd7232e3fb7 [ 1382.757790] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.765534] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1382.772805] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1382.780076] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1382.787431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:59:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xd95bab296bc06d35, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff6000/0x9000)=nil, 0x2, 0x1, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) accept4$netrom(r2, 0x0, 0x0, 0x0) 01:59:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001100)="dd2f8b939efa04f148211814a2c2f5e6eb970c588bb2930af76d263001245d2e61cd465dcb6db39e3e4c43bb47d038e74d31e0115ec952736a1eb8b833fc63d68e87243c413db5e3ea21422c50731f9f445e8d18bd3568618f3f815e57ea7d6d8649d380bbdf2242f355a2fd3cae14d29f200c23fd4f571e0e3849aba6730c99062dc93b5fd6697f6bcedc6084d3aa6e5a1e7e68b6d22832c29ec569bd75d7c57e5006ef57d57c883508c87d8f9ec6dde456bd7800b6cb2c02a4f1861665eb272bb4d9fe0f402e8581f2aa5c6a95134210f108e513e93be9063549e3c262d0f5e107a7500c10e4c7d6497582a44b08", 0xef, r0}, 0x68) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)="9badf491ba75977af57cd54b77aed0bd2a07c2bc98a35393f7d3a59597edb89ee21d1cccd701235a75cf022ead720b14afb459b7c39b55028717ad7f46d47b413d2ba804373c93d9324cc927a6cea6a1125ea6e39c50a9ae3ecdf2675ce761d476db3c432fa3dfc2f2ab0ca25b8882836cd2f39653530bd304cc2816dc8276722be66bdebf389acc5d5efe69dbe091ba701fde1a7132ca35459fcd150c0be3f09e94e2539d6eff5aa2f93587982c1f730f0406889d46b4ffb0c2f8e4e0bf26410759d22a01f1245c2a3ef2712b42f47419ef023ed039439eccd47a629c32b17262a07e94eef8b3e69ead9890fc0bb23772ae38afe72a1717a96ef17ec1ec9412beb89a5e732f4fe6d8767a90506404d1e91077ba4e297e67f256b3eefddee40df4cabe3b33f8bf3537ddf6b3dcf1bee468a01dbd47d56684b217c9fce3331cd1904e6dd77e7fa6b841cf668a0f3d82658e625c42d54cfd154f937316700e25234cd730ed5ca05dd00133c967230910c122b73fd0ea16f74ee96dcb159edd087825bcfbe3953ec88d719bc7aefed5a4dbc7de58043211e303a135a7d0b280663a3f175e54d13c41e590509618c7ec868f804839da6740f9fcdd3c1d2d4a9586e64e30cb644e69bbe3caf2efeda3fb0dbea07fbe746ab0070e34dbae67b252edfd47978efc84aecbc92670f9c4b965e766dd3056ef914e7ff9fcc14994b0e9942358548977a407ea1fef79a7e8665e740ef61f2daa1e69b5fb72a8977b7a7dd28f6a83573146de0ec20ab6d67fa509b9f23cc4c2791e8acf3c9b9ed037c8fa8b87e67a93e2c259ca46d37719394a87017082b0308e3fd234cd6f253d5c095e6e1e1282f417b86dc7f39125dfeac440cc502a0e94c990af3354a3a7c96155dba7f3df3f8316d20d716d1deb9b7987aaf2b82d7e73bf7feb404fa41f1a0d837a16e20770e29040c6ea154f6b5c4e9f59227999e6fafba57beb80b383b7f3ff28c1fd6abc8c697e4703eca7eadf78b6cc19f3b942c71fb85a3dc0b0f208cb6f196d39a40b5d7dad047d656d32448948440c5e1c25b1ff2f4ee41168f38606d09c5585fbbf83f45d91a922f33148e2c0d05ca4275edd27be59069be1e75d88a78c9f7c68c9492f9c42c6e03a651ac3bd6ff2eb7e6dc2286a897dda97841972b2577b1c93bb59b172d1706eea342ecc427a32fe351e2a7b0cda7073b5c5f6da25de9abf281c0ea3be8eb80d43eab58ec00e30572e8a3d424036d5ba4a4413ddc9a84ec01ae949c7c14fe46b32995aa55214c00f93fdfdcbeb38912485e7e77fada47b82079a56f13e25a3811f0baa2a4b05dfa44463b2b8dd3edb39a9c382cc5cc57d6e51c9d3579b034becb37cebdafd10eae4b4a98c767f7695ec5973ff7d56be453eafb4265d5d80e7af5b77a107a114f53417fd10908e90081f9a1503f709ae7e4c757b7a833b71347461ff0c4ef2562bd5cd359aeb35578d865f105e927847b6abd5f3c32b907a3dd08dd0d40083b54a3ffb263eb4e0a351fabce8cdcc15ab6c39820d6a46d63653a34b9049d2d899bd594ceaaaebfff2cb6d3034c8dfb6d79e8a52bf96cf83f7f960ec5dad5d399aed91df56c72d0d73892bb5db65300b929d9bda86bb84214ef8df7120c4b8e6839b8b85dd636852918c800902d022a0dd9ba68a27dfbf24b67f659c9e203207ae14fe33372995c473f313a75c67b389b923f227397a6a25a4326d5e89ae460d2915a77ce5926406cf58ef937ddd40b6a403c92337c05e83f1e3b3d8f4ec8728487673bd2373a5489ed08ccf76842481b7f7fca4f98d515679a6578af664a3502c28183370761ffe26f1e7f718f30c77b35496915a9e1932384335703e89145f913a6fed9c137b86ce3aedc3969c441af1eeef4b59a4ebb95d08bf2d007115112209895e340c9995bb47bc97d197196f2d1fb818d0de087ca914be9e781689b0127cc6e92fe654288992db484ae555ead916555a2985636fd454c390cf9e229ffd7d1c089dae260d9e2990638a93760f619f2e46de8ed53ac30077b538cf139dd2dbd1c5b5a3eb9a952a352a93794611a16e3d1a41dae7237c8037fd5cea27c2b910527c657cbba1fa5f7cb2716677ef5bea2f91c6ad54b4eb3b8a89ee222f5577b497c72003ab971516689ac073992ca3cb7d0d1414b2cbec20ef9879a0d02a615c3c6057b26a8f32b2501b0dc3c068cd9a79e107c712234a13a563e2f3f01c6197083f1ed01d90c7259ca870bbdfd3a5d0ea2413fa71fc6d7d9664649d3d590f2506ec5be9327cc17ca3d530f87bc4906e7e04d8b7480bc92fa9bca31f89709b03ededb3bb14600a3073cffd0b8ed066be51baac5b77ce655a1fab1d4b680a3518127c99dd6507c1cf11ab5e9cb3cd0c36ff2973e4845c61427421ac5d6b0fcdbaec18f1ca8ec8053030ac7e1886eb3c5d2d905b8426e394f61792d8f0b2e0fe324d93e26fe85bada83612638df5ba6055ebd837e99d0a9ad9d09d762a4cfa8be76f0df42fffe6406c448d5a11c20df01d3fbea6e02862177bb207baf27a4841a1feb536a9d926beffc74cff2d29894e538475dbc2d70fc29f11d9c953d0ea7d75175e746bcde17b39a7224123aa951f2bbb40007d530f737afd9195f7e3274a188e0d98b94210cdfa4c0ce8891ff5500bca0079ac40ac2219079a39d449a7eca8a2ee7bf8b66ffdb127c2afaf963dc43294478bcced4ca33fa0b158126b200bd6acedcd28e14509521db648626559f924646c208497c31080fc121d73add5d6959533350c7940a41ed945b8c6cd992f85d3bcf7fa4637dcc4cfa9c207c8986702465c77b0adb075703e61782dda8bf7548d761946debdb0703806b1852cf3377c5e88865df73c332a3c5b30ec39ad9aba2d4e9cca69c3e6b8217c5d6eaf95e8c2e2f462927bbe8c4ca5458001031cb67ebc40901ecd55a7f6fd243627efe399a1cfe9f19663d16e3e51833f40432cd4ad06de0bc81fb91d06c395457178214ab6f2dc43ac146925dc15bd052f2487f2c825a2224b842f30bd92c5adb8b481518c6b22b2e43c725f7234145dfa3c17426589a9b58d1b0182a31509b5a0cbf8d5cd72b317a95db47240e8116d37e510f0f5fbc0e83e244ec2a0b7825485bb757f0011c0565301593fb3552d0a99373e44559a6eeb7e18436f4dda7c654236699c1c7387770c5a51675094ccb451d82f57b8bcf2b8ee7f120a951b5cade1380fa40ad126547e4d9f8cc11c97a26453382937a5d16c0bb9587ea74be9b89cfc076887d31f182a926ef31764a094e359ebf315523e79887510b4a4df7e3532e2014f03119faf78797afddd0860b12ce24f38847a06d28fa0feab3edbc8ad8b3bcf1344bafb0d0aae602561931da7087e693e897598bc6c0e2ce4d7e4cfaf80776529f17d5c4bfb71432ef80992f2d74202d4d60246e58af3fe12704cfe682ee4b98c59c3fd14836f963b2ac6562d6035eb23910d72306bb9d12f6fd17d09515f2f297e0393792a4ff2490eada00c747b0c814a008a6d96ff2473474e8e01534124e6e6431566a2ed15f497108a2bfc80fb9b3163ff546459fe900802edde2072e40503a68a1b99338965284b64be133a32330876f1abec415d2089d33a0a503a2acebf6bdbdee64b5e7757ed04af86352b8c3b43ca195f626e33c2c027a85d7cc1ed3972caef2639ea80f30657ab10bed956dd7a2ae58e352aeb36e4bae6de1f1acc960d0064c9ccd428e8990cb4e739d689419256c576ce951847def18b569d662b217dd82b382a9b788a1d64d1b29c2ee3e6310d7b185118392c1d3fbae2badca3a4bff4dd495c613d63f48b3eac5ab9679337cec6333c8c9cfec00bc7a5817fa2156d511e45d4deae442dd7ad2dd952f74e2025defd597fafdcd45a58c0f5cd99ed6db36fa9095f96a85bab893e6a83897090f9a281a370b809a0c52bf7f455c80ee47ba8b119cb3f79197025c43162da01c38ec93fe8f6291cab9fea7988ba3244c9cc45ac45811176b7ddd3428e7f7f682d565af629bbac51d45346e6f0d24800c2bbd674b0cabfc78f7579808cd37aa92c2ab86e3844809b4fb338e41f62e42803cea9332ec2eb07cd871f3a1749517268790c1d224a7c74d152a9b1eea15d5c60ab8157e5c1ac7ce873d4e541917c7e60f660a048de3f58085397b3b4ec31f485e186f5934ff6428dcf6c9c32f3601dab92837e4707a0192ca2167a7b6efd218e45d9759462ed301c6713450fc00917ae2abd2d71b9b69214dc572592024374ab6c2150408878b86fc7319bc2caa39c34523d62a81bcfe3a6c3d96df8f7dd4c6da47d1218de9b7e60ce2660e217e7d68015e66182493a11f722c184f45ae1dd943cb918323105d7bdb71465860a0533cf366344d0b9c85f05b93115667566c37e93f8480b1e53bcdc004fc6e18c03abff16202f7241d3c1b46e95eb6592d7203347c4ebf89e6ccb000dc67316536b5a19afbaeb914e4bbf41d8d85964e508bc4d465f587c99a2697980d9dfdd7bdda127790ae4c618846da490d051a62ecaef484f1c9a8bc8d245afb463568c0bc9ac1f6b6fbc1f7e85dafc73ad8bb6fe8a6e1e0f5b505270ef3a26e189505104af907854bba70bacaacc22a7bdb1ac3be287efd962e7c8ea43d3f7e58ff45375e97582268572687ab595f829a9ec77666e6390119c99c4e57fc46ee56f34265f8a151b34d8ba9eb5dd5b8a2873a7e0842c54279f5aba40308e68e8a4509bd6eba90103733a1397e10dd9321677093220f773e63fe06ca46761240b8ef79c99efe5f6bd20159cb9c427f48207f7431caa9ae727a8c83afbb2baed31da32c64d3f939aaffc87ace122bb186bea874f2e499835275e5c006da2c5029c151b66d9e44e3513a73c891428eb77bdbf66c9b1257ba05dfeeebbae85e014e21d115c2520d8f61a01be55de0b6421f8e79882b97033cd7ac99e9d7e0a8553621badc5d50870f2e82b2d7e9acee5c18ccf9278f1ae610f3bfaaca069b829923ff78cff4228b9427e507aaac608424c268e9844e0856a6e56081c18c15fbc426464c6dbe0d8831af5148fe3a064ffab66855feba22481195af5a96c1c8ce6f9c39d6e8268e99cdb7ee5cdcc74f7c2a2453fcae29e1a60546e24c37b9b109a7da064b13ad4d5bc2bc623a18888734a07e8e5fcef93773c539b3a332d7b544288c2a868da5b03801bfc0d0a4a8336c3b210f35e27212e1d27d76915b9dde6f978cf7f4f0e5a337c686b8ba32cb93502cabbce2b81dc40a7ccc90bf048a767e4c8770c864856b5d17bb77d2e61fc82479582780876effc410c3edeedb7f44ad7642fbf5bafd624cb4d7d35b42fecc9cac72c3a7512abdec5be384884a9173d385e4266af6ff4cf50888946de73b9ee25cd221048332e0d1702929bea0672984df2008ae4254faa318ad9c6c43b97473ab8b512f07dda6a46a2295164e254909e258cf0d5b0f051b4f96e169db519c75808a1814f1abd4a718cb5e0cd96b7b7cab988d4331d57878fe27bf3962cf551a692a64a5028a043394c3d62bc666e0838b9ec5719224f1e8c588774f4d1e358b0ccb0354f495f8858a8ba57c84a7a129eab57608e3512ca30209b117cad9bebc02b8e4789812e51a762a74bf848941a5a0e59b36ac471c13765eddea8a90ccf5b66d06f50a2f2f09cf8237fb82913b76f786fb53f56b58297f009c58acfd9b062434eb60f89f86f59f3acd93621d2b2cc66dd47a14ef6f914d86675d198d103b4f51ea93060947070ad8677018cf9990208ea346d6d5307043204") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x410702, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x400a004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001100)="dd2f8b939efa04f148211814a2c2f5e6eb970c588bb2930af76d263001245d2e61cd465dcb6db39e3e4c43bb47d038e74d31e0115ec952736a1eb8b833fc63d68e87243c413db5e3ea21422c50731f9f445e8d18bd3568618f3f815e57ea7d6d8649d380bbdf2242f355a2fd3cae14d29f200c23fd4f571e0e3849aba6730c99062dc93b5fd6697f6bcedc6084d3aa6e5a1e7e68b6d22832c29ec569bd75d7c57e5006ef57d57c883508c87d8f9ec6dde456bd7800b6cb2c02a4f1861665eb272bb4d9fe0f402e8581f2aa5c6a95134210f108e513e93be9063549e3c262d0f5e107a7500c10e4c7d6497582a44b08", 0xef, r0}, 0x68) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)="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") (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x410702, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x400a004) (async) 01:59:01 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}]}) [ 1382.794703] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1382.817870] hfs: can't find a HFS filesystem on dev loop3 01:59:01 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 21) 01:59:01 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 27) 01:59:01 executing program 4: pkey_alloc(0x0, 0x0) (async, rerun: 32) pkey_alloc(0x0, 0x0) (async, rerun: 32) pkey_alloc(0x0, 0x1) (async) r0 = pkey_alloc(0x0, 0x3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14954000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e52415ebc07f090cf82483838759be65726fb3eb6b76bf"}}, @TIPC_NLA_NODE_ID={0x81, 0x3, "6a0502ca7596be0ab10aa489133087c9ade0d15b043ad11f344afd8f5c7ca550e234e86f7b9019bdcf5aae9c9e598aa4434236dbb7d87b863137e99c5f62eca0a1d737c9fd30878ffda6c5832ea7b444ccc387819e7b53e63db9dc316167cd7290f85f301dbc3e79b5871eabc35a22539f33ce71ce342d530bd46fb875"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6103f617c10541a4db99ab26c29103ecc2604f0369"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x801}, 0x5) (async) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100001d, r0) 01:59:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xd95bab296bc06d35, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff6000/0x9000)=nil, 0x2, 0x1, 0x8}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) accept4$netrom(r2, 0x0, 0x0, 0x0) 01:59:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001100)="dd2f8b939efa04f148211814a2c2f5e6eb970c588bb2930af76d263001245d2e61cd465dcb6db39e3e4c43bb47d038e74d31e0115ec952736a1eb8b833fc63d68e87243c413db5e3ea21422c50731f9f445e8d18bd3568618f3f815e57ea7d6d8649d380bbdf2242f355a2fd3cae14d29f200c23fd4f571e0e3849aba6730c99062dc93b5fd6697f6bcedc6084d3aa6e5a1e7e68b6d22832c29ec569bd75d7c57e5006ef57d57c883508c87d8f9ec6dde456bd7800b6cb2c02a4f1861665eb272bb4d9fe0f402e8581f2aa5c6a95134210f108e513e93be9063549e3c262d0f5e107a7500c10e4c7d6497582a44b08", 0xef, r0}, 0x68) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)="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") (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x410702, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x400a004) [ 1382.918288] hfs: unable to parse mount options [ 1382.954555] FAULT_INJECTION: forcing a failure. [ 1382.954555] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.978179] CPU: 0 PID: 23997 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1382.986183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1382.995539] Call Trace: [ 1382.998138] dump_stack+0x1b2/0x281 [ 1383.001778] should_fail.cold+0x10a/0x149 [ 1383.005937] should_failslab+0xd6/0x130 [ 1383.010187] __kmalloc+0x2c1/0x400 [ 1383.013737] ? kobject_get_path+0xb5/0x230 [ 1383.017981] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1383.023440] kobject_get_path+0xb5/0x230 [ 1383.027516] kobject_uevent_env+0x230/0xf30 [ 1383.031846] ? internal_create_group+0x48f/0x710 [ 1383.036635] lo_ioctl+0x11a6/0x1cd0 [ 1383.040310] ? loop_set_status64+0xe0/0xe0 [ 1383.044673] blkdev_ioctl+0x540/0x1830 [ 1383.048587] ? blkpg_ioctl+0x8d0/0x8d0 [ 1383.052481] ? trace_hardirqs_on+0x10/0x10 [ 1383.056727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.061836] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1383.066864] block_ioctl+0xd9/0x120 [ 1383.070521] ? blkdev_fallocate+0x3a0/0x3a0 [ 1383.074863] do_vfs_ioctl+0x75a/0xff0 [ 1383.078759] ? lock_acquire+0x170/0x3f0 [ 1383.082887] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.087395] ? __fget+0x265/0x3e0 [ 1383.090867] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.094671] FAULT_INJECTION: forcing a failure. [ 1383.094671] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.094847] ? security_file_ioctl+0x83/0xb0 [ 1383.110435] SyS_ioctl+0x7f/0xb0 [ 1383.113806] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.117812] do_syscall_64+0x1d5/0x640 [ 1383.121705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.127150] RIP: 0033:0x7fd7232e3fb7 [ 1383.130864] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.138568] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1383.146015] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 01:59:02 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) [ 1383.153284] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1383.160664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1383.167947] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1383.175232] CPU: 1 PID: 24011 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1383.184427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1383.193869] Call Trace: [ 1383.196461] dump_stack+0x1b2/0x281 [ 1383.198933] hfs: can't find a HFS filesystem on dev loop3 [ 1383.200100] should_fail.cold+0x10a/0x149 [ 1383.200116] should_failslab+0xd6/0x130 [ 1383.200130] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1383.218992] __kmalloc_node_track_caller+0x38/0x70 [ 1383.223927] __alloc_skb+0x96/0x510 [ 1383.227557] kobject_uevent_env+0x882/0xf30 [ 1383.231887] lo_ioctl+0x11a6/0x1cd0 [ 1383.235615] ? loop_set_status64+0xe0/0xe0 [ 1383.239853] blkdev_ioctl+0x540/0x1830 [ 1383.243743] ? blkpg_ioctl+0x8d0/0x8d0 [ 1383.247660] ? trace_hardirqs_on+0x10/0x10 [ 1383.251891] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.256981] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1383.261983] block_ioctl+0xd9/0x120 [ 1383.265619] ? blkdev_fallocate+0x3a0/0x3a0 [ 1383.269935] do_vfs_ioctl+0x75a/0xff0 [ 1383.273722] ? lock_acquire+0x170/0x3f0 [ 1383.277694] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.282085] ? __fget+0x265/0x3e0 [ 1383.285527] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.289518] ? security_file_ioctl+0x83/0xb0 [ 1383.293924] SyS_ioctl+0x7f/0xb0 [ 1383.297271] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.301227] do_syscall_64+0x1d5/0x640 [ 1383.305109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.310287] RIP: 0033:0x7faed27e5fb7 [ 1383.313980] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.321709] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1383.328963] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1383.336216] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1383.343651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:59:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xd95bab296bc06d35, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff6000/0x9000)=nil, 0x2, 0x1, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) accept4$netrom(r2, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xd95bab296bc06d35, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff6000/0x9000)=nil, 0x2, 0x1, 0x8}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r1) (async) accept4$netrom(r2, 0x0, 0x0, 0x0) (async) 01:59:02 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/176}, 0xb8, 0x2, 0x1800) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) 01:59:02 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 22) 01:59:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfe5c}, 0x1, 0x0, 0x0, 0x20000000}, 0xa004) [ 1383.350922] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1383.366570] hfs: can't find a HFS filesystem on dev loop2 [ 1383.376204] hfs: unable to parse mount options 01:59:02 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 28) 01:59:02 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot}]}) 01:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x112, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x4044891) 01:59:02 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/176}, 0xb8, 0x2, 0x1800) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/176}, 0xb8, 0x2, 0x1800) (async) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) (async) 01:59:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfe5c}, 0x1, 0x0, 0x0, 0x20000000}, 0xa004) [ 1383.471684] FAULT_INJECTION: forcing a failure. [ 1383.471684] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.520152] CPU: 0 PID: 24037 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1383.528060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1383.537417] Call Trace: [ 1383.540010] dump_stack+0x1b2/0x281 [ 1383.543656] should_fail.cold+0x10a/0x149 [ 1383.547915] should_failslab+0xd6/0x130 [ 1383.551899] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1383.557009] __kmalloc_node_track_caller+0x38/0x70 [ 1383.561949] __alloc_skb+0x96/0x510 [ 1383.565588] kobject_uevent_env+0x882/0xf30 01:59:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfe5c}, 0x1, 0x0, 0x0, 0x20000000}, 0xa004) 01:59:02 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) [ 1383.569918] lo_ioctl+0x11a6/0x1cd0 [ 1383.573552] ? loop_set_status64+0xe0/0xe0 [ 1383.577790] blkdev_ioctl+0x540/0x1830 [ 1383.581683] ? blkpg_ioctl+0x8d0/0x8d0 [ 1383.585568] ? trace_hardirqs_on+0x10/0x10 [ 1383.589806] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.594918] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1383.599949] block_ioctl+0xd9/0x120 [ 1383.603574] ? blkdev_fallocate+0x3a0/0x3a0 [ 1383.607902] do_vfs_ioctl+0x75a/0xff0 [ 1383.611700] ? lock_acquire+0x170/0x3f0 [ 1383.615692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.620093] ? __fget+0x265/0x3e0 [ 1383.623532] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.627495] ? security_file_ioctl+0x83/0xb0 [ 1383.631887] SyS_ioctl+0x7f/0xb0 [ 1383.635234] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.639188] do_syscall_64+0x1d5/0x640 [ 1383.643172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.648341] RIP: 0033:0x7fd7232e3fb7 [ 1383.652035] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.659818] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 01:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x112, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x4044891) 01:59:02 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/176}, 0xb8, 0x2, 0x1800) (async) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) [ 1383.667100] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1383.674353] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1383.681602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1383.688988] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:02 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) (async) [ 1383.717602] hfs: can't find a HFS filesystem on dev loop3 [ 1383.722966] FAULT_INJECTION: forcing a failure. [ 1383.722966] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.750324] CPU: 1 PID: 24050 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1383.758315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1383.767669] Call Trace: [ 1383.770258] dump_stack+0x1b2/0x281 [ 1383.773897] should_fail.cold+0x10a/0x149 [ 1383.778050] should_failslab+0xd6/0x130 [ 1383.782195] kmem_cache_alloc_node+0x263/0x410 [ 1383.786769] __alloc_skb+0x5c/0x510 [ 1383.790383] kobject_uevent_env+0x882/0xf30 [ 1383.794696] lo_ioctl+0x11a6/0x1cd0 [ 1383.798314] ? loop_set_status64+0xe0/0xe0 [ 1383.802624] blkdev_ioctl+0x540/0x1830 [ 1383.806495] ? blkpg_ioctl+0x8d0/0x8d0 [ 1383.810456] ? trace_hardirqs_on+0x10/0x10 [ 1383.814679] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.819781] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1383.824792] block_ioctl+0xd9/0x120 [ 1383.828402] ? blkdev_fallocate+0x3a0/0x3a0 [ 1383.832705] do_vfs_ioctl+0x75a/0xff0 [ 1383.836503] ? lock_acquire+0x170/0x3f0 [ 1383.840460] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.844856] ? __fget+0x265/0x3e0 [ 1383.848312] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.852283] ? security_file_ioctl+0x83/0xb0 [ 1383.856687] SyS_ioctl+0x7f/0xb0 [ 1383.860041] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.864003] do_syscall_64+0x1d5/0x640 [ 1383.867880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.873061] RIP: 0033:0x7faed27e5fb7 [ 1383.876764] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.884461] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1383.891732] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1383.898998] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1383.906275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1383.913543] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:02 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 23) 01:59:02 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) [ 1383.951403] hfs: unable to parse mount options [ 1383.970655] hfs: can't find a HFS filesystem on dev loop2 [ 1383.995505] FAULT_INJECTION: forcing a failure. [ 1383.995505] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.010921] CPU: 1 PID: 24089 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1384.018845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1384.028403] Call Trace: [ 1384.030991] dump_stack+0x1b2/0x281 [ 1384.034611] should_fail.cold+0x10a/0x149 [ 1384.038771] should_failslab+0xd6/0x130 [ 1384.042762] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1384.048078] __kmalloc_node_track_caller+0x38/0x70 [ 1384.053005] __alloc_skb+0x96/0x510 [ 1384.056629] kobject_uevent_env+0x882/0xf30 [ 1384.060960] lo_ioctl+0x11a6/0x1cd0 [ 1384.064590] ? loop_set_status64+0xe0/0xe0 [ 1384.069216] blkdev_ioctl+0x540/0x1830 [ 1384.073159] ? blkpg_ioctl+0x8d0/0x8d0 [ 1384.077057] ? trace_hardirqs_on+0x10/0x10 [ 1384.081282] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1384.086456] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1384.091470] block_ioctl+0xd9/0x120 [ 1384.095089] ? blkdev_fallocate+0x3a0/0x3a0 [ 1384.099403] do_vfs_ioctl+0x75a/0xff0 [ 1384.103199] ? lock_acquire+0x170/0x3f0 [ 1384.107163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.111557] ? __fget+0x265/0x3e0 [ 1384.115012] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.118975] ? security_file_ioctl+0x83/0xb0 [ 1384.123370] SyS_ioctl+0x7f/0xb0 [ 1384.126739] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.130702] do_syscall_64+0x1d5/0x640 [ 1384.134592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.139768] RIP: 0033:0x7fd7232e3fb7 01:59:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 29) 01:59:03 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}]}) 01:59:03 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async, rerun: 32) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) 01:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x112, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x4044891) 01:59:03 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) [ 1384.143496] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.151193] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1384.158445] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1384.165699] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1384.172976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1384.180239] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1384.225783] hfs: can't find a HFS filesystem on dev loop3 01:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="d4a2782340ae02d9cd153dd67066541a8300a54edad46e68cd9c0e55458d2ea190db049312333928e964f12cad172a89091d1f6d90497c32ff719e9f704aa685e03b36f1c22a0000000000000004000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000100000000000000"]) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @null, @netrom={'nr', 0x0}, 0x40, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null]}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x3f, 0x96, 0x3, 0x20}, {0x7, 0x50, 0x7, 0x20}]}) bind$netrom(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) [ 1384.269164] FAULT_INJECTION: forcing a failure. [ 1384.269164] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.291241] CPU: 1 PID: 24102 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1384.299148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1384.308501] Call Trace: [ 1384.311092] dump_stack+0x1b2/0x281 [ 1384.314731] should_fail.cold+0x10a/0x149 [ 1384.318887] should_failslab+0xd6/0x130 [ 1384.322865] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1384.327961] __kmalloc_node_track_caller+0x38/0x70 [ 1384.332885] __alloc_skb+0x96/0x510 [ 1384.336506] kobject_uevent_env+0x882/0xf30 [ 1384.340813] lo_ioctl+0x11a6/0x1cd0 [ 1384.344429] ? loop_set_status64+0xe0/0xe0 [ 1384.348673] blkdev_ioctl+0x540/0x1830 [ 1384.352546] ? blkpg_ioctl+0x8d0/0x8d0 [ 1384.356428] ? trace_hardirqs_on+0x10/0x10 [ 1384.360654] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1384.365742] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1384.370744] block_ioctl+0xd9/0x120 [ 1384.374367] ? blkdev_fallocate+0x3a0/0x3a0 [ 1384.378668] do_vfs_ioctl+0x75a/0xff0 [ 1384.382453] ? lock_acquire+0x170/0x3f0 [ 1384.386409] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.390871] ? __fget+0x265/0x3e0 [ 1384.394316] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.398275] ? security_file_ioctl+0x83/0xb0 [ 1384.402682] SyS_ioctl+0x7f/0xb0 [ 1384.406039] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.409997] do_syscall_64+0x1d5/0x640 [ 1384.413883] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:59:03 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) 01:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="d4a2782340ae02d9cd153dd67066541a8300a54edad46e68cd9c0e55458d2ea190db049312333928e964f12cad172a89091d1f6d90497c32ff719e9f704aa685e03b36f1c22a0000000000000004000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000100000000000000"]) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x2) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @null, @netrom={'nr', 0x0}, 0x40, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null]}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) (async) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x3f, 0x96, 0x3, 0x20}, {0x7, 0x50, 0x7, 0x20}]}) (async, rerun: 32) bind$netrom(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 01:59:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @rose, @netrom, @remote, @null, @default, @bcast]}, &(0x7f0000000100)=0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1d, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) [ 1384.419058] RIP: 0033:0x7faed27e5fb7 [ 1384.422754] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.430457] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1384.438189] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1384.445451] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1384.452725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1384.459986] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @rose, @netrom, @remote, @null, @default, @bcast]}, &(0x7f0000000100)=0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1d, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @rose, @netrom, @remote, @null, @default, @bcast]}, &(0x7f0000000100)=0x48) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1d, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) 01:59:03 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 24) 01:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="d4a2782340ae02d9cd153dd67066541a8300a54edad46e68cd9c0e55458d2ea190db049312333928e964f12cad172a89091d1f6d90497c32ff719e9f704aa685e03b36f1c22a0000000000000004000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000100000000000000"]) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @null, @netrom={'nr', 0x0}, 0x40, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null]}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x3f, 0x96, 0x3, 0x20}, {0x7, 0x50, 0x7, 0x20}]}) bind$netrom(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="d4a2782340ae02d9cd153dd67066541a8300a54edad46e68cd9c0e55458d2ea190db049312333928e964f12cad172a89091d1f6d90497c32ff719e9f704aa685e03b36f1c22a0000000000000004000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000100000000000000"]) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x2) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @null, @netrom={'nr', 0x0}, 0x40, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null]}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) (async) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x3f, 0x96, 0x3, 0x20}, {0x7, 0x50, 0x7, 0x20}]}) (async) bind$netrom(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 01:59:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 30) 01:59:03 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) prctl$PR_GET_SECCOMP(0x15) 01:59:03 executing program 5: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) [ 1384.515524] Bluetooth: hci0 command 0x0401 tx timeout [ 1384.525262] hfs: unable to parse mount options [ 1384.537194] hfs: can't find a HFS filesystem on dev loop2 01:59:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @rose, @netrom, @remote, @null, @default, @bcast]}, &(0x7f0000000100)=0x48) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1d, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:03 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) prctl$PR_GET_SECCOMP(0x15) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) (async) prctl$PR_GET_SECCOMP(0x15) (async) 01:59:03 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="d462c7034a11447d871adb285825d6ce41cdbd64d621d65803d9572666a0cf88ffc6ef2cc642ac827920370406104a103c60205f7f0a548860f24919ec804c703db64f0622c7b7ba2e83e0ced67c8f7e89b78adec3a4cb7696bb86103dac50ce7c9801e75279bd397e9f247e626307333d790b2e5014bec53d00bb7f3a934a8b427c1088193da98df27eeea679492b68bd6050e5517b3ab240400d367f22d84dfab90f4ee152705a8eff42f2d4ca376524d5911f5f962a3b77432887b4a37c82aecbcb09df8b07ea3264c2996f5a0303a18fd473e4ddd92d5e54d686bdaeb877fe2fcc85014014c4a04242419c585d577a37088803c4bb6c00ffa08966ead9e2f2c452d5ac0e6d5ffa7d88923f6672602d74049e3b140e7504171781eddb547d82859981eb57c051abea161003970237567156e88cf76068c0f2d5be23b1d3a5338f00542ef0d889b5b3fd1d89a5f57f3d10cecd8450835c0a3a8229e2fc903491eeca88167906ce6dae7c8c51e287ea7aa25b92ea3e3c1e898108e6fb205dc207cf2db8e9867491f97b927e775887418ecce28e9278932024275a9270ada0f5721f69dbad4263a18e9ca49cc00c1cc2897cd5069c65ba56c78cd7899652f72fa2012ea1c806746f44c7bc4ba7ad676dd057c1cfa6d5574da7105be5e64442455cd3eb94e3f4baf322ec107a8493ee1f6de383426277edaef1aaadb038f7251375fcc9b98d294f3e157ea74be165161e553d3e6c6de25566abd4de75c7257c85ca9b551603d2b4599a81303c263451b99d27b57f917626e260a288df11de6ce95eab8cab2968dea23aefaa24faac1af3b4c505320ab56fcfe0110ac83186e7c9e2041418dec9cd0b76e562da4eb8cad1024e52a0aaecd109a7c4d5e32c216b86b069cf21d597c0b53ec0860ff645309a22282facc33e0fd58442957ffec4c8c5f8ded305564a32c1a304f6310f002c29adfcfe2c8078b9fa5d15ace24911db985b8a642780599e39f5ec0b39ec9e8635a8ad2f7eb686ccb16f0047f7dff239aaeae0dfdb0c4f624acc95b7d42f12ac00a5acb83c0f1da6fb3430228f9d5de1e8d87c316594d2d17cad349d827a6f5d49e8061b2850b764c7813e065bee5ee8c5ea21461df774cc88ca6e6e4ecfcb281d159f0e39f3dc0013ad7007eeebdeab50e96aadb7bfa53bc625a3e424386e35e72166349070e5d4dfa1da79100fd48f0cb8069bb1407814694d69a4492ea4e6153de6a34f2ced3ed2228e6750b5a2364d579cd03df76b3e7df4bdd5d87a2e59c2f807525b1835ff81a8147faac1c9eb6329237d5d9d9cc7c58982601e24f44306d5c6ab5755d9a63dfc262ed92d9f34bd17778514a5864726a8d9a1fec4d1fc553bb61d4f66bc7727bbfed2065a4a608e05d56619052a18c52d017ebe4f6633c876cd6f7253a070867126282782cf071f200f88667e73bf3597d9cce39bb9206b65ad82cdca4f29990984bd33d4719fff4b16a7e32fc427a98e3e89ae0856cbb81cabf0edf24ec1749826535493121084f10033f22daed022ffbeeb8c81d9fd18336dac0f2ead532c70d3531c1c5e82abe3ea20c1b9c023e95d48265a7525f2e449f672089396dfc03e2cde6b6eaa29b1b093fca622e146d95452ca8d84075cd3750d1b61b41e4d9f207c9de7b6e718b76d85b37cc4f7d8397053387a56dbbc9f292e5687130d6ca8d7934a92a40cbd260beadf8a2023e51d235f007c91f871370c69172f017790eeeb7dbdce203058acbf0bd7f2e62772b6e8410dc84c8be483b73482295815009d08c2817c83182b2ca649d2c6bc8662148b67573727aef8b51b1e3b08df376d1c4b44bb16f476527bf6cad5032769881e8514beaad15aa747ad7b955e6afb7696a9d63668a04200b699fc87fc3d55988d094ffa83664012b631aa3d4310d4a90452224d88ea63c2d69465d241e2002a00610e55ce8c79a86bb1ff1370791e87a52864a414b85deadc0590146a7d601ea92eac7bae3797c83f50bfccf08322f5f4495c41b66b2f58453e22c4da06efe4734204a1d556ecce391ea115236198d67914e963474ee6e775a6c5df96002876ba117bdc79368b21fb0caf390b775ff607ab8ab0b51fc845c9d3dca70f9a40f584acc05637fd7af250b41167f028e6a81bca68ebce9237ef0ea6349220c61fdb891f69e0a571c71f01f252a128a063c45f3ab94085d75c6c102ca033e18e265e16f6ed4380e7f0cc8d3213193cbf9f91431c581a18f532e9ac1d14949b8983c1a398279586cfd40a7783096edb9daedb0ab432777d526e5f32c5b911bcb6cf0a41dd1f05e8420ace288417339c910b9934841f412a3f2b79f38159e24235a0c716e4b112ad6a84160788f67e07b83fd4b6cf82000fc0471cba3f84b1fa9e5445f4b234e8c28f69488bb3eb31f388591c55469621bd33d897b1233f63cfe3858234c23b44d96c40ca316b19cd732ddfe8b5e6f0e74b24603cd28e09565cedbe384a5a761834bc7c9cbad6ee3d5c2de8e0150149a70c1e15325fd6688e2be80020196e03e242aa4fd7183cfcbca52d32c8b21d6afb85b12fed2aebd1dcc24c8581e7be3a36d27d4993797a44d034581f154994b3bb64b03f9d8b980a06006332557985292167a3dab5a0e0a03eecb08920c96519a4189efb00b0c156d02b61ffc267720c6a9f2b4b247b5000c1f0f424ec55869935fa5f9486c4f2591a5a0519291f4843c91385e672266e17b74d3eab3770ec1a1ab2ef6b3ab00310f3bc5c51cdde06ca056750d3fe4d647cc7c1ce4759971700bdd326523fdcf1852c14f3b25a7d649b64ad36db4349b036afdded6b2baa98664ffd37571cd0c27f834bd44b891661629e1ee2ed9f8d915bf9d97ee2b382a79b2c836414c2dadc9bc9444b125c2319a21efef9ed4e5001ec8cefc3be7a3503d24a302891c47ddd1c93bccda4ecda2efae33210d32af9d925dd5421438d2c726ff0559bc212675521536b754da3c10aeaebb8dea290529d00fa2fe70c4e20e270f8b39e92e85cd472c1040c8c13403346bf15dfbefcf202627f708f255efc20b39242fb985c501c84e25017523be342c91a1ceb2c22b8d80c96daf9965d4678635cbf466e92903a02b240d1ff4fd09881a0e987f9e2beba72eb906a385c81117d4758d6af05c40676397e91d88936b71de9ffddf47ac3f32421bd1f8de7df9ca6c6a4d8afcec5a29379e57eb5810f5cab13ba814d5ea5c641873c8aa902599962725f66fea7df114355982ec3d765b7905ebcedada075c50e8e529d6868a2b93b6052d6919e728f64bb6f7545f23d7047abb770f3c32f97ab90c19cb559d3ca164508924da5b9032f81ca125a8ee7a28aa3add1377de956937e81545563a40bb2f70acd100267ba2b2be2300725bc23c4b3a20275ab25599018ee36d43e30ab2fcb7144cce8e8c4df24cbf6100d1d3756860f8b8f11d695edb83a6f2d9ccf97fe2eca5c88b7bac2de0dfa0c4f10e27099ca0099fb0e733079ef63c9f2c9b5ea3c993fe487aaa3148a9d4d902c9fce8e7b1c73a4fa2b56c4c7662da37e2e0fd0ec17489364b96d1d0e7f27d749ad302266b94b8b4bd63ddd59e1b891b6256d29765e0325bcfe62b5b9fde38e578809249fc9c232654b0c5cd90423df875bef667463840e2c8992faf2228204f7e6cc3e1ee8962d1ada4fa93f41a8daa0f08ba3c044e20f8dc386af1bf6640c26ccbb36693428f532db3714fc0900adc5dc3583cf0e08c1931259841fd8c993b0787d472ab0f1f71c610353461beea1aa3c288e6ef4dc34c6f38941ed4de59323af6d2a8f61dc456fc6c20da133460e833c808c27ab21d29ef667f8e8582e8813eea7ba83b60d6deddb55bbbd0df4065b70f253684c69938158e2e6f17dfbf0dd33fdfbaa5279fde17aac0593fb2d72ee29bf8120bd180c014b47daa6187e80de6271d9ea090275b51c917ab3e879be348f25947e2500ba1edc1140909ab2b7e086beefc95fe5fc087bb8d4a04a671bead999866cf7a07237295282955896fc69be120c4f73407989f07db71cb04210ecd6827204c2c146fce07ce22225bf5e5caf4c36b77bc6306d338ac73658800e0f80661da8c89b269c11ec7a699537c3852b93c5e18bfbb56208d86813717632fc5232b8a77c8782968ef1670eb6903494e7ad703a2565cff8f68a35d2aeea9bedf679837097f42aea29c9f28f6c46a09d6bdf0a30d47d594f874dfb766aad83ebb8f959b28e841e70549681e6a03dfc2c1793b7060b4fde3ea7b173fee0b4d02e0dde2cc71b9645e5c93e8c2a5ff13d800c6015072f49a81dd7e03493e187ab1daef96f07b5668b2c70df7088adf4c8cf17ffbe5f7ebffbc9910d8a2ff463a4819671fb8909446da6ab8f4372edda93bab86714a3e09c9a9d8eee19e9c2fb142b788eff249707a532f60d8b3644878cbd1cf9e92c504e0d1c39bdd6c4dab67584c9d9c295bba1832ecfe844c41ae6d89618a405e76afb0172a86dc67f8d75bf1e749108286699283ff503ca8b95766e18c89150a13eaaa15de53731a9b79131251f8b6db51c34f3937ea6a52c37bb1068a82ce3b8988c2605223dc6fb8f1a0c7cd2eeae193996116ba90c6cd340fd5efc68ff2309a485a07f73a7dc9cd541e83955a601ace24016d2c8e89fc0e474d77f9c386d8da460060ca8d7e0c0706e747a009888c12802e79f85cfc98dc16a9a9ac4697d2615225366822b9c7d7cb44f39c26a680bc8114054ac78ff082be441d77e921b4d020626e853b0233e9f60c9bd7a3a87d1bcec9de5e46995326743da779c517809260cbdc1c471c173b002bc1be3b0780f2c0a6ce92e794e70769297fc42b8a3227ab7a9fee7a3898e2b35d1b12f9f10fd87dd332ac42b021e1589de7d3180e07c69e02319bdac207acea662459a3b95136284a682d9c85a566915ede1715643e87c4ca2261d45ddfdad45ca90cec5d5ac54be2938f29ca75b33539f371098d03a15eff91a43111fde4972fab12f21a6a090261c2f70dbb6932d09d5d0e6c5e12711b2390c5cfdbb4dab8061cef91fa80582ce4b2fd59a664d06100bdf5a0bc95c3e82516eec8046333b455652941d1b0baa3393a8fc03113dbb78e067cc7971745aa750e7061f76dfbcfc134fb6ab5937e448ebef26dfda832fdde1d51d8f41b71a640a75c619fc77b9136088700c592e6fb2392da134f96e6879d2d31ba20ff6ce28d4fef6b8a942d41b142d6d3d41ac67e85e548e2a167669bff08a184343f19a217ac118de14c51a2ab5560b30a578830e131a2648e364025a647f3e8467e66270a1e040af8c350cde99b7ba34ebfe89ff7a720e6209f7e485dbe335d4ac3fa75531d2a6b81b34d0f27213c919c137d43e2eee1d0e9db554b78ac2427fc2e54a32830267a2846e255e2ff55b537bfd5c0545b7b30129f208bce809faddd74192a9d36d6d9c96f667128ddece092502f350edfa7b585386319942bf52b827bf914bb20650d9a0e77fa4b1350ece2554b4707918d0a5e05b53947baf872439fe98ea5494c7079f4af1a457e16ea6516ab902038f4590a7bee154ad24f1ed326e51c318bc593eb27622b8b2943e83add7080f7c8076f5c1d42615f293bf898a43b28dd0b104b268b5d7327c6ac4a015ffdd37075f2aad107b09f4a152a88439cb8540d0d78be8bc9367bf75472fb69394f1ce59cf5a8e1f03c8a3dbdc705e5766b632fe621597f1352db5360a8346d1341cda7ff5fda9d731beae70a394a9952a17f757ec9b3d896b5bb7fc25fdd7932569f1b45dcbc1", 0x1000) prctl$PR_GET_SECCOMP(0x15) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="d462c7034a11447d871adb285825d6ce41cdbd64d621d65803d9572666a0cf88ffc6ef2cc642ac827920370406104a103c60205f7f0a548860f24919ec804c703db64f0622c7b7ba2e83e0ced67c8f7e89b78adec3a4cb7696bb86103dac50ce7c9801e75279bd397e9f247e626307333d790b2e5014bec53d00bb7f3a934a8b427c1088193da98df27eeea679492b68bd6050e5517b3ab240400d367f22d84dfab90f4ee152705a8eff42f2d4ca376524d5911f5f962a3b77432887b4a37c82aecbcb09df8b07ea3264c2996f5a0303a18fd473e4ddd92d5e54d686bdaeb877fe2fcc85014014c4a04242419c585d577a37088803c4bb6c00ffa08966ead9e2f2c452d5ac0e6d5ffa7d88923f6672602d74049e3b140e7504171781eddb547d82859981eb57c051abea161003970237567156e88cf76068c0f2d5be23b1d3a5338f00542ef0d889b5b3fd1d89a5f57f3d10cecd8450835c0a3a8229e2fc903491eeca88167906ce6dae7c8c51e287ea7aa25b92ea3e3c1e898108e6fb205dc207cf2db8e9867491f97b927e775887418ecce28e9278932024275a9270ada0f5721f69dbad4263a18e9ca49cc00c1cc2897cd5069c65ba56c78cd7899652f72fa2012ea1c806746f44c7bc4ba7ad676dd057c1cfa6d5574da7105be5e64442455cd3eb94e3f4baf322ec107a8493ee1f6de383426277edaef1aaadb038f7251375fcc9b98d294f3e157ea74be165161e553d3e6c6de25566abd4de75c7257c85ca9b551603d2b4599a81303c263451b99d27b57f917626e260a288df11de6ce95eab8cab2968dea23aefaa24faac1af3b4c505320ab56fcfe0110ac83186e7c9e2041418dec9cd0b76e562da4eb8cad1024e52a0aaecd109a7c4d5e32c216b86b069cf21d597c0b53ec0860ff645309a22282facc33e0fd58442957ffec4c8c5f8ded305564a32c1a304f6310f002c29adfcfe2c8078b9fa5d15ace24911db985b8a642780599e39f5ec0b39ec9e8635a8ad2f7eb686ccb16f0047f7dff239aaeae0dfdb0c4f624acc95b7d42f12ac00a5acb83c0f1da6fb3430228f9d5de1e8d87c316594d2d17cad349d827a6f5d49e8061b2850b764c7813e065bee5ee8c5ea21461df774cc88ca6e6e4ecfcb281d159f0e39f3dc0013ad7007eeebdeab50e96aadb7bfa53bc625a3e424386e35e72166349070e5d4dfa1da79100fd48f0cb8069bb1407814694d69a4492ea4e6153de6a34f2ced3ed2228e6750b5a2364d579cd03df76b3e7df4bdd5d87a2e59c2f807525b1835ff81a8147faac1c9eb6329237d5d9d9cc7c58982601e24f44306d5c6ab5755d9a63dfc262ed92d9f34bd17778514a5864726a8d9a1fec4d1fc553bb61d4f66bc7727bbfed2065a4a608e05d56619052a18c52d017ebe4f6633c876cd6f7253a070867126282782cf071f200f88667e73bf3597d9cce39bb9206b65ad82cdca4f29990984bd33d4719fff4b16a7e32fc427a98e3e89ae0856cbb81cabf0edf24ec1749826535493121084f10033f22daed022ffbeeb8c81d9fd18336dac0f2ead532c70d3531c1c5e82abe3ea20c1b9c023e95d48265a7525f2e449f672089396dfc03e2cde6b6eaa29b1b093fca622e146d95452ca8d84075cd3750d1b61b41e4d9f207c9de7b6e718b76d85b37cc4f7d8397053387a56dbbc9f292e5687130d6ca8d7934a92a40cbd260beadf8a2023e51d235f007c91f871370c69172f017790eeeb7dbdce203058acbf0bd7f2e62772b6e8410dc84c8be483b73482295815009d08c2817c83182b2ca649d2c6bc8662148b67573727aef8b51b1e3b08df376d1c4b44bb16f476527bf6cad5032769881e8514beaad15aa747ad7b955e6afb7696a9d63668a04200b699fc87fc3d55988d094ffa83664012b631aa3d4310d4a90452224d88ea63c2d69465d241e2002a00610e55ce8c79a86bb1ff1370791e87a52864a414b85deadc0590146a7d601ea92eac7bae3797c83f50bfccf08322f5f4495c41b66b2f58453e22c4da06efe4734204a1d556ecce391ea115236198d67914e963474ee6e775a6c5df96002876ba117bdc79368b21fb0caf390b775ff607ab8ab0b51fc845c9d3dca70f9a40f584acc05637fd7af250b41167f028e6a81bca68ebce9237ef0ea6349220c61fdb891f69e0a571c71f01f252a128a063c45f3ab94085d75c6c102ca033e18e265e16f6ed4380e7f0cc8d3213193cbf9f91431c581a18f532e9ac1d14949b8983c1a398279586cfd40a7783096edb9daedb0ab432777d526e5f32c5b911bcb6cf0a41dd1f05e8420ace288417339c910b9934841f412a3f2b79f38159e24235a0c716e4b112ad6a84160788f67e07b83fd4b6cf82000fc0471cba3f84b1fa9e5445f4b234e8c28f69488bb3eb31f388591c55469621bd33d897b1233f63cfe3858234c23b44d96c40ca316b19cd732ddfe8b5e6f0e74b24603cd28e09565cedbe384a5a761834bc7c9cbad6ee3d5c2de8e0150149a70c1e15325fd6688e2be80020196e03e242aa4fd7183cfcbca52d32c8b21d6afb85b12fed2aebd1dcc24c8581e7be3a36d27d4993797a44d034581f154994b3bb64b03f9d8b980a06006332557985292167a3dab5a0e0a03eecb08920c96519a4189efb00b0c156d02b61ffc267720c6a9f2b4b247b5000c1f0f424ec55869935fa5f9486c4f2591a5a0519291f4843c91385e672266e17b74d3eab3770ec1a1ab2ef6b3ab00310f3bc5c51cdde06ca056750d3fe4d647cc7c1ce4759971700bdd326523fdcf1852c14f3b25a7d649b64ad36db4349b036afdded6b2baa98664ffd37571cd0c27f834bd44b891661629e1ee2ed9f8d915bf9d97ee2b382a79b2c836414c2dadc9bc9444b125c2319a21efef9ed4e5001ec8cefc3be7a3503d24a302891c47ddd1c93bccda4ecda2efae33210d32af9d925dd5421438d2c726ff0559bc212675521536b754da3c10aeaebb8dea290529d00fa2fe70c4e20e270f8b39e92e85cd472c1040c8c13403346bf15dfbefcf202627f708f255efc20b39242fb985c501c84e25017523be342c91a1ceb2c22b8d80c96daf9965d4678635cbf466e92903a02b240d1ff4fd09881a0e987f9e2beba72eb906a385c81117d4758d6af05c40676397e91d88936b71de9ffddf47ac3f32421bd1f8de7df9ca6c6a4d8afcec5a29379e57eb5810f5cab13ba814d5ea5c641873c8aa902599962725f66fea7df114355982ec3d765b7905ebcedada075c50e8e529d6868a2b93b6052d6919e728f64bb6f7545f23d7047abb770f3c32f97ab90c19cb559d3ca164508924da5b9032f81ca125a8ee7a28aa3add1377de956937e81545563a40bb2f70acd100267ba2b2be2300725bc23c4b3a20275ab25599018ee36d43e30ab2fcb7144cce8e8c4df24cbf6100d1d3756860f8b8f11d695edb83a6f2d9ccf97fe2eca5c88b7bac2de0dfa0c4f10e27099ca0099fb0e733079ef63c9f2c9b5ea3c993fe487aaa3148a9d4d902c9fce8e7b1c73a4fa2b56c4c7662da37e2e0fd0ec17489364b96d1d0e7f27d749ad302266b94b8b4bd63ddd59e1b891b6256d29765e0325bcfe62b5b9fde38e578809249fc9c232654b0c5cd90423df875bef667463840e2c8992faf2228204f7e6cc3e1ee8962d1ada4fa93f41a8daa0f08ba3c044e20f8dc386af1bf6640c26ccbb36693428f532db3714fc0900adc5dc3583cf0e08c1931259841fd8c993b0787d472ab0f1f71c610353461beea1aa3c288e6ef4dc34c6f38941ed4de59323af6d2a8f61dc456fc6c20da133460e833c808c27ab21d29ef667f8e8582e8813eea7ba83b60d6deddb55bbbd0df4065b70f253684c69938158e2e6f17dfbf0dd33fdfbaa5279fde17aac0593fb2d72ee29bf8120bd180c014b47daa6187e80de6271d9ea090275b51c917ab3e879be348f25947e2500ba1edc1140909ab2b7e086beefc95fe5fc087bb8d4a04a671bead999866cf7a07237295282955896fc69be120c4f73407989f07db71cb04210ecd6827204c2c146fce07ce22225bf5e5caf4c36b77bc6306d338ac73658800e0f80661da8c89b269c11ec7a699537c3852b93c5e18bfbb56208d86813717632fc5232b8a77c8782968ef1670eb6903494e7ad703a2565cff8f68a35d2aeea9bedf679837097f42aea29c9f28f6c46a09d6bdf0a30d47d594f874dfb766aad83ebb8f959b28e841e70549681e6a03dfc2c1793b7060b4fde3ea7b173fee0b4d02e0dde2cc71b9645e5c93e8c2a5ff13d800c6015072f49a81dd7e03493e187ab1daef96f07b5668b2c70df7088adf4c8cf17ffbe5f7ebffbc9910d8a2ff463a4819671fb8909446da6ab8f4372edda93bab86714a3e09c9a9d8eee19e9c2fb142b788eff249707a532f60d8b3644878cbd1cf9e92c504e0d1c39bdd6c4dab67584c9d9c295bba1832ecfe844c41ae6d89618a405e76afb0172a86dc67f8d75bf1e749108286699283ff503ca8b95766e18c89150a13eaaa15de53731a9b79131251f8b6db51c34f3937ea6a52c37bb1068a82ce3b8988c2605223dc6fb8f1a0c7cd2eeae193996116ba90c6cd340fd5efc68ff2309a485a07f73a7dc9cd541e83955a601ace24016d2c8e89fc0e474d77f9c386d8da460060ca8d7e0c0706e747a009888c12802e79f85cfc98dc16a9a9ac4697d2615225366822b9c7d7cb44f39c26a680bc8114054ac78ff082be441d77e921b4d020626e853b0233e9f60c9bd7a3a87d1bcec9de5e46995326743da779c517809260cbdc1c471c173b002bc1be3b0780f2c0a6ce92e794e70769297fc42b8a3227ab7a9fee7a3898e2b35d1b12f9f10fd87dd332ac42b021e1589de7d3180e07c69e02319bdac207acea662459a3b95136284a682d9c85a566915ede1715643e87c4ca2261d45ddfdad45ca90cec5d5ac54be2938f29ca75b33539f371098d03a15eff91a43111fde4972fab12f21a6a090261c2f70dbb6932d09d5d0e6c5e12711b2390c5cfdbb4dab8061cef91fa80582ce4b2fd59a664d06100bdf5a0bc95c3e82516eec8046333b455652941d1b0baa3393a8fc03113dbb78e067cc7971745aa750e7061f76dfbcfc134fb6ab5937e448ebef26dfda832fdde1d51d8f41b71a640a75c619fc77b9136088700c592e6fb2392da134f96e6879d2d31ba20ff6ce28d4fef6b8a942d41b142d6d3d41ac67e85e548e2a167669bff08a184343f19a217ac118de14c51a2ab5560b30a578830e131a2648e364025a647f3e8467e66270a1e040af8c350cde99b7ba34ebfe89ff7a720e6209f7e485dbe335d4ac3fa75531d2a6b81b34d0f27213c919c137d43e2eee1d0e9db554b78ac2427fc2e54a32830267a2846e255e2ff55b537bfd5c0545b7b30129f208bce809faddd74192a9d36d6d9c96f667128ddece092502f350edfa7b585386319942bf52b827bf914bb20650d9a0e77fa4b1350ece2554b4707918d0a5e05b53947baf872439fe98ea5494c7079f4af1a457e16ea6516ab902038f4590a7bee154ad24f1ed326e51c318bc593eb27622b8b2943e83add7080f7c8076f5c1d42615f293bf898a43b28dd0b104b268b5d7327c6ac4a015ffdd37075f2aad107b09f4a152a88439cb8540d0d78be8bc9367bf75472fb69394f1ce59cf5a8e1f03c8a3dbdc705e5766b632fe621597f1352db5360a8346d1341cda7ff5fda9d731beae70a394a9952a17f757ec9b3d896b5bb7fc25fdd7932569f1b45dcbc1", 0x1000) (async) prctl$PR_GET_SECCOMP(0x15) (async) 01:59:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0xc804) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x80000001, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb8e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c1, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe247}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x91}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1384.673846] FAULT_INJECTION: forcing a failure. [ 1384.673846] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.710582] CPU: 1 PID: 24163 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 01:59:03 executing program 4: pkey_alloc(0x0, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) pkey_alloc(0x0, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 01:59:03 executing program 4: pkey_alloc(0x0, 0x2) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 64) pkey_alloc(0x0, 0x1) (async, rerun: 64) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) [ 1384.718493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1384.727849] Call Trace: [ 1384.730453] dump_stack+0x1b2/0x281 [ 1384.734098] should_fail.cold+0x10a/0x149 [ 1384.738258] should_failslab+0xd6/0x130 [ 1384.742241] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1384.747362] __kmalloc_node_track_caller+0x38/0x70 [ 1384.752320] __alloc_skb+0x96/0x510 [ 1384.756063] kobject_uevent_env+0x882/0xf30 [ 1384.760408] lo_ioctl+0x11a6/0x1cd0 [ 1384.764043] ? loop_set_status64+0xe0/0xe0 [ 1384.768282] blkdev_ioctl+0x540/0x1830 [ 1384.772175] ? blkpg_ioctl+0x8d0/0x8d0 [ 1384.776063] ? trace_hardirqs_on+0x10/0x10 [ 1384.780305] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1384.785521] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1384.790661] block_ioctl+0xd9/0x120 [ 1384.794289] ? blkdev_fallocate+0x3a0/0x3a0 [ 1384.798601] do_vfs_ioctl+0x75a/0xff0 [ 1384.802393] ? lock_acquire+0x170/0x3f0 [ 1384.806451] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.810856] ? __fget+0x265/0x3e0 [ 1384.814298] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.818262] ? security_file_ioctl+0x83/0xb0 [ 1384.822668] SyS_ioctl+0x7f/0xb0 [ 1384.826034] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.830079] do_syscall_64+0x1d5/0x640 [ 1384.833956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.839147] RIP: 0033:0x7faed27e5fb7 [ 1384.842858] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.850560] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1384.857826] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1384.865870] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1384.873139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1384.880415] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1384.897406] FAULT_INJECTION: forcing a failure. [ 1384.897406] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.900773] hfs: can't find a HFS filesystem on dev loop2 [ 1384.915180] CPU: 1 PID: 24164 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1384.923073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1384.932422] Call Trace: [ 1384.935001] dump_stack+0x1b2/0x281 [ 1384.938903] should_fail.cold+0x10a/0x149 [ 1384.943046] should_failslab+0xd6/0x130 [ 1384.947014] kmem_cache_alloc_node+0x263/0x410 [ 1384.951585] __alloc_skb+0x5c/0x510 [ 1384.955200] kobject_uevent_env+0x882/0xf30 [ 1384.959521] lo_ioctl+0x11a6/0x1cd0 [ 1384.963152] ? loop_set_status64+0xe0/0xe0 [ 1384.967383] blkdev_ioctl+0x540/0x1830 [ 1384.971251] ? blkpg_ioctl+0x8d0/0x8d0 [ 1384.975156] ? trace_hardirqs_on+0x10/0x10 [ 1384.979375] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1384.984465] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1384.989469] block_ioctl+0xd9/0x120 [ 1384.993083] ? blkdev_fallocate+0x3a0/0x3a0 [ 1384.997403] do_vfs_ioctl+0x75a/0xff0 [ 1385.001195] ? lock_acquire+0x170/0x3f0 [ 1385.005155] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.009548] ? __fget+0x265/0x3e0 [ 1385.012993] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.016966] ? security_file_ioctl+0x83/0xb0 [ 1385.021373] SyS_ioctl+0x7f/0xb0 [ 1385.024730] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.028696] do_syscall_64+0x1d5/0x640 [ 1385.032664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.037956] RIP: 0033:0x7fd7232e3fb7 [ 1385.041716] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.049437] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1385.056700] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1385.063976] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1385.071262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1385.078525] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1385.090775] hfs: can't find a HFS filesystem on dev loop3 [ 1385.096280] hfs: can't find a HFS filesystem on dev loop5 01:59:04 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 25) 01:59:04 executing program 4: pkey_alloc(0x0, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) pkey_alloc(0x0, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) pkey_alloc(0x0, 0x2) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) pkey_alloc(0x0, 0x1) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) 01:59:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0xc804) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0xc804) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) 01:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x80000001, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb8e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c1, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe247}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x91}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 31) 01:59:04 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) [ 1385.261811] FAULT_INJECTION: forcing a failure. [ 1385.261811] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.276487] CPU: 1 PID: 24210 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1385.284389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1385.293743] Call Trace: [ 1385.296401] dump_stack+0x1b2/0x281 [ 1385.300009] should_fail.cold+0x10a/0x149 [ 1385.304159] should_failslab+0xd6/0x130 [ 1385.308135] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1385.313226] __kmalloc_node_track_caller+0x38/0x70 [ 1385.318144] __alloc_skb+0x96/0x510 [ 1385.321757] kobject_uevent_env+0x882/0xf30 [ 1385.326154] lo_ioctl+0x11a6/0x1cd0 [ 1385.329762] ? loop_set_status64+0xe0/0xe0 [ 1385.333978] blkdev_ioctl+0x540/0x1830 [ 1385.337863] ? blkpg_ioctl+0x8d0/0x8d0 [ 1385.341738] ? trace_hardirqs_on+0x10/0x10 [ 1385.345958] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1385.351047] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1385.356056] block_ioctl+0xd9/0x120 [ 1385.359670] ? blkdev_fallocate+0x3a0/0x3a0 [ 1385.364065] do_vfs_ioctl+0x75a/0xff0 [ 1385.367857] ? lock_acquire+0x170/0x3f0 [ 1385.371834] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.376230] ? __fget+0x265/0x3e0 [ 1385.379671] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.383637] ? security_file_ioctl+0x83/0xb0 [ 1385.388049] SyS_ioctl+0x7f/0xb0 [ 1385.391395] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.395500] do_syscall_64+0x1d5/0x640 [ 1385.399419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.404592] RIP: 0033:0x7faed27e5fb7 01:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x80000001, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb8e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c1, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe247}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x91}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0xc804) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:04 executing program 4: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) pkey_alloc(0x0, 0x0) 01:59:04 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) [ 1385.408299] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.416175] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1385.423647] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1385.430905] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1385.438164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1385.445431] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:04 executing program 4: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) (async, rerun: 32) msgctl$IPC_RMID(r0, 0x0) (rerun: 32) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) (async, rerun: 64) pkey_alloc(0x0, 0x0) (rerun: 64) [ 1385.497270] FAULT_INJECTION: forcing a failure. [ 1385.497270] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.517261] hfs: can't find a HFS filesystem on dev loop2 [ 1385.537434] CPU: 0 PID: 24214 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 01:59:04 executing program 4: pkey_alloc(0x0, 0x0) (async, rerun: 32) r0 = msgget(0x0, 0x200) (rerun: 32) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) (async) pkey_alloc(0x0, 0x0) [ 1385.545341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1385.554703] Call Trace: [ 1385.557306] dump_stack+0x1b2/0x281 [ 1385.560938] should_fail.cold+0x10a/0x149 [ 1385.565102] should_failslab+0xd6/0x130 [ 1385.569083] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1385.574195] __kmalloc_node_track_caller+0x38/0x70 [ 1385.579136] __alloc_skb+0x96/0x510 [ 1385.582774] kobject_uevent_env+0x882/0xf30 [ 1385.587104] lo_ioctl+0x11a6/0x1cd0 [ 1385.590744] ? loop_set_status64+0xe0/0xe0 [ 1385.594983] blkdev_ioctl+0x540/0x1830 [ 1385.598876] ? blkpg_ioctl+0x8d0/0x8d0 [ 1385.602751] ? trace_hardirqs_on+0x10/0x10 [ 1385.606975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1385.612065] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1385.617066] block_ioctl+0xd9/0x120 [ 1385.620680] ? blkdev_fallocate+0x3a0/0x3a0 [ 1385.625041] do_vfs_ioctl+0x75a/0xff0 [ 1385.628834] ? lock_acquire+0x170/0x3f0 [ 1385.632796] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.637273] ? __fget+0x265/0x3e0 [ 1385.640737] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.644795] ? security_file_ioctl+0x83/0xb0 [ 1385.649274] SyS_ioctl+0x7f/0xb0 [ 1385.652792] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.656748] do_syscall_64+0x1d5/0x640 [ 1385.660632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.665810] RIP: 0033:0x7fd7232e3fb7 [ 1385.669524] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.677224] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1385.684481] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1385.691740] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1385.699005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1385.706265] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1385.717859] hfs: can't find a HFS filesystem on dev loop3 01:59:04 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 26) 01:59:04 executing program 4: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57c5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44040}, 0x800) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 01:59:04 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:04 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcfdc}}, 0x1a004) 01:59:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 32) 01:59:04 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:04 executing program 4: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57c5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44040}, 0x800) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57c5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44040}, 0x800) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) 01:59:04 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) signalfd(r0, &(0x7f0000000100)={[0x81]}, 0x8) [ 1385.873418] FAULT_INJECTION: forcing a failure. [ 1385.873418] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.895453] CPU: 1 PID: 24258 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1385.903490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1385.912959] Call Trace: [ 1385.915555] dump_stack+0x1b2/0x281 [ 1385.919191] should_fail.cold+0x10a/0x149 01:59:04 executing program 4: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57c5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44040}, 0x800) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) [ 1385.923358] should_failslab+0xd6/0x130 [ 1385.927342] kmem_cache_alloc_node+0x263/0x410 [ 1385.931935] __alloc_skb+0x5c/0x510 [ 1385.935578] kobject_uevent_env+0x882/0xf30 [ 1385.939912] lo_ioctl+0x11a6/0x1cd0 [ 1385.943542] ? loop_set_status64+0xe0/0xe0 [ 1385.947788] blkdev_ioctl+0x540/0x1830 [ 1385.951677] ? blkpg_ioctl+0x8d0/0x8d0 [ 1385.955560] ? trace_hardirqs_on+0x10/0x10 [ 1385.959801] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1385.964904] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1385.969928] block_ioctl+0xd9/0x120 01:59:04 executing program 4: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7c2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf39}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3ed}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8018085}, 0x40040) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000002, r0) [ 1385.973556] ? blkdev_fallocate+0x3a0/0x3a0 [ 1385.977876] do_vfs_ioctl+0x75a/0xff0 [ 1385.981682] ? lock_acquire+0x170/0x3f0 [ 1385.985664] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.990074] ? __fget+0x265/0x3e0 [ 1385.993530] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.997504] ? security_file_ioctl+0x83/0xb0 [ 1386.001910] SyS_ioctl+0x7f/0xb0 [ 1386.005272] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.009250] do_syscall_64+0x1d5/0x640 [ 1386.013141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.018333] RIP: 0033:0x7fd7232e3fb7 [ 1386.022036] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.029740] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1386.037005] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1386.044273] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1386.051582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1386.058844] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1386.083840] FAULT_INJECTION: forcing a failure. [ 1386.083840] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.088489] hfs: can't find a HFS filesystem on dev loop3 [ 1386.095346] CPU: 1 PID: 24262 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1386.108744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1386.118102] Call Trace: [ 1386.120736] dump_stack+0x1b2/0x281 [ 1386.124361] should_fail.cold+0x10a/0x149 [ 1386.128503] should_failslab+0xd6/0x130 [ 1386.132469] kmem_cache_alloc_node+0x263/0x410 [ 1386.137058] __alloc_skb+0x5c/0x510 [ 1386.140669] kobject_uevent_env+0x882/0xf30 [ 1386.144993] lo_ioctl+0x11a6/0x1cd0 [ 1386.148612] ? loop_set_status64+0xe0/0xe0 [ 1386.152848] blkdev_ioctl+0x540/0x1830 [ 1386.156734] ? blkpg_ioctl+0x8d0/0x8d0 [ 1386.160613] ? trace_hardirqs_on+0x10/0x10 [ 1386.164845] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1386.169939] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1386.174941] block_ioctl+0xd9/0x120 [ 1386.178566] ? blkdev_fallocate+0x3a0/0x3a0 [ 1386.182881] do_vfs_ioctl+0x75a/0xff0 [ 1386.186762] ? lock_acquire+0x170/0x3f0 [ 1386.190718] ? ioctl_preallocate+0x1a0/0x1a0 [ 1386.195109] ? __fget+0x265/0x3e0 [ 1386.198544] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.202632] ? security_file_ioctl+0x83/0xb0 [ 1386.207034] SyS_ioctl+0x7f/0xb0 [ 1386.210397] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.214404] do_syscall_64+0x1d5/0x640 [ 1386.218280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.223457] RIP: 0033:0x7faed27e5fb7 [ 1386.227156] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.234845] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1386.242094] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1386.249363] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1386.256617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1386.263874] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:05 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 27) 01:59:05 executing program 4: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7c2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf39}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3ed}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8018085}, 0x40040) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000002, r0) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000080)={0x0}}, 0xa004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r0) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000080)={0x0}}, 0xa004) (async) 01:59:05 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:05 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) [ 1386.300781] hfs: can't find a HFS filesystem on dev loop2 [ 1386.357344] FAULT_INJECTION: forcing a failure. [ 1386.357344] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.370268] CPU: 0 PID: 24299 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1386.378159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1386.387513] Call Trace: [ 1386.390103] dump_stack+0x1b2/0x281 [ 1386.393737] should_fail.cold+0x10a/0x149 [ 1386.397915] should_failslab+0xd6/0x130 [ 1386.401900] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1386.407010] __kmalloc_node_track_caller+0x38/0x70 [ 1386.411944] __alloc_skb+0x96/0x510 [ 1386.415577] kobject_uevent_env+0x882/0xf30 [ 1386.419912] lo_ioctl+0x11a6/0x1cd0 [ 1386.423543] ? loop_set_status64+0xe0/0xe0 [ 1386.427783] blkdev_ioctl+0x540/0x1830 [ 1386.431671] ? blkpg_ioctl+0x8d0/0x8d0 [ 1386.435561] ? trace_hardirqs_on+0x10/0x10 [ 1386.439795] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1386.445052] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1386.450062] block_ioctl+0xd9/0x120 [ 1386.453677] ? blkdev_fallocate+0x3a0/0x3a0 [ 1386.458039] do_vfs_ioctl+0x75a/0xff0 [ 1386.461824] ? lock_acquire+0x170/0x3f0 [ 1386.465793] ? ioctl_preallocate+0x1a0/0x1a0 [ 1386.470210] ? __fget+0x265/0x3e0 [ 1386.473732] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.477698] ? security_file_ioctl+0x83/0xb0 [ 1386.482099] SyS_ioctl+0x7f/0xb0 [ 1386.485445] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.489404] do_syscall_64+0x1d5/0x640 [ 1386.493293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.498462] RIP: 0033:0x7fd7232e3fb7 [ 1386.502151] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.509836] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1386.517084] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1386.524349] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1386.531610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1386.538856] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @private2, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x615}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd53}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) dup(r0) signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc1bc}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xa8}}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x120, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x44014) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$bt_hci(r1, &(0x7f00000002c0)={0x1, @write_remote_amp_assoc={{0x140b, 0x75}, {0xc9, 0x4, 0xfffc, "b1e60c5edc4e9c1371fab5c2fee76d4e8d338fed91f8d872dc6d5e261f7c96595275c36168725920228e842f642fd52783a1cb9308eb8c7d6ccc186b46787379b17a243a82da86aa312ae6aaf5acd2b0284f6e264ebcf102a7cbb945560026c7b68be5811cded6b7a99c495c6c263eb5"}}}, 0x79) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x30, r2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004850}, 0xc004) 01:59:05 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 01:59:05 executing program 4: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7c2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf39}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3ed}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8018085}, 0x40040) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000002, r0) 01:59:05 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 33) 01:59:05 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 28) [ 1386.566592] hfs: can't find a HFS filesystem on dev loop3 [ 1386.592592] Bluetooth: hci0 command 0x0401 tx timeout 01:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @private2, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x615}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd53}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) (async, rerun: 64) dup(r0) (async, rerun: 64) signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc1bc}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xa8}}, 0x8000) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x120, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x44014) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$bt_hci(r1, &(0x7f00000002c0)={0x1, @write_remote_amp_assoc={{0x140b, 0x75}, {0xc9, 0x4, 0xfffc, "b1e60c5edc4e9c1371fab5c2fee76d4e8d338fed91f8d872dc6d5e261f7c96595275c36168725920228e842f642fd52783a1cb9308eb8c7d6ccc186b46787379b17a243a82da86aa312ae6aaf5acd2b0284f6e264ebcf102a7cbb945560026c7b68be5811cded6b7a99c495c6c263eb5"}}}, 0x79) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x30, r2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004850}, 0xc004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x120, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x44014) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) write$bt_hci(r1, &(0x7f00000002c0)={0x1, @write_remote_amp_assoc={{0x140b, 0x75}, {0xc9, 0x4, 0xfffc, "b1e60c5edc4e9c1371fab5c2fee76d4e8d338fed91f8d872dc6d5e261f7c96595275c36168725920228e842f642fd52783a1cb9308eb8c7d6ccc186b46787379b17a243a82da86aa312ae6aaf5acd2b0284f6e264ebcf102a7cbb945560026c7b68be5811cded6b7a99c495c6c263eb5"}}}, 0x79) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x30, r2, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000004) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004850}, 0xc004) (async) [ 1386.671091] FAULT_INJECTION: forcing a failure. [ 1386.671091] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.713965] FAULT_INJECTION: forcing a failure. [ 1386.713965] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.721011] CPU: 1 PID: 24323 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1386.733111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1386.742465] Call Trace: [ 1386.745142] dump_stack+0x1b2/0x281 [ 1386.748776] should_fail.cold+0x10a/0x149 [ 1386.752928] should_failslab+0xd6/0x130 [ 1386.756917] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1386.761595] ? kobj_ns_drop+0x80/0x80 [ 1386.765396] call_usermodehelper_setup+0x73/0x2e0 [ 1386.770240] kobject_uevent_env+0xc21/0xf30 [ 1386.774570] lo_ioctl+0x11a6/0x1cd0 [ 1386.778206] ? loop_set_status64+0xe0/0xe0 [ 1386.782436] blkdev_ioctl+0x540/0x1830 [ 1386.786322] ? blkpg_ioctl+0x8d0/0x8d0 [ 1386.790195] ? trace_hardirqs_on+0x10/0x10 [ 1386.794422] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1386.799514] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1386.804557] block_ioctl+0xd9/0x120 [ 1386.808175] ? blkdev_fallocate+0x3a0/0x3a0 [ 1386.812482] do_vfs_ioctl+0x75a/0xff0 [ 1386.816269] ? lock_acquire+0x170/0x3f0 [ 1386.820228] ? ioctl_preallocate+0x1a0/0x1a0 [ 1386.824657] ? __fget+0x265/0x3e0 [ 1386.828098] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.832061] ? security_file_ioctl+0x83/0xb0 [ 1386.836452] SyS_ioctl+0x7f/0xb0 [ 1386.839802] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.843774] do_syscall_64+0x1d5/0x640 [ 1386.847653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.852918] RIP: 0033:0x7faed27e5fb7 [ 1386.856619] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.864314] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1386.871567] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1386.878843] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1386.886214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1386.893483] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1386.900749] CPU: 0 PID: 24335 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1386.908634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1386.917985] Call Trace: [ 1386.920575] dump_stack+0x1b2/0x281 [ 1386.924209] should_fail.cold+0x10a/0x149 [ 1386.928400] should_failslab+0xd6/0x130 [ 1386.932464] kmem_cache_alloc_node+0x263/0x410 [ 1386.934880] hfs: can't find a HFS filesystem on dev loop2 [ 1386.937083] __alloc_skb+0x5c/0x510 [ 1386.937098] kobject_uevent_env+0x882/0xf30 [ 1386.937116] lo_ioctl+0x11a6/0x1cd0 [ 1386.954186] ? loop_set_status64+0xe0/0xe0 [ 1386.958429] blkdev_ioctl+0x540/0x1830 [ 1386.962322] ? blkpg_ioctl+0x8d0/0x8d0 [ 1386.966209] ? trace_hardirqs_on+0x10/0x10 [ 1386.970455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1386.975561] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1386.980589] block_ioctl+0xd9/0x120 [ 1386.984251] ? blkdev_fallocate+0x3a0/0x3a0 [ 1386.988576] do_vfs_ioctl+0x75a/0xff0 [ 1386.992375] ? lock_acquire+0x170/0x3f0 [ 1386.996357] ? ioctl_preallocate+0x1a0/0x1a0 [ 1387.000770] ? __fget+0x265/0x3e0 [ 1387.004225] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.008204] ? security_file_ioctl+0x83/0xb0 [ 1387.012612] SyS_ioctl+0x7f/0xb0 [ 1387.015981] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.019955] do_syscall_64+0x1d5/0x640 [ 1387.023854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1387.029048] RIP: 0033:0x7fd7232e3fb7 [ 1387.032750] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.040457] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1387.047733] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1387.055007] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 01:59:05 executing program 4: r0 = pkey_alloc(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000680180004801300010062726f6164636173742d6c696e6b00"/42], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xfe0824a7d52946b1) 01:59:05 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x120, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x44014) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) write$bt_hci(r1, &(0x7f00000002c0)={0x1, @write_remote_amp_assoc={{0x140b, 0x75}, {0xc9, 0x4, 0xfffc, "b1e60c5edc4e9c1371fab5c2fee76d4e8d338fed91f8d872dc6d5e261f7c96595275c36168725920228e842f642fd52783a1cb9308eb8c7d6ccc186b46787379b17a243a82da86aa312ae6aaf5acd2b0284f6e264ebcf102a7cbb945560026c7b68be5811cded6b7a99c495c6c263eb5"}}}, 0x79) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x30, r2, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004850}, 0xc004) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @remote, @null, @netrom, @netrom, @netrom, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x180000) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @remote, @null, @netrom, @netrom, @netrom, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x180000) 01:59:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @remote, @null, @netrom, @netrom, @netrom, @netrom, @null]}, &(0x7f0000000040)=0x48, 0x180000) 01:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @private2, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x615}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd53}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) (rerun: 32) dup(r0) signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc1bc}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xa8}}, 0x8000) (async, rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (rerun: 64) 01:59:05 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040), 0x8, 0x3) [ 1387.062371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.069645] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:06 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 34) [ 1387.161442] hfs: can't find a HFS filesystem on dev loop3 [ 1387.189597] FAULT_INJECTION: forcing a failure. [ 1387.189597] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.200993] CPU: 0 PID: 24385 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1387.208882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1387.218242] Call Trace: [ 1387.220838] dump_stack+0x1b2/0x281 [ 1387.224474] should_fail.cold+0x10a/0x149 [ 1387.228628] should_failslab+0xd6/0x130 [ 1387.232613] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1387.237295] ? kobj_ns_drop+0x80/0x80 [ 1387.241099] call_usermodehelper_setup+0x73/0x2e0 [ 1387.245951] kobject_uevent_env+0xc21/0xf30 [ 1387.250299] lo_ioctl+0x11a6/0x1cd0 [ 1387.253936] ? loop_set_status64+0xe0/0xe0 [ 1387.258180] blkdev_ioctl+0x540/0x1830 [ 1387.262070] ? blkpg_ioctl+0x8d0/0x8d0 [ 1387.265960] ? trace_hardirqs_on+0x10/0x10 [ 1387.270208] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1387.275313] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1387.280337] block_ioctl+0xd9/0x120 [ 1387.283964] ? blkdev_fallocate+0x3a0/0x3a0 [ 1387.288288] do_vfs_ioctl+0x75a/0xff0 [ 1387.292091] ? lock_acquire+0x170/0x3f0 [ 1387.296065] ? ioctl_preallocate+0x1a0/0x1a0 [ 1387.300473] ? __fget+0x265/0x3e0 [ 1387.303926] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.307899] ? security_file_ioctl+0x83/0xb0 [ 1387.312308] SyS_ioctl+0x7f/0xb0 [ 1387.315759] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.319735] do_syscall_64+0x1d5/0x640 [ 1387.323628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1387.328813] RIP: 0033:0x7faed27e5fb7 [ 1387.332526] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.340231] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1387.347506] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1387.354868] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 01:59:06 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 29) 01:59:06 executing program 4: r0 = pkey_alloc(0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000680180004801300010062726f6164636173742d6c696e6b00"/42], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xfe0824a7d52946b1) 01:59:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 01:59:06 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x8, 0x3) 01:59:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = dup(r0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) accept4$netrom(r1, 0x0, 0x0, 0x101800) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1387.362127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.369572] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1387.382298] hfs: can't find a HFS filesystem on dev loop2 01:59:06 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 35) 01:59:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r3 = dup(r0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) accept4$netrom(r1, 0x0, 0x0, 0x101800) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:59:06 executing program 4: r0 = pkey_alloc(0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000680180004801300010062726f6164636173742d6c696e6b00"/42], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xfe0824a7d52946b1) 01:59:06 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x8, 0x3) 01:59:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) [ 1387.528733] FAULT_INJECTION: forcing a failure. [ 1387.528733] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.567486] CPU: 1 PID: 24412 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 01:59:06 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 01:59:06 executing program 4: pkey_alloc(0x0, 0x2) (async, rerun: 64) pkey_alloc(0x0, 0x0) (async, rerun: 64) pkey_alloc(0x0, 0x0) [ 1387.575404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1387.584757] Call Trace: [ 1387.587349] dump_stack+0x1b2/0x281 [ 1387.591070] should_fail.cold+0x10a/0x149 [ 1387.595272] should_failslab+0xd6/0x130 [ 1387.599247] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1387.604357] __kmalloc_node_track_caller+0x38/0x70 [ 1387.609292] __alloc_skb+0x96/0x510 [ 1387.612924] kobject_uevent_env+0x882/0xf30 [ 1387.617254] lo_ioctl+0x11a6/0x1cd0 [ 1387.620888] ? loop_set_status64+0xe0/0xe0 [ 1387.625123] blkdev_ioctl+0x540/0x1830 [ 1387.629005] ? blkpg_ioctl+0x8d0/0x8d0 [ 1387.632883] ? trace_hardirqs_on+0x10/0x10 [ 1387.637136] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1387.642242] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1387.647250] block_ioctl+0xd9/0x120 [ 1387.650868] ? blkdev_fallocate+0x3a0/0x3a0 [ 1387.655183] do_vfs_ioctl+0x75a/0xff0 [ 1387.658972] ? lock_acquire+0x170/0x3f0 [ 1387.662926] ? ioctl_preallocate+0x1a0/0x1a0 [ 1387.667319] ? __fget+0x265/0x3e0 [ 1387.670752] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.674710] ? security_file_ioctl+0x83/0xb0 [ 1387.679107] SyS_ioctl+0x7f/0xb0 [ 1387.682463] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.686419] do_syscall_64+0x1d5/0x640 [ 1387.690290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1387.695463] RIP: 0033:0x7fd7232e3fb7 [ 1387.699166] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.706856] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1387.714104] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1387.721365] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1387.728727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.736258] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1387.768529] FAULT_INJECTION: forcing a failure. [ 1387.768529] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.799325] hfs: can't find a HFS filesystem on dev loop3 [ 1387.813955] CPU: 0 PID: 24418 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1387.821860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1387.831730] Call Trace: [ 1387.834317] dump_stack+0x1b2/0x281 [ 1387.837958] should_fail.cold+0x10a/0x149 [ 1387.842114] ? vsnprintf+0x260/0x1340 [ 1387.845914] should_failslab+0xd6/0x130 [ 1387.849892] kmem_cache_alloc+0x40/0x3c0 [ 1387.853958] __debug_object_init+0x578/0x7a0 [ 1387.858375] ? debug_object_destroy+0x240/0x240 [ 1387.863060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1387.868095] __init_work+0x3f/0x50 [ 1387.871634] ? kobj_ns_drop+0x80/0x80 [ 1387.875440] call_usermodehelper_setup+0x93/0x2e0 [ 1387.880374] kobject_uevent_env+0xc21/0xf30 [ 1387.884738] lo_ioctl+0x11a6/0x1cd0 [ 1387.889851] ? loop_set_status64+0xe0/0xe0 [ 1387.894093] blkdev_ioctl+0x540/0x1830 [ 1387.898070] ? blkpg_ioctl+0x8d0/0x8d0 [ 1387.901961] ? trace_hardirqs_on+0x10/0x10 [ 1387.906201] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1387.911410] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1387.916434] block_ioctl+0xd9/0x120 [ 1387.920054] ? blkdev_fallocate+0x3a0/0x3a0 [ 1387.924364] do_vfs_ioctl+0x75a/0xff0 [ 1387.928156] ? lock_acquire+0x170/0x3f0 [ 1387.932118] ? ioctl_preallocate+0x1a0/0x1a0 [ 1387.936520] ? __fget+0x265/0x3e0 [ 1387.939963] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.943929] ? security_file_ioctl+0x83/0xb0 [ 1387.948321] SyS_ioctl+0x7f/0xb0 [ 1387.951671] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.955630] do_syscall_64+0x1d5/0x640 [ 1387.959507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1387.964679] RIP: 0033:0x7faed27e5fb7 [ 1387.968369] RSP: 002b:00007faed115af28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.976058] RAX: ffffffffffffffda RBX: 00007faed282fa20 RCX: 00007faed27e5fb7 [ 1387.983307] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1387.990559] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1387.997825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1388.005078] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:06 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 30) 01:59:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r3 = dup(r0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8004) (async) accept4$netrom(r1, 0x0, 0x0, 0x101800) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:59:06 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) 01:59:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 01:59:06 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x8, 0x3) [ 1388.088869] hfs: can't find a HFS filesystem on dev loop2 01:59:07 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 36) 01:59:07 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x5) 01:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) [ 1388.170817] FAULT_INJECTION: forcing a failure. [ 1388.170817] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.192078] CPU: 1 PID: 24454 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1388.199991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1388.210056] Call Trace: [ 1388.212651] dump_stack+0x1b2/0x281 [ 1388.216387] should_fail.cold+0x10a/0x149 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x9, 0x5], 0x8}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) [ 1388.220543] should_failslab+0xd6/0x130 [ 1388.224523] kmem_cache_alloc_node+0x263/0x410 [ 1388.229112] __alloc_skb+0x5c/0x510 [ 1388.232836] kobject_uevent_env+0x882/0xf30 [ 1388.237290] lo_ioctl+0x11a6/0x1cd0 [ 1388.240923] ? loop_set_status64+0xe0/0xe0 [ 1388.245165] blkdev_ioctl+0x540/0x1830 [ 1388.249054] ? blkpg_ioctl+0x8d0/0x8d0 [ 1388.252944] ? trace_hardirqs_on+0x10/0x10 [ 1388.257186] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1388.262289] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1388.267410] block_ioctl+0xd9/0x120 01:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x9, 0x5], 0x8}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x9, 0x5], 0x8}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) (async) [ 1388.271062] ? blkdev_fallocate+0x3a0/0x3a0 [ 1388.275381] do_vfs_ioctl+0x75a/0xff0 [ 1388.279181] ? lock_acquire+0x170/0x3f0 [ 1388.283155] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.287563] ? __fget+0x265/0x3e0 [ 1388.291017] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.294991] ? security_file_ioctl+0x83/0xb0 [ 1388.299398] SyS_ioctl+0x7f/0xb0 [ 1388.302764] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.306740] do_syscall_64+0x1d5/0x640 [ 1388.310715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.315898] RIP: 0033:0x7fd7232e3fb7 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x9, 0x5], 0x8}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) [ 1388.319601] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.327396] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1388.334676] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1388.341944] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1388.349215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1388.356481] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1388.382236] FAULT_INJECTION: forcing a failure. [ 1388.382236] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.427361] CPU: 0 PID: 24465 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1388.435270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1388.444718] Call Trace: [ 1388.447310] dump_stack+0x1b2/0x281 [ 1388.450948] should_fail.cold+0x10a/0x149 [ 1388.455101] should_failslab+0xd6/0x130 [ 1388.459079] kmem_cache_alloc+0x28e/0x3c0 [ 1388.463228] __d_alloc+0x2a/0xa20 [ 1388.466683] ? d_lookup+0x172/0x220 [ 1388.470318] d_alloc+0x46/0x240 [ 1388.473599] __lookup_hash+0x101/0x270 [ 1388.477489] filename_create+0x156/0x3f0 [ 1388.481555] ? kern_path_mountpoint+0x40/0x40 [ 1388.486056] SyS_mkdirat+0x95/0x270 [ 1388.489682] ? SyS_mknod+0x30/0x30 [ 1388.493219] ? fput_many+0xe/0x140 [ 1388.496757] ? do_syscall_64+0x4c/0x640 [ 1388.500724] ? SyS_mknod+0x30/0x30 [ 1388.504264] do_syscall_64+0x1d5/0x640 [ 1388.508160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.513339] RIP: 0033:0x7faed27e5307 [ 1388.517040] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 01:59:07 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 31) 01:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) 01:59:07 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x8, 0x3) 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x51}, {@none}}}, 0xa) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x1f}}}, 0x7) 01:59:07 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x5) 01:59:07 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 37) [ 1388.520763] hfs: can't find a HFS filesystem on dev loop3 [ 1388.524742] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1388.524748] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1388.524753] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1388.524758] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1388.524763] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:07 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x0, 0x3) 01:59:07 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x5) 01:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"a95dc93608dcf228a87c56e48572556ba923c66d4c6baceeb877ce77e8b8b803", r1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8001, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000004) [ 1388.672493] Bluetooth: hci0 command 0x0401 tx timeout [ 1388.680970] FAULT_INJECTION: forcing a failure. [ 1388.680970] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.697878] FAULT_INJECTION: forcing a failure. [ 1388.697878] name failslab, interval 1, probability 0, space 0, times 0 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x51}, {@none}}}, 0xa) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x1f}}}, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x51}, {@none}}}, 0xa) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) (async) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x1f}}}, 0x7) (async) [ 1388.716150] CPU: 1 PID: 24518 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1388.724054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1388.733751] Call Trace: [ 1388.736339] dump_stack+0x1b2/0x281 [ 1388.739984] should_fail.cold+0x10a/0x149 [ 1388.744143] should_failslab+0xd6/0x130 [ 1388.748120] kmem_cache_alloc+0x28e/0x3c0 [ 1388.752272] getname_flags+0xc8/0x550 [ 1388.756068] SyS_mkdirat+0x83/0x270 [ 1388.759693] ? SyS_mknod+0x30/0x30 [ 1388.763221] ? fput_many+0xe/0x140 [ 1388.766746] ? do_syscall_64+0x4c/0x640 [ 1388.770710] ? SyS_mknod+0x30/0x30 [ 1388.774242] do_syscall_64+0x1d5/0x640 [ 1388.778134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.783325] RIP: 0033:0x7faed27e5307 [ 1388.787025] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1388.794751] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1388.802016] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1388.809273] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1388.816530] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1388.823871] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1388.831503] CPU: 0 PID: 24526 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1388.839389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1388.848740] Call Trace: [ 1388.851330] dump_stack+0x1b2/0x281 [ 1388.854964] should_fail.cold+0x10a/0x149 [ 1388.859115] should_failslab+0xd6/0x130 [ 1388.863100] kmem_cache_alloc_node+0x263/0x410 [ 1388.867689] __alloc_skb+0x5c/0x510 [ 1388.871323] kobject_uevent_env+0x882/0xf30 [ 1388.875652] lo_ioctl+0x11a6/0x1cd0 [ 1388.879310] ? loop_set_status64+0xe0/0xe0 [ 1388.883553] blkdev_ioctl+0x540/0x1830 [ 1388.887624] ? blkpg_ioctl+0x8d0/0x8d0 [ 1388.891517] ? trace_hardirqs_on+0x10/0x10 [ 1388.895755] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1388.900851] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1388.905853] block_ioctl+0xd9/0x120 [ 1388.909595] ? blkdev_fallocate+0x3a0/0x3a0 [ 1388.913910] do_vfs_ioctl+0x75a/0xff0 [ 1388.917694] ? lock_acquire+0x170/0x3f0 [ 1388.921665] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.926181] ? __fget+0x265/0x3e0 [ 1388.929619] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.933582] ? security_file_ioctl+0x83/0xb0 [ 1388.938055] SyS_ioctl+0x7f/0xb0 [ 1388.941404] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.945450] do_syscall_64+0x1d5/0x640 [ 1388.949326] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.954649] RIP: 0033:0x7fd7232e3fb7 [ 1388.958338] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.966040] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 01:59:07 executing program 4: pkey_alloc(0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x101, 0x4) pkey_alloc(0x0, 0x0) 01:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"a95dc93608dcf228a87c56e48572556ba923c66d4c6baceeb877ce77e8b8b803", r1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8001, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000004) [ 1388.973302] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1388.980647] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1388.987899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1388.995262] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 01:59:07 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 32) 01:59:07 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x0, 0x0) 01:59:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_neg_reply={{0x433, 0x51}, {@none}}}, 0xa) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) (async) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x1f}}}, 0x7) 01:59:07 executing program 4: pkey_alloc(0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x101, 0x4) pkey_alloc(0x0, 0x0) 01:59:07 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 38) [ 1389.024418] hfs: can't find a HFS filesystem on dev loop3 01:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"a95dc93608dcf228a87c56e48572556ba923c66d4c6baceeb877ce77e8b8b803", r1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8001, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"a95dc93608dcf228a87c56e48572556ba923c66d4c6baceeb877ce77e8b8b803", r1}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8001, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000004) (async) 01:59:08 executing program 4: pkey_alloc(0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x101, 0x4) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x101, 0x4) (async) pkey_alloc(0x0, 0x0) (async) 01:59:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)="feb29dba92c85b348136e6e08eaadb7168d14b741069f700ef6a775339571ed817f67e32e6b1109ffecffd065edc0d1dcc578fa5663620a942e05655a062c857c53eb241f755d6") sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x9, 0x5], 0x8}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) [ 1389.147747] FAULT_INJECTION: forcing a failure. [ 1389.147747] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.174086] CPU: 1 PID: 24567 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1389.181992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1389.191444] Call Trace: [ 1389.194226] dump_stack+0x1b2/0x281 01:59:08 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) [ 1389.197858] should_fail.cold+0x10a/0x149 [ 1389.202011] should_failslab+0xd6/0x130 [ 1389.205987] kmem_cache_alloc_node+0x263/0x410 [ 1389.210670] __alloc_skb+0x5c/0x510 [ 1389.214307] kobject_uevent_env+0x882/0xf30 [ 1389.218636] lo_ioctl+0x11a6/0x1cd0 [ 1389.222264] ? loop_set_status64+0xe0/0xe0 [ 1389.226499] blkdev_ioctl+0x540/0x1830 [ 1389.230394] ? blkpg_ioctl+0x8d0/0x8d0 [ 1389.234288] ? trace_hardirqs_on+0x10/0x10 [ 1389.238528] ? _raw_spin_unlock_irqrestore+0x66/0xe0 01:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1e0, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8857, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x968c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6e0}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @private1, 0x1}}, {0x14, 0x2, @in={0x2, 0x7ff, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16b}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbadf}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc71}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc26}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006aacf982c69207981d0365271d42cea68f7d857ee2bfb5ac8c2452d030bf2234fb930cbe94171781bb609d6fcd19ed1fe22af42291c42cb820c5c53ef91349d97d7ce8dfdb4aee16685c85f7657ed2c3960856c33418655a368b91b01c77c7177533c347664e50f6c5716f1446ce7554c0e7ec140229c92538fbc9f4bba2135d1f851d61562cac22d9aae443fae0fa7f07db516b1aadacbaa600a00907fd77faba01db0130e7481b49b896cd72f849e7631700000000000000", @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf250a0000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3708abe67da7963c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x120000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x170, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa459}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "31a90cd18b27ef2dd35000d371027dca9258934b9ef003144fd9beaf1a5c63f6"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x485f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x24004004) r4 = dup(r0) r5 = dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$netrom(r4, 0x0, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000000) [ 1389.243737] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1389.248757] block_ioctl+0xd9/0x120 [ 1389.252383] ? blkdev_fallocate+0x3a0/0x3a0 [ 1389.256709] do_vfs_ioctl+0x75a/0xff0 [ 1389.260511] ? lock_acquire+0x170/0x3f0 [ 1389.264519] ? ioctl_preallocate+0x1a0/0x1a0 [ 1389.268924] ? __fget+0x265/0x3e0 [ 1389.272376] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.276383] ? security_file_ioctl+0x83/0xb0 [ 1389.280794] SyS_ioctl+0x7f/0xb0 [ 1389.284159] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.288136] do_syscall_64+0x1d5/0x640 [ 1389.292025] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:59:08 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) [ 1389.297211] RIP: 0033:0x7fd7232e3fb7 [ 1389.300912] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.308615] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1389.315887] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1389.323159] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1389.330432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1389.337701] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1389.382197] FAULT_INJECTION: forcing a failure. [ 1389.382197] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.399937] hfs: can't find a HFS filesystem on dev loop3 [ 1389.407225] CPU: 1 PID: 24570 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1389.415159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1389.424506] Call Trace: [ 1389.427187] dump_stack+0x1b2/0x281 [ 1389.430819] should_fail.cold+0x10a/0x149 [ 1389.435232] should_failslab+0xd6/0x130 [ 1389.439210] kmem_cache_alloc+0x28e/0x3c0 [ 1389.443362] ? ext4_sync_fs+0x7e0/0x7e0 [ 1389.447349] ext4_alloc_inode+0x1a/0x640 [ 1389.451417] ? ext4_sync_fs+0x7e0/0x7e0 [ 1389.455395] alloc_inode+0x5d/0x170 [ 1389.459023] new_inode+0x1d/0xf0 [ 1389.462395] __ext4_new_inode+0x360/0x4eb0 [ 1389.466630] ? kmem_cache_free+0x7c/0x2b0 [ 1389.470777] ? putname+0xcd/0x110 [ 1389.474236] ? SyS_mkdirat+0x95/0x270 [ 1389.478034] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.483415] ? ext4_free_inode+0x1460/0x1460 [ 1389.487824] ? lock_downgrade+0x740/0x740 [ 1389.491976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1389.497081] ? dquot_initialize_needed+0x240/0x240 [ 1389.502013] ext4_mkdir+0x2e4/0xbd0 [ 1389.505653] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1389.510328] ? security_inode_mkdir+0xca/0x100 [ 1389.514916] vfs_mkdir+0x463/0x6e0 [ 1389.518458] SyS_mkdirat+0x1fd/0x270 [ 1389.522172] ? SyS_mknod+0x30/0x30 [ 1389.525707] ? fput_many+0xe/0x140 [ 1389.529246] ? do_syscall_64+0x4c/0x640 [ 1389.533221] ? SyS_mknod+0x30/0x30 [ 1389.536758] do_syscall_64+0x1d5/0x640 [ 1389.540649] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.545830] RIP: 0033:0x7faed27e5307 [ 1389.549533] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1389.557247] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1389.564610] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1389.571875] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1389.579144] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1389.586420] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:08 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 33) 01:59:08 executing program 5: r0 = pkey_alloc(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000680180004801300010062726f6164636173742d6c696e6b00"/42], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xfe0824a7d52946b1) 01:59:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)="feb29dba92c85b348136e6e08eaadb7168d14b741069f700ef6a775339571ed817f67e32e6b1109ffecffd065edc0d1dcc578fa5663620a942e05655a062c857c53eb241f755d6") (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1e0, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8857, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x968c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6e0}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @private1, 0x1}}, {0x14, 0x2, @in={0x2, 0x7ff, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16b}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbadf}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc71}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc26}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006aacf982c69207981d0365271d42cea68f7d857ee2bfb5ac8c2452d030bf2234fb930cbe94171781bb609d6fcd19ed1fe22af42291c42cb820c5c53ef91349d97d7ce8dfdb4aee16685c85f7657ed2c3960856c33418655a368b91b01c77c7177533c347664e50f6c5716f1446ce7554c0e7ec140229c92538fbc9f4bba2135d1f851d61562cac22d9aae443fae0fa7f07db516b1aadacbaa600a00907fd77faba01db0130e7481b49b896cd72f849e7631700000000000000", @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf250a0000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3708abe67da7963c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x120000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x170, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa459}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "31a90cd18b27ef2dd35000d371027dca9258934b9ef003144fd9beaf1a5c63f6"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x485f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x24004004) (async) r4 = dup(r0) r5 = dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) accept4$netrom(r4, 0x0, 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000000) 01:59:08 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) 01:59:08 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 39) 01:59:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1e0, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8857, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x968c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6e0}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @private1, 0x1}}, {0x14, 0x2, @in={0x2, 0x7ff, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16b}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbadf}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc71}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc26}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006aacf982c69207981d0365271d42cea68f7d857ee2bfb5ac8c2452d030bf2234fb930cbe94171781bb609d6fcd19ed1fe22af42291c42cb820c5c53ef91349d97d7ce8dfdb4aee16685c85f7657ed2c3960856c33418655a368b91b01c77c7177533c347664e50f6c5716f1446ce7554c0e7ec140229c92538fbc9f4bba2135d1f851d61562cac22d9aae443fae0fa7f07db516b1aadacbaa600a00907fd77faba01db0130e7481b49b896cd72f849e7631700000000000000", @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf250a0000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3708abe67da7963c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x120000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x170, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa459}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "31a90cd18b27ef2dd35000d371027dca9258934b9ef003144fd9beaf1a5c63f6"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x485f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x24004004) r4 = dup(r0) r5 = dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$netrom(r4, 0x0, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000000) 01:59:08 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 01:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x9) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1e0, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8857, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x968c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6e0}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @private1, 0x1}}, {0x14, 0x2, @in={0x2, 0x7ff, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16b}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbadf}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc71}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc26}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006aacf982c69207981d0365271d42cea68f7d857ee2bfb5ac8c2452d030bf2234fb930cbe94171781bb609d6fcd19ed1fe22af42291c42cb820c5c53ef91349d97d7ce8dfdb4aee16685c85f7657ed2c3960856c33418655a368b91b01c77c7177533c347664e50f6c5716f1446ce7554c0e7ec140229c92538fbc9f4bba2135d1f851d61562cac22d9aae443fae0fa7f07db516b1aadacbaa600a00907fd77faba01db0130e7481b49b896cd72f849e7631700000000000000", @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf250a0000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3708abe67da7963c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x120000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x170, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa459}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "31a90cd18b27ef2dd35000d371027dca9258934b9ef003144fd9beaf1a5c63f6"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x485f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x24004004) (async) r4 = dup(r0) (async) r5 = dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffeffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) accept4$netrom(r4, 0x0, 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000000) 01:59:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)="feb29dba92c85b348136e6e08eaadb7168d14b741069f700ef6a775339571ed817f67e32e6b1109ffecffd065edc0d1dcc578fa5663620a942e05655a062c857c53eb241f755d6") (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) [ 1389.775726] FAULT_INJECTION: forcing a failure. [ 1389.775726] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.810667] CPU: 1 PID: 24627 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 01:59:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0xc4, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010103}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0xfffffffffffffffe, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f73}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48814}, 0x40001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044010) [ 1389.818584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1389.827942] Call Trace: [ 1389.830530] dump_stack+0x1b2/0x281 [ 1389.834185] should_fail.cold+0x10a/0x149 [ 1389.838338] should_failslab+0xd6/0x130 [ 1389.842313] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1389.847422] __kmalloc_node_track_caller+0x38/0x70 [ 1389.852355] __alloc_skb+0x96/0x510 [ 1389.855985] kobject_uevent_env+0x882/0xf30 [ 1389.860325] lo_ioctl+0x11a6/0x1cd0 [ 1389.863971] ? loop_set_status64+0xe0/0xe0 [ 1389.868211] blkdev_ioctl+0x540/0x1830 [ 1389.872102] ? blkpg_ioctl+0x8d0/0x8d0 01:59:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0xc4, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010103}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0xfffffffffffffffe, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f73}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48814}, 0x40001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0xc4, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010103}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0xfffffffffffffffe, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f73}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48814}, 0x40001) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044010) (async) [ 1389.875997] ? trace_hardirqs_on+0x10/0x10 [ 1389.880236] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1389.885344] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1389.890394] block_ioctl+0xd9/0x120 [ 1389.894023] ? blkdev_fallocate+0x3a0/0x3a0 [ 1389.898347] do_vfs_ioctl+0x75a/0xff0 [ 1389.902147] ? lock_acquire+0x170/0x3f0 [ 1389.906123] ? ioctl_preallocate+0x1a0/0x1a0 [ 1389.910532] ? __fget+0x265/0x3e0 [ 1389.913986] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.918310] ? security_file_ioctl+0x83/0xb0 [ 1389.922724] SyS_ioctl+0x7f/0xb0 [ 1389.926086] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.930067] do_syscall_64+0x1d5/0x640 [ 1389.933963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.939272] RIP: 0033:0x7fd7232e3fb7 [ 1389.942985] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.950696] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1389.958055] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1389.965327] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1389.972596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1389.979868] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1389.997808] FAULT_INJECTION: forcing a failure. [ 1389.997808] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.007885] hfs: can't find a HFS filesystem on dev loop3 [ 1390.029680] CPU: 0 PID: 24633 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1390.037587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1390.046940] Call Trace: [ 1390.049531] dump_stack+0x1b2/0x281 [ 1390.053169] should_fail.cold+0x10a/0x149 [ 1390.057327] should_failslab+0xd6/0x130 [ 1390.061311] __kmalloc+0x2c1/0x400 [ 1390.064865] ? ext4_find_extent+0x879/0xbc0 [ 1390.069199] ext4_find_extent+0x879/0xbc0 [ 1390.073359] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1390.078813] ext4_ext_map_blocks+0x19a/0x6b10 [ 1390.083323] ? __lock_acquire+0x5fc/0x3f20 [ 1390.087567] ? __lock_acquire+0x5fc/0x3f20 [ 1390.091808] ? mark_buffer_dirty+0x95/0x480 [ 1390.096141] ? trace_hardirqs_on+0x10/0x10 [ 1390.100378] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1390.105745] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1390.110956] ? trace_hardirqs_on+0x10/0x10 [ 1390.115195] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1390.120050] ? ext4_es_lookup_extent+0x321/0xac0 [ 1390.124813] ? lock_acquire+0x170/0x3f0 [ 1390.128784] ? lock_acquire+0x170/0x3f0 [ 1390.132762] ? ext4_map_blocks+0x29f/0x1730 [ 1390.137074] ext4_map_blocks+0xb19/0x1730 [ 1390.141216] ? ext4_issue_zeroout+0x150/0x150 [ 1390.145696] ? __ext4_new_inode+0x27c/0x4eb0 [ 1390.150098] ext4_getblk+0x98/0x3f0 [ 1390.153710] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1390.158019] ext4_bread+0x6c/0x1a0 [ 1390.161542] ? ext4_getblk+0x3f0/0x3f0 [ 1390.165410] ? dquot_initialize_needed+0x240/0x240 [ 1390.170341] ext4_append+0x143/0x350 [ 1390.174038] ext4_mkdir+0x4c9/0xbd0 [ 1390.177668] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1390.182669] ? security_inode_mkdir+0xca/0x100 [ 1390.187249] vfs_mkdir+0x463/0x6e0 [ 1390.190781] SyS_mkdirat+0x1fd/0x270 [ 1390.194494] ? SyS_mknod+0x30/0x30 [ 1390.198021] ? fput_many+0xe/0x140 [ 1390.201564] ? do_syscall_64+0x4c/0x640 [ 1390.205531] ? SyS_mknod+0x30/0x30 [ 1390.209082] do_syscall_64+0x1d5/0x640 [ 1390.212975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.218150] RIP: 0033:0x7faed27e5307 [ 1390.221843] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1390.229533] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1390.236787] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1390.244039] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1390.251289] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1390.258542] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:09 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 34) 01:59:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0xc4, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010103}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0xfffffffffffffffe, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f73}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48814}, 0x40001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0xc4, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010103}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0xfffffffffffffffe, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f73}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48814}, 0x40001) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044010) (async) 01:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x80, 0x1b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@netrom, @netrom, @default, @null, @default, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x2, 0x4}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40841) 01:59:09 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0x1) (async) socket$netlink(0x10, 0x3, 0x5) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) 01:59:09 executing program 5: r0 = pkey_alloc(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pkey_alloc(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000680180004801300010062726f6164636173742d6c696e6b00"/42], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xfe0824a7d52946b1) 01:59:09 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 40) [ 1390.295792] hfs: can't find a HFS filesystem on dev loop2 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) pkey_alloc(0x0, 0x0) 01:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r2 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x80, 0x1b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@netrom, @netrom, @default, @null, @default, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x2, 0x4}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40841) [ 1390.384529] FAULT_INJECTION: forcing a failure. [ 1390.384529] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.424582] CPU: 0 PID: 24687 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 01:59:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r4 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="10574a9f345502fbe22fefdf5270277fe8b817db23f27aa592e726c18669003aed0388c811f17f1a721957c40193b116930e1a37babdeced03fa634348e10172bd9618a3a72164e6e32a8a65c40bdeed08d4e6b1150623e241f64d2b802ec13bb366577c4fe0f03544f77cc7e3d2ef81338f27b34fd9e66329542ee02b612f614fb155c37db1e78bccc6914aec1b619eb520d5eb339ea47875ebc485bae9329bf65d565b3a047c63a4e8fe97f40214ee0261f1abcce9c43d73fcbf6567d2a7ff38c84b3ca947ac393b93015eefd4c865da4b8e4238706dddacd12e8626777075598612c7410f5647e379f879f0f9cee72180960a36740d449581f8e2c750e744bd8ec5380a65c50f8fbedae162953e77385af5714a936de5c6c8c27fd0bf4938545c786f502b328ed862b848869ff6102f5957870afdd78639170a7c8e0fac291e74caaaf005480c1733a39e92bcc406ed8f8d37f3bdf955c8a9fab66cd9ba2009209c388aa578adfb82737a62bf3b217d1b3439ccdb13c877214617dbf604f5b1c1d7f4fff1ac6b1ad09bf4366ab261229b2b172f8c7c982e68a9c41ce37ef4193ddb9be1a34451451d9e91131a2de08a62d8a275dd7140508e68e6fe9ae1928c5d55d1ff66c597c0302275f3348eaad7a8a4a88a651245c450934e59c27dcb1c761411d777a08e45767c56c9e055b7b457a59e8ceaa4aaec86fea03523f1baf961491c34ab99de44cd2554a3e5552723d33b09bb50029c2ee52e4a66bf0196d07503b58ff5b0c3e82875d9f67651114ea0f4d9fd30d48dfa3a6eaba550989d9471d0176f925616013ba11f88d587e9a6cb8925384c96334c3a7244b8cec3d55d372fc28cf6b8dc84b8894d269458a3d821fbbf2a044a0a942143f9e463f9282505e3462b4bf585e1cfe647aa8d0d9703cbf992b1ecdfaf657e13e4d638dd70f73b3fd23893735fc3b8ce6ed0fad186c800eef0a20585864893481ec0d455e147e1df27826513b638cc554bb9ed1b1422b310a4abe5caeeebef104ed72295dd5b2c6b225a72f0de0b559a806abb6132ebf26248af7cef167a09fc3740fc7b4b140bb3dfa3094d4992ea1ef2a24911f41bea0c1505f9e80ddb04338c274ae48eef6f0fe45067893d302f431e1e2f24dce15eb83c25fdd25c9517af9b5067ecab98606735e85478b806f2b45ea47337b91e2a7b068b7cd7ec97f91e696f701944786b03938bfd5c25f1261bd4daf646fb3053a87955fadb7fa44637590c70cdacff51904bea5d92226d4d69ca99db7429817c8cee4302d22f9deb4b745757b72b0bce76e997faf8f6e3091da6a19b3fcaff8572328f32e93b09be6e3a478a1adba7653878951bb28009bb0eabdefbf6d2fd7c1bab02962d8ad87ee33141bde3ccd6f9a70f965750e5bf87e347b88983b87986439bafd60b1f46b41ab764e8af7b6fc68d43ebf4cd3534189b0f526edd06aeecad28bc154a9dd7fad11c8c84dc9e5171bc0b7ccb90a93dfd7927c1b5f4bb3694179a4a62ac4d8dc37e9de19bfa4052f66f90b3c68c17d2126e787ca51ea1023dfff41f8dfe653e0493e982962e311a6747b0b1255a1bbabd4ec14ec5973d17b474bfe48d9a8a0a20708294db8d17713409386f05bec4a7191f2dd05d811b4cf32a8e7cbfea8d5cdbf80e1b3179089a5293fc809a18d46a3f0bd349de415df795f3ae362d2d4531564ed57564709d012f47ff28470e6ef4920b95cea02df3fca224637ddf2547a24db5f20fd8241bd8e0c246f7f81b0f59bfc58ebe4f54e698cf8c59fc7507b664d36bba8096fa7bf4b8587c2e2236ced71422eab1356f787b5eb72f48707b15c97d375ce3a74f24e88d14308ed0cb826a2c458a0aa899fe51611567f147ba7c984e4c5149579250e8a2b7710c3b41b7a32844e85842cde632b53e1f0da3dd0621ce49ae75f8f133acb51ca2fe6dd691505cf63632938b491c277d4da99a323620ee4a750b325386ac2798c4276dcbcaba4e3e8eb1b8b86e752a702f36416253db56b57094bc091a7cb42913e2f577f17f11399d8252eb973315581f785787b0cd88a87a436323bac8fb287fab93521e6b4d2a28ccbb60a0f0aaa99cfa03c7b2b42bec17059b4d2d458cee0ec00f0293940b174ecd8301a69864ce0648ca27b9fba5331de6757a60b50eb92353f56ceabf81790d55bf60f90066ebe8ae175e3f8d464f6a75cc1016ddb3d74d4afbf184d1d7291658da7a4da0033917c6bb5ba4014e5e8748ed7470f7f971acbf412d79037b9605dbcd100cd72c3d6647175a876cbddfa8d008bd3dadc0f82914dbd8111fbdde9b1c52fe9f2059ded9b7490bae8c227983bb0f31dcbad833fa183a4370349a150b2a00ed891bc4c1e227d3bb588e38ec1f2aacf90b65e5bb23f6c25935654acf3115b35d0c577ba949a1e05ab5f513fabb33b08405fe7bc50a45d373416d1b4af740dba03b6e3dba0c0c461d5d3edccfbe0459d2d1d5fae318a2b8c76eccd459bc7586b79921701b6aceab9c5f6e8c1a3280468c9bf82c604fa1619e92f906797dfb27d272f5a9bcf051803a9d400e56ee71c55c612947661330bc8552d198dc1e0aa3c00db80217542d704293d286ca38ee7df6522d634a3010e2cbb563c7dd1cd69cd40c3f83536e21c7f8914c6f35169bd54904c430a86b897de6329c8ea891de3f81389c65f0419a8ff1a18e571ac2436c77e62d348a6da983cb75dbd2ad832b540d833ed0402441d2b6dbbf80eb5f63bd51d52bd235ce1d688b5e81d2204561f7932cc0a304c8c6d3c97b03aff8442907e609c2741da8b77872ab12ec492d4fbefaa02d7bc86fa47809932fb791552993624d620702e17ad711d8ab7d6b8177bcc748fc4529195a040ca3c58144ed787fa1334e4a84fd60459c1c70a8299d856bdec0b1514cd9a728116c1ba281bde11fe19b6d1e286883a49fa6ea6b3623aad1664c0cd2e46117f76f3a7ebdb0e1ba57d00599a610d7642f04d69fead498bcef238eb6fc6993fb379bc65a97e4c39151fd8a1bf9a7a7638db2b712c67c8ad5fbcf496bb0185683e8bd7379ecf81d5def555eec74b23b3c8b14c278b76d729cbdb918ea664c50290528cdc43959f5719fc4057db07c00666e4cba565585c62c73ca280268387de578f0f81c617bf14d1f3540edb9cd19a39fe5e938e24b159728a70763a04ed5f1c226fecd8c6f043c819bb4786175e0aae7e93d2e45c2bc56171d7d1123ea29b535309f10989c952d71c82d2db7691fdbb33972ed95b35aa1d68bf8aef89425debafb922f6a635d4d0971dc3b775b91ac1b697e886599c198815a50d9282b35aea101de82ba2a3b7c7da33b47efea861adf653b0fd77a266871f1f176b511df82018e7262ba1c55de498b1cbb174c0af499c995cdd314e0ea64c3f333d7e9f9279e2bf3c569b5ee50315cf891d2c34813093b8e0c550a03c01dfc0e6003c9e0ac7e1fe74843f05bf0920fe77b34975c32f4ba8b94a155309246ac0489d01f9dc85eff99298c6b209b75788f58aad4c2fbccaa8d86c4f25a30ce57d2a5ddfa67a99540744052a48e810f0fd43ced0df859bd3802d07a0f9a594904da85b986b7b360c2a8bd19a4267aa7ed495047f208924194b27231ddfe8dc09e88d0327f30f3a42f3d21e6dadd6188e04d6ccca14b9d51660d7e7997b31c47a99e5803e7ff0ab5af993619bbc255facfbc57db0aa50dc079ad5bed3ba2f844c6a0807008448b26822bbd54c5f2a509a5403cfab371241e1efe1a8c57a2c0bc093d6d07f0f3320505e5374e90f5ffcc0031115b3f6d9dc745165ffc8c60c0b67e68ca7533db3f8244b94cbd36c45a912396b471da2d10b054bed11ddbad4b1321c6e4e5c79294cebb14237864e7828fd0c7fd3077832b7a16125fa517401b6abfe33f700158abb94023797fe24f49862d4446581936f3be57b92caec5404c3b27f93b883e36fd818afc3b2a6f813a1e4e818b01baec26001a19fd42dfd09944cfefb289c5d8808239b013ee222a1ec2018b429d4b23cfd98d671f6dfb7105088f43eebaa2920dc44f339aee7ed434b8fc22ffcee491e6f3f3dddef9d611da7278e1e04105bfdb3d5f8a45f8836913c071f357e990e3f8c49970c070ae66c831015438d01f912c1fb04e697ee9a5ac319945b5c9999c0f9c848d4ad00f2977591dda593d91ee0e9ea5c7d0893809dd64f1c557b4fc4dbba5be5390c6e39e364b83994bc6505d2f9e22b778ee72b9f6d630dcdd30efbc2c5e6488e838584f4c4583039fe62a9f21566ddc7c15946872776250b503b81461e6484c788382a36d45948e470f39c5b512a5a0fc1c0ab5d35b22a32dd2e4712bb70d1e9d915b02c7e722d852aa9f824b269944a668627a4611d32899874bc1a42a10c075064853f97694a7683c05f4b9104dcebac3fb7c8015ddcb31fcb2fb5046c620aea989d81d399281dc858598f2a99bb0f6821f50b8c7bcc828d24998016ff0d2bc22f7102ab1494225d71984882701ba569b4e10efa87e6e20da1cbde2922d2fc7013206ec56d0f1499cc8a352be36bba705936524471574b663e29eae884c01b50c2b304da304723660f987743ed07ba755b989a8db8bc094fe38757b4d9d3d44d090337600149ee4ce2422c231439bd6792e571b4d77945fdf54c767676ccdd90875541ef0e02cc6e9def897a59f9409af48dd3490dc4900223d49750ad176bed7ca55c9f4210688f5657940e6cb30970279dd9297af1f08ca2ecafc6138f9eabea97ee505f512999bdff67ae44e8940575691da27badbff8273f8b210ca797d800447b7a80e18546f33b07cda43024a1e2bc4f66cbb1e839672ab990dc298f3d553b89588b66e51eeaac91b3b2004c0df4d15d32b3c8bdf71fae95d168f2127520d54197eec6d29c26c2a8232c6c71d46d566bee979d0c02e2eaf96459b15b47d166dd79d28f6b6bb23bedb0e1391f939753ff1bf975b5cc643f14c0dae91ec56bc82baaa2fc491b39064942c9b06bc2e753d641045c9677d6b33bf46bf8d6ce6a2a6b03927d0d1f0ce62660c2e3d56111253b810b638e1c337999d56f9305bed4d7e29b8292810517f6ce898c24a653191c02cf9d1ff3778b191d7a46fb368ef51c623159a4e06326950216a3eb40e7e261bf64756aa1651b041ddc231c70dc3fac3d76fb601ea3947280b58b1c7968735d7a3da4b3ceb39e05e6789f9e094a620f2ab18440ec92219bdd133516801565099ca68b050f59daf4ff42bfc950a0833478b68d2a5c8e566b3faaae449e523ce8e69f64a1d69dcbdbc7049527571a61ef2a0516a555545c6205831f69198d3cecf34946551c8ff54252ecce0d0b4f1499ff03b01bd32764acc194ec8052c3b66ab2b3918509ead7173f7c15b6307ee34629334028e653020bdf1f6016693004cc6edc6addd34b48e7cebb20ee44982425ff7bc83ec99da4babd76dd2a0861576f659b578bd2648c6fbb985d6061af66408c14098b6cd5b9b73c31a40452c96476d139aa9fa2e5afad0b78e3817bd84d2440cd6741c94f44a47e67c563a7655a02f53b4b9b6242782bd33dccf6f9f60dcffccc4e0d43151b2214532ba90e30d83b28a5b384dd8f7ed151f0a2c3b26aad4369fbf7b4aebd494293343b53cec609a0d6f4543d2273cde19c4c42461cae96b8636780f9f8d9c8c3a97b34c9d939c6a145f5c6feeecc8f1602d1bcae967ec8c6358eb02b74073c96f604ed0a0af02061dcb2dc6e12f2d60a7e2a86ff0573a8f7f2a18a642120bd8f4a5be8979a9dd55f24b0c05c2", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) [ 1390.432501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1390.441858] Call Trace: [ 1390.444448] dump_stack+0x1b2/0x281 [ 1390.448082] should_fail.cold+0x10a/0x149 [ 1390.452232] should_failslab+0xd6/0x130 [ 1390.456213] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1390.461332] __kmalloc_node_track_caller+0x38/0x70 [ 1390.466265] __alloc_skb+0x96/0x510 [ 1390.469898] kobject_uevent_env+0x882/0xf30 [ 1390.474232] lo_ioctl+0x11a6/0x1cd0 [ 1390.477868] ? loop_set_status64+0xe0/0xe0 [ 1390.482121] blkdev_ioctl+0x540/0x1830 [ 1390.486009] ? blkpg_ioctl+0x8d0/0x8d0 [ 1390.489894] ? trace_hardirqs_on+0x10/0x10 [ 1390.494222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1390.499321] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1390.504343] block_ioctl+0xd9/0x120 [ 1390.507971] ? blkdev_fallocate+0x3a0/0x3a0 [ 1390.512300] do_vfs_ioctl+0x75a/0xff0 [ 1390.516107] ? lock_acquire+0x170/0x3f0 [ 1390.520085] ? ioctl_preallocate+0x1a0/0x1a0 [ 1390.524498] ? __fget+0x265/0x3e0 [ 1390.527951] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.531930] ? security_file_ioctl+0x83/0xb0 [ 1390.536338] SyS_ioctl+0x7f/0xb0 [ 1390.539702] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.543676] do_syscall_64+0x1d5/0x640 [ 1390.547565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.552754] RIP: 0033:0x7fd7232e3fb7 [ 1390.556459] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.564155] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1390.571406] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) pkey_alloc(0x0, 0x0) 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) pkey_alloc(0x0, 0x0) 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, r1) [ 1390.578772] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1390.586084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1390.593346] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1390.615774] hfs: can't find a HFS filesystem on dev loop3 [ 1390.618964] hfs: unable to parse mount options [ 1390.628336] FAULT_INJECTION: forcing a failure. [ 1390.628336] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.639813] CPU: 0 PID: 24704 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1390.647709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1390.657060] Call Trace: [ 1390.659652] dump_stack+0x1b2/0x281 [ 1390.663286] should_fail.cold+0x10a/0x149 [ 1390.667440] should_failslab+0xd6/0x130 [ 1390.671420] kmem_cache_alloc+0x40/0x3c0 [ 1390.675483] __es_insert_extent+0x338/0x1360 [ 1390.679889] ? __es_shrink+0x8c0/0x8c0 [ 1390.683781] ? lock_acquire+0x170/0x3f0 [ 1390.687765] ? ext4_es_insert_extent+0x11f/0x530 [ 1390.692536] ext4_es_insert_extent+0x1b9/0x530 [ 1390.697123] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1390.702924] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1390.708383] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 1390.714184] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 1390.718776] ? __lock_acquire+0x5fc/0x3f20 [ 1390.723019] ? __lock_acquire+0x5fc/0x3f20 [ 1390.727260] ? mark_buffer_dirty+0x95/0x480 [ 1390.731584] ? trace_hardirqs_on+0x10/0x10 [ 1390.735816] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1390.741181] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1390.746372] ? trace_hardirqs_on+0x10/0x10 [ 1390.750600] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1390.755427] ? ext4_es_lookup_extent+0x321/0xac0 [ 1390.760165] ? lock_acquire+0x170/0x3f0 [ 1390.764120] ? lock_acquire+0x170/0x3f0 [ 1390.768090] ? ext4_map_blocks+0x29f/0x1730 [ 1390.772405] ext4_map_blocks+0xb19/0x1730 [ 1390.776624] ? ext4_issue_zeroout+0x150/0x150 [ 1390.781185] ? __ext4_new_inode+0x27c/0x4eb0 [ 1390.785628] ext4_getblk+0x98/0x3f0 [ 1390.789246] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1390.793623] ext4_bread+0x6c/0x1a0 [ 1390.797153] ? ext4_getblk+0x3f0/0x3f0 [ 1390.801022] ? dquot_initialize_needed+0x240/0x240 [ 1390.805942] ext4_append+0x143/0x350 [ 1390.809640] ext4_mkdir+0x4c9/0xbd0 [ 1390.813249] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1390.817909] ? security_inode_mkdir+0xca/0x100 [ 1390.822473] vfs_mkdir+0x463/0x6e0 [ 1390.825999] SyS_mkdirat+0x1fd/0x270 [ 1390.829695] ? SyS_mknod+0x30/0x30 [ 1390.833282] ? fput_many+0xe/0x140 [ 1390.836800] ? do_syscall_64+0x4c/0x640 [ 1390.840750] ? SyS_mknod+0x30/0x30 [ 1390.844299] do_syscall_64+0x1d5/0x640 [ 1390.848191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.853377] RIP: 0033:0x7faed27e5307 [ 1390.857090] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1390.864813] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1390.872070] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1390.879686] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 01:59:09 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 35) 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) pkey_alloc(0x0, 0x2) 01:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r2 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x80, 0x1b) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@netrom, @netrom, @default, @null, @default, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x2, 0x4}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40841) 01:59:09 executing program 4: pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 01:59:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r4 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="10574a9f345502fbe22fefdf5270277fe8b817db23f27aa592e726c18669003aed0388c811f17f1a721957c40193b116930e1a37babdeced03fa634348e10172bd9618a3a72164e6e32a8a65c40bdeed08d4e6b1150623e241f64d2b802ec13bb366577c4fe0f03544f77cc7e3d2ef81338f27b34fd9e66329542ee02b612f614fb155c37db1e78bccc6914aec1b619eb520d5eb339ea47875ebc485bae9329bf65d565b3a047c63a4e8fe97f40214ee0261f1abcce9c43d73fcbf6567d2a7ff38c84b3ca947ac393b93015eefd4c865da4b8e4238706dddacd12e8626777075598612c7410f5647e379f879f0f9cee72180960a36740d449581f8e2c750e744bd8ec5380a65c50f8fbedae162953e77385af5714a936de5c6c8c27fd0bf4938545c786f502b328ed862b848869ff6102f5957870afdd78639170a7c8e0fac291e74caaaf005480c1733a39e92bcc406ed8f8d37f3bdf955c8a9fab66cd9ba2009209c388aa578adfb82737a62bf3b217d1b3439ccdb13c877214617dbf604f5b1c1d7f4fff1ac6b1ad09bf4366ab261229b2b172f8c7c982e68a9c41ce37ef4193ddb9be1a34451451d9e91131a2de08a62d8a275dd7140508e68e6fe9ae1928c5d55d1ff66c597c0302275f3348eaad7a8a4a88a651245c450934e59c27dcb1c761411d777a08e45767c56c9e055b7b457a59e8ceaa4aaec86fea03523f1baf961491c34ab99de44cd2554a3e5552723d33b09bb50029c2ee52e4a66bf0196d07503b58ff5b0c3e82875d9f67651114ea0f4d9fd30d48dfa3a6eaba550989d9471d0176f925616013ba11f88d587e9a6cb8925384c96334c3a7244b8cec3d55d372fc28cf6b8dc84b8894d269458a3d821fbbf2a044a0a942143f9e463f9282505e3462b4bf585e1cfe647aa8d0d9703cbf992b1ecdfaf657e13e4d638dd70f73b3fd23893735fc3b8ce6ed0fad186c800eef0a20585864893481ec0d455e147e1df27826513b638cc554bb9ed1b1422b310a4abe5caeeebef104ed72295dd5b2c6b225a72f0de0b559a806abb6132ebf26248af7cef167a09fc3740fc7b4b140bb3dfa3094d4992ea1ef2a24911f41bea0c1505f9e80ddb04338c274ae48eef6f0fe45067893d302f431e1e2f24dce15eb83c25fdd25c9517af9b5067ecab98606735e85478b806f2b45ea47337b91e2a7b068b7cd7ec97f91e696f701944786b03938bfd5c25f1261bd4daf646fb3053a87955fadb7fa44637590c70cdacff51904bea5d92226d4d69ca99db7429817c8cee4302d22f9deb4b745757b72b0bce76e997faf8f6e3091da6a19b3fcaff8572328f32e93b09be6e3a478a1adba7653878951bb28009bb0eabdefbf6d2fd7c1bab02962d8ad87ee33141bde3ccd6f9a70f965750e5bf87e347b88983b87986439bafd60b1f46b41ab764e8af7b6fc68d43ebf4cd3534189b0f526edd06aeecad28bc154a9dd7fad11c8c84dc9e5171bc0b7ccb90a93dfd7927c1b5f4bb3694179a4a62ac4d8dc37e9de19bfa4052f66f90b3c68c17d2126e787ca51ea1023dfff41f8dfe653e0493e982962e311a6747b0b1255a1bbabd4ec14ec5973d17b474bfe48d9a8a0a20708294db8d17713409386f05bec4a7191f2dd05d811b4cf32a8e7cbfea8d5cdbf80e1b3179089a5293fc809a18d46a3f0bd349de415df795f3ae362d2d4531564ed57564709d012f47ff28470e6ef4920b95cea02df3fca224637ddf2547a24db5f20fd8241bd8e0c246f7f81b0f59bfc58ebe4f54e698cf8c59fc7507b664d36bba8096fa7bf4b8587c2e2236ced71422eab1356f787b5eb72f48707b15c97d375ce3a74f24e88d14308ed0cb826a2c458a0aa899fe51611567f147ba7c984e4c5149579250e8a2b7710c3b41b7a32844e85842cde632b53e1f0da3dd0621ce49ae75f8f133acb51ca2fe6dd691505cf63632938b491c277d4da99a323620ee4a750b325386ac2798c4276dcbcaba4e3e8eb1b8b86e752a702f36416253db56b57094bc091a7cb42913e2f577f17f11399d8252eb973315581f785787b0cd88a87a436323bac8fb287fab93521e6b4d2a28ccbb60a0f0aaa99cfa03c7b2b42bec17059b4d2d458cee0ec00f0293940b174ecd8301a69864ce0648ca27b9fba5331de6757a60b50eb92353f56ceabf81790d55bf60f90066ebe8ae175e3f8d464f6a75cc1016ddb3d74d4afbf184d1d7291658da7a4da0033917c6bb5ba4014e5e8748ed7470f7f971acbf412d79037b9605dbcd100cd72c3d6647175a876cbddfa8d008bd3dadc0f82914dbd8111fbdde9b1c52fe9f2059ded9b7490bae8c227983bb0f31dcbad833fa183a4370349a150b2a00ed891bc4c1e227d3bb588e38ec1f2aacf90b65e5bb23f6c25935654acf3115b35d0c577ba949a1e05ab5f513fabb33b08405fe7bc50a45d373416d1b4af740dba03b6e3dba0c0c461d5d3edccfbe0459d2d1d5fae318a2b8c76eccd459bc7586b79921701b6aceab9c5f6e8c1a3280468c9bf82c604fa1619e92f906797dfb27d272f5a9bcf051803a9d400e56ee71c55c612947661330bc8552d198dc1e0aa3c00db80217542d704293d286ca38ee7df6522d634a3010e2cbb563c7dd1cd69cd40c3f83536e21c7f8914c6f35169bd54904c430a86b897de6329c8ea891de3f81389c65f0419a8ff1a18e571ac2436c77e62d348a6da983cb75dbd2ad832b540d833ed0402441d2b6dbbf80eb5f63bd51d52bd235ce1d688b5e81d2204561f7932cc0a304c8c6d3c97b03aff8442907e609c2741da8b77872ab12ec492d4fbefaa02d7bc86fa47809932fb791552993624d620702e17ad711d8ab7d6b8177bcc748fc4529195a040ca3c58144ed787fa1334e4a84fd60459c1c70a8299d856bdec0b1514cd9a728116c1ba281bde11fe19b6d1e286883a49fa6ea6b3623aad1664c0cd2e46117f76f3a7ebdb0e1ba57d00599a610d7642f04d69fead498bcef238eb6fc6993fb379bc65a97e4c39151fd8a1bf9a7a7638db2b712c67c8ad5fbcf496bb0185683e8bd7379ecf81d5def555eec74b23b3c8b14c278b76d729cbdb918ea664c50290528cdc43959f5719fc4057db07c00666e4cba565585c62c73ca280268387de578f0f81c617bf14d1f3540edb9cd19a39fe5e938e24b159728a70763a04ed5f1c226fecd8c6f043c819bb4786175e0aae7e93d2e45c2bc56171d7d1123ea29b535309f10989c952d71c82d2db7691fdbb33972ed95b35aa1d68bf8aef89425debafb922f6a635d4d0971dc3b775b91ac1b697e886599c198815a50d9282b35aea101de82ba2a3b7c7da33b47efea861adf653b0fd77a266871f1f176b511df82018e7262ba1c55de498b1cbb174c0af499c995cdd314e0ea64c3f333d7e9f9279e2bf3c569b5ee50315cf891d2c34813093b8e0c550a03c01dfc0e6003c9e0ac7e1fe74843f05bf0920fe77b34975c32f4ba8b94a155309246ac0489d01f9dc85eff99298c6b209b75788f58aad4c2fbccaa8d86c4f25a30ce57d2a5ddfa67a99540744052a48e810f0fd43ced0df859bd3802d07a0f9a594904da85b986b7b360c2a8bd19a4267aa7ed495047f208924194b27231ddfe8dc09e88d0327f30f3a42f3d21e6dadd6188e04d6ccca14b9d51660d7e7997b31c47a99e5803e7ff0ab5af993619bbc255facfbc57db0aa50dc079ad5bed3ba2f844c6a0807008448b26822bbd54c5f2a509a5403cfab371241e1efe1a8c57a2c0bc093d6d07f0f3320505e5374e90f5ffcc0031115b3f6d9dc745165ffc8c60c0b67e68ca7533db3f8244b94cbd36c45a912396b471da2d10b054bed11ddbad4b1321c6e4e5c79294cebb14237864e7828fd0c7fd3077832b7a16125fa517401b6abfe33f700158abb94023797fe24f49862d4446581936f3be57b92caec5404c3b27f93b883e36fd818afc3b2a6f813a1e4e818b01baec26001a19fd42dfd09944cfefb289c5d8808239b013ee222a1ec2018b429d4b23cfd98d671f6dfb7105088f43eebaa2920dc44f339aee7ed434b8fc22ffcee491e6f3f3dddef9d611da7278e1e04105bfdb3d5f8a45f8836913c071f357e990e3f8c49970c070ae66c831015438d01f912c1fb04e697ee9a5ac319945b5c9999c0f9c848d4ad00f2977591dda593d91ee0e9ea5c7d0893809dd64f1c557b4fc4dbba5be5390c6e39e364b83994bc6505d2f9e22b778ee72b9f6d630dcdd30efbc2c5e6488e838584f4c4583039fe62a9f21566ddc7c15946872776250b503b81461e6484c788382a36d45948e470f39c5b512a5a0fc1c0ab5d35b22a32dd2e4712bb70d1e9d915b02c7e722d852aa9f824b269944a668627a4611d32899874bc1a42a10c075064853f97694a7683c05f4b9104dcebac3fb7c8015ddcb31fcb2fb5046c620aea989d81d399281dc858598f2a99bb0f6821f50b8c7bcc828d24998016ff0d2bc22f7102ab1494225d71984882701ba569b4e10efa87e6e20da1cbde2922d2fc7013206ec56d0f1499cc8a352be36bba705936524471574b663e29eae884c01b50c2b304da304723660f987743ed07ba755b989a8db8bc094fe38757b4d9d3d44d090337600149ee4ce2422c231439bd6792e571b4d77945fdf54c767676ccdd90875541ef0e02cc6e9def897a59f9409af48dd3490dc4900223d49750ad176bed7ca55c9f4210688f5657940e6cb30970279dd9297af1f08ca2ecafc6138f9eabea97ee505f512999bdff67ae44e8940575691da27badbff8273f8b210ca797d800447b7a80e18546f33b07cda43024a1e2bc4f66cbb1e839672ab990dc298f3d553b89588b66e51eeaac91b3b2004c0df4d15d32b3c8bdf71fae95d168f2127520d54197eec6d29c26c2a8232c6c71d46d566bee979d0c02e2eaf96459b15b47d166dd79d28f6b6bb23bedb0e1391f939753ff1bf975b5cc643f14c0dae91ec56bc82baaa2fc491b39064942c9b06bc2e753d641045c9677d6b33bf46bf8d6ce6a2a6b03927d0d1f0ce62660c2e3d56111253b810b638e1c337999d56f9305bed4d7e29b8292810517f6ce898c24a653191c02cf9d1ff3778b191d7a46fb368ef51c623159a4e06326950216a3eb40e7e261bf64756aa1651b041ddc231c70dc3fac3d76fb601ea3947280b58b1c7968735d7a3da4b3ceb39e05e6789f9e094a620f2ab18440ec92219bdd133516801565099ca68b050f59daf4ff42bfc950a0833478b68d2a5c8e566b3faaae449e523ce8e69f64a1d69dcbdbc7049527571a61ef2a0516a555545c6205831f69198d3cecf34946551c8ff54252ecce0d0b4f1499ff03b01bd32764acc194ec8052c3b66ab2b3918509ead7173f7c15b6307ee34629334028e653020bdf1f6016693004cc6edc6addd34b48e7cebb20ee44982425ff7bc83ec99da4babd76dd2a0861576f659b578bd2648c6fbb985d6061af66408c14098b6cd5b9b73c31a40452c96476d139aa9fa2e5afad0b78e3817bd84d2440cd6741c94f44a47e67c563a7655a02f53b4b9b6242782bd33dccf6f9f60dcffccc4e0d43151b2214532ba90e30d83b28a5b384dd8f7ed151f0a2c3b26aad4369fbf7b4aebd494293343b53cec609a0d6f4543d2273cde19c4c42461cae96b8636780f9f8d9c8c3a97b34c9d939c6a145f5c6feeecc8f1602d1bcae967ec8c6358eb02b74073c96f604ed0a0af02061dcb2dc6e12f2d60a7e2a86ff0573a8f7f2a18a642120bd8f4a5be8979a9dd55f24b0c05c2", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) dup(0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) (async) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="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", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) (async) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) (async) 01:59:09 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 41) [ 1390.886953] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1390.894306] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1390.908959] hfs: can't find a HFS filesystem on dev loop2 [ 1390.908971] Bluetooth: hci0 command 0x0401 tx timeout 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) 01:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) accept4$netrom(r4, 0x0, 0x0, 0x80800) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x80, 0x7, 0xff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) 01:59:09 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0xf42012f9fb2e3ca4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000300)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {}, {@fixed}, {}]}) 01:59:09 executing program 5: pkey_alloc(0x0, 0x0) r0 = msgget(0x0, 0x200) msgctl$IPC_RMID(r0, 0x0) 01:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async, rerun: 32) accept4$netrom(r4, 0x0, 0x0, 0x80800) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x80, 0x7, 0xff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) [ 1391.059471] FAULT_INJECTION: forcing a failure. [ 1391.059471] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.089963] CPU: 1 PID: 24752 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1391.097870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1391.107223] Call Trace: 01:59:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) accept4$netrom(r4, 0x0, 0x0, 0x80800) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x80, 0x7, 0xff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) [ 1391.109815] dump_stack+0x1b2/0x281 [ 1391.113449] should_fail.cold+0x10a/0x149 [ 1391.117604] should_failslab+0xd6/0x130 [ 1391.121584] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1391.126697] __kmalloc_node_track_caller+0x38/0x70 [ 1391.131637] __alloc_skb+0x96/0x510 [ 1391.135274] kobject_uevent_env+0x882/0xf30 [ 1391.139602] lo_ioctl+0x11a6/0x1cd0 [ 1391.143240] ? loop_set_status64+0xe0/0xe0 [ 1391.147477] blkdev_ioctl+0x540/0x1830 [ 1391.151371] ? blkpg_ioctl+0x8d0/0x8d0 [ 1391.155271] ? trace_hardirqs_on+0x10/0x10 [ 1391.159515] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1391.164622] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1391.169641] block_ioctl+0xd9/0x120 [ 1391.173270] ? blkdev_fallocate+0x3a0/0x3a0 [ 1391.177590] do_vfs_ioctl+0x75a/0xff0 [ 1391.181395] ? lock_acquire+0x170/0x3f0 [ 1391.185370] ? ioctl_preallocate+0x1a0/0x1a0 [ 1391.189786] ? __fget+0x265/0x3e0 [ 1391.193249] ? do_vfs_ioctl+0xff0/0xff0 [ 1391.197227] ? security_file_ioctl+0x83/0xb0 [ 1391.201638] SyS_ioctl+0x7f/0xb0 [ 1391.204997] ? do_vfs_ioctl+0xff0/0xff0 [ 1391.208974] do_syscall_64+0x1d5/0x640 [ 1391.212868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.218050] RIP: 0033:0x7fd7232e3fb7 [ 1391.221761] RSP: 002b:00007fd721c58f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.229462] RAX: ffffffffffffffda RBX: 00007fd72332da20 RCX: 00007fd7232e3fb7 [ 1391.236724] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1391.243988] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1391.251240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1391.258490] R13: 0000000000000004 R14: 0000000020000480 R15: 0000000000000000 [ 1391.270077] hfs: can't find a HFS filesystem on dev loop3 [ 1391.278441] FAULT_INJECTION: forcing a failure. [ 1391.278441] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.294572] CPU: 1 PID: 24756 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1391.302479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1391.311831] Call Trace: [ 1391.314434] dump_stack+0x1b2/0x281 [ 1391.318073] should_fail.cold+0x10a/0x149 [ 1391.322223] should_failslab+0xd6/0x130 [ 1391.322234] __kmalloc+0x2c1/0x400 [ 1391.322327] ? ext4_find_extent+0x879/0xbc0 [ 1391.322350] ext4_find_extent+0x879/0xbc0 [ 1391.322366] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1391.322377] ext4_ext_map_blocks+0x19a/0x6b10 [ 1391.322392] ? __lock_acquire+0x5fc/0x3f20 [ 1391.322405] ? mark_buffer_dirty+0x95/0x480 [ 1391.357122] ? trace_hardirqs_on+0x10/0x10 [ 1391.361338] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1391.366686] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1391.371858] ? trace_hardirqs_on+0x10/0x10 [ 1391.376076] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1391.380902] ? ext4_es_lookup_extent+0x321/0xac0 [ 1391.385645] ? lock_acquire+0x170/0x3f0 [ 1391.389628] ? lock_acquire+0x170/0x3f0 [ 1391.393595] ? ext4_map_blocks+0x623/0x1730 [ 1391.397905] ext4_map_blocks+0x675/0x1730 [ 1391.402042] ? ext4_issue_zeroout+0x150/0x150 [ 1391.406519] ? __ext4_new_inode+0x27c/0x4eb0 [ 1391.410943] ext4_getblk+0x98/0x3f0 [ 1391.414565] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1391.418898] ext4_bread+0x6c/0x1a0 [ 1391.422437] ? ext4_getblk+0x3f0/0x3f0 [ 1391.426312] ? dquot_initialize_needed+0x240/0x240 [ 1391.431225] ext4_append+0x143/0x350 [ 1391.434925] ext4_mkdir+0x4c9/0xbd0 [ 1391.438534] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1391.443192] ? security_inode_mkdir+0xca/0x100 [ 1391.447780] vfs_mkdir+0x463/0x6e0 [ 1391.451304] SyS_mkdirat+0x1fd/0x270 [ 1391.455016] ? SyS_mknod+0x30/0x30 [ 1391.458541] ? fput_many+0xe/0x140 [ 1391.462068] ? do_syscall_64+0x4c/0x640 [ 1391.466026] ? SyS_mknod+0x30/0x30 [ 1391.469554] do_syscall_64+0x1d5/0x640 [ 1391.473431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.478599] RIP: 0033:0x7faed27e5307 [ 1391.482291] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1391.489988] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1391.497242] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1391.504517] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1391.511777] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1391.519030] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:10 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 36) 01:59:10 executing program 4: pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0xf42012f9fb2e3ca4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000300)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {}, {@fixed}, {}]}) 01:59:10 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/116, 0x74, 0x0, &(0x7f00000003c0)=""/132, 0x84}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) r4 = signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x0, 0x20, 0x1, 0x352976c6}, {0x6, 0x0, 0x7, 0x6}, {0x7f, 0x2, 0x0, 0xdc62}, {0x800, 0x81, 0x8, 0x8000}]}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6021, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r7 = dup(r1) accept4$netrom(r7, 0x0, 0x0, 0x0) 01:59:10 executing program 5: pkey_alloc(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 01:59:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r4 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="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", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) dup(0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) (async) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="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", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) (async) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) (async) 01:59:10 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 42) 01:59:10 executing program 5: msgctl$IPC_RMID(0x0, 0x0) [ 1391.670875] FAULT_INJECTION: forcing a failure. [ 1391.670875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1391.682715] CPU: 0 PID: 24805 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1391.690596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1391.699952] Call Trace: [ 1391.702545] dump_stack+0x1b2/0x281 [ 1391.706178] should_fail.cold+0x10a/0x149 [ 1391.710333] __alloc_pages_nodemask+0x22c/0x2720 [ 1391.715088] ? kobject_uevent_env+0x274/0xf30 [ 1391.719596] ? __lock_acquire+0x5fc/0x3f20 [ 1391.723846] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1391.728704] ? blkdev_ioctl+0xf4/0x1830 [ 1391.732700] ? blkpg_ioctl+0x8d0/0x8d0 [ 1391.736600] ? trace_hardirqs_on+0x10/0x10 [ 1391.740843] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1391.745959] cache_grow_begin+0x91/0x700 [ 1391.750017] ? fs_reclaim_release+0xd0/0x110 [ 1391.754428] ? check_preemption_disabled+0x35/0x240 [ 1391.759448] cache_alloc_refill+0x273/0x350 [ 1391.763778] kmem_cache_alloc+0x333/0x3c0 [ 1391.767937] getname_flags+0xc8/0x550 [ 1391.771749] SyS_mkdirat+0x83/0x270 [ 1391.774487] hfs: unable to parse mount options [ 1391.775376] ? SyS_mknod+0x30/0x30 [ 1391.775387] ? fput_many+0xe/0x140 [ 1391.775396] ? do_syscall_64+0x4c/0x640 [ 1391.775406] ? SyS_mknod+0x30/0x30 [ 1391.794527] do_syscall_64+0x1d5/0x640 [ 1391.798450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.803623] RIP: 0033:0x7fd7232e3307 [ 1391.807323] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 01:59:10 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0xf42012f9fb2e3ca4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000300)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {}, {@fixed}, {}]}) pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0xf42012f9fb2e3ca4) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000300)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {}, {@fixed}, {}]}) (async) 01:59:10 executing program 5: msgctl$IPC_RMID(0x0, 0x0) 01:59:10 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/116, 0x74, 0x0, &(0x7f00000003c0)=""/132, 0x84}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) r4 = signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x0, 0x20, 0x1, 0x352976c6}, {0x6, 0x0, 0x7, 0x6}, {0x7f, 0x2, 0x0, 0xdc62}, {0x800, 0x81, 0x8, 0x8000}]}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6021, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r7 = dup(r1) accept4$netrom(r7, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/116, 0x74, 0x0, &(0x7f00000003c0)=""/132, 0x84}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) (async) signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) (async) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x0, 0x20, 0x1, 0x352976c6}, {0x6, 0x0, 0x7, 0x6}, {0x7f, 0x2, 0x0, 0xdc62}, {0x800, 0x81, 0x8, 0x8000}]}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6021, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) (async) dup(r1) (async) accept4$netrom(r7, 0x0, 0x0, 0x0) (async) 01:59:10 executing program 4: pkey_alloc(0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x101000, 0x110) 01:59:10 executing program 0: getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) getgroups(0x0, &(0x7f0000000100)) getgroups(0x5, &(0x7f0000000040)=[0xee01, r1, r2, r0, r2]) r4 = getgid() syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x88, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="2b7fbee04b48567e512994e06a68881ce3ca537899", 0x15, 0x5}, {&(0x7f0000000100)="b3d49cead6e1255af8ea2ac7690acf031aedb720f070ca14ed1c8a61272ddbd4dcdae3ee3b9cdaed8c5ae8", 0x2b, 0x100000000}, {&(0x7f0000000140)="83d637a5fd36ee9af8b0fb24fcfdccb307615921460ccbcdc636661f2f1f40a1f2c16f95c4f543ea62e5cffb1f53443b8ffaf8d9bed7c99345", 0x39, 0x4a2b7674}, {&(0x7f0000000180)="227934d0aa158529d47363291ba51cd9ccda1454b8a2f84ab92517edb69fc5e878e9167f9b7ef650230c344ddc2e4279573ac42912a9921d433843b6f2b1405a6e7e9231d3184eb662eee583ddda45c787e831663f7798d01730122f767af5a2b0b13d145a016cc95467ee873a029a2dd1eb492844d453928ab0f3c3cd5f0d962d4fe1ab15f834e88af2", 0x8a, 0x7}], 0x800000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r4}}, {}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3f}}, {@part={'part', 0x3d, 0x6}}, {@type={'type', 0x3d, "e0f4c2a4"}}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x10}}, {@appraise_type}]}) setgroups(0x1, &(0x7f0000000400)=[r2, r3, r4]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0xa004) [ 1391.815028] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1391.822281] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1391.829532] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1391.836783] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1391.844048] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1391.916605] hfs: can't find a HFS filesystem on dev loop3 [ 1391.925960] FAULT_INJECTION: forcing a failure. [ 1391.925960] name failslab, interval 1, probability 0, space 0, times 0 01:59:10 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 37) 01:59:10 executing program 4: pkey_alloc(0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) (async) pkey_alloc(0x0, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x101000, 0x110) 01:59:10 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/116, 0x74, 0x0, &(0x7f00000003c0)=""/132, 0x84}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) r4 = signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x0, 0x20, 0x1, 0x352976c6}, {0x6, 0x0, 0x7, 0x6}, {0x7f, 0x2, 0x0, 0xdc62}, {0x800, 0x81, 0x8, 0x8000}]}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6021, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r7 = dup(r1) accept4$netrom(r7, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/116, 0x74, 0x0, &(0x7f00000003c0)=""/132, 0x84}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) (async) signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) (async) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{0x0, 0x20, 0x1, 0x352976c6}, {0x6, 0x0, 0x7, 0x6}, {0x7f, 0x2, 0x0, 0xdc62}, {0x800, 0x81, 0x8, 0x8000}]}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6021, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) (async) dup(r1) (async) accept4$netrom(r7, 0x0, 0x0, 0x0) (async) 01:59:10 executing program 5: msgctl$IPC_RMID(0x0, 0x0) [ 1391.975295] CPU: 1 PID: 24809 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1391.983204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1391.992557] Call Trace: [ 1391.995160] dump_stack+0x1b2/0x281 [ 1391.998792] should_fail.cold+0x10a/0x149 [ 1392.002946] should_failslab+0xd6/0x130 [ 1392.006922] kmem_cache_alloc+0x28e/0x3c0 [ 1392.011072] ext4_mb_new_blocks+0x514/0x3db0 [ 1392.015492] ? ext4_find_extent+0x6f7/0xbc0 [ 1392.019812] ? ext4_ext_search_right+0x2bc/0xaa0 01:59:10 executing program 5: pkey_alloc(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 1392.024568] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1392.029590] ext4_ext_map_blocks+0x2845/0x6b10 [ 1392.032871] FAULT_INJECTION: forcing a failure. [ 1392.032871] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.034178] ? __lock_acquire+0x5fc/0x3f20 [ 1392.034193] ? mark_buffer_dirty+0x95/0x480 [ 1392.034208] ? trace_hardirqs_on+0x10/0x10 [ 1392.058159] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1392.063530] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1392.068814] ? trace_hardirqs_on+0x10/0x10 [ 1392.073035] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1392.077864] ? ext4_es_lookup_extent+0x321/0xac0 [ 1392.082608] ? lock_acquire+0x170/0x3f0 [ 1392.086578] ext4_map_blocks+0x675/0x1730 [ 1392.090715] ? ext4_issue_zeroout+0x150/0x150 [ 1392.095193] ? __ext4_new_inode+0x27c/0x4eb0 [ 1392.099594] ext4_getblk+0x98/0x3f0 [ 1392.103227] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1392.107640] ext4_bread+0x6c/0x1a0 [ 1392.111178] ? ext4_getblk+0x3f0/0x3f0 [ 1392.115064] ? dquot_initialize_needed+0x240/0x240 [ 1392.119992] ext4_append+0x143/0x350 [ 1392.123717] ext4_mkdir+0x4c9/0xbd0 [ 1392.127346] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1392.132010] ? security_inode_mkdir+0xca/0x100 [ 1392.136594] vfs_mkdir+0x463/0x6e0 [ 1392.140125] SyS_mkdirat+0x1fd/0x270 [ 1392.143846] ? SyS_mknod+0x30/0x30 [ 1392.147384] ? fput_many+0xe/0x140 [ 1392.151002] ? do_syscall_64+0x4c/0x640 [ 1392.154971] ? SyS_mknod+0x30/0x30 [ 1392.158506] do_syscall_64+0x1d5/0x640 [ 1392.162391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.167579] RIP: 0033:0x7faed27e5307 [ 1392.171289] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1392.178993] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1392.186281] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1392.193546] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1392.200810] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1392.208071] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1392.230332] CPU: 0 PID: 24868 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1392.238233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1392.247583] Call Trace: [ 1392.250212] dump_stack+0x1b2/0x281 [ 1392.253852] should_fail.cold+0x10a/0x149 [ 1392.258094] should_failslab+0xd6/0x130 [ 1392.262157] kmem_cache_alloc+0x28e/0x3c0 [ 1392.266429] __d_alloc+0x2a/0xa20 [ 1392.269891] d_alloc+0x46/0x240 [ 1392.273176] __lookup_hash+0x101/0x270 [ 1392.277068] filename_create+0x156/0x3f0 [ 1392.281137] ? kern_path_mountpoint+0x40/0x40 [ 1392.285653] SyS_mkdirat+0x95/0x270 [ 1392.289371] ? SyS_mknod+0x30/0x30 [ 1392.292908] ? fput_many+0xe/0x140 [ 1392.296449] ? do_syscall_64+0x4c/0x640 [ 1392.300423] ? SyS_mknod+0x30/0x30 [ 1392.303964] do_syscall_64+0x1d5/0x640 [ 1392.307855] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.310455] hfs: unable to parse mount options [ 1392.313037] RIP: 0033:0x7fd7232e3307 [ 1392.313042] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 01:59:11 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 43) 01:59:11 executing program 4: pkey_alloc(0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x101000, 0x110) pkey_alloc(0x0, 0x0) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) (async) pkey_alloc(0x0, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x101000, 0x110) (async) 01:59:11 executing program 5: pkey_alloc(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 01:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x1, 0xfffffffffffffff8, 0x6) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1392.313051] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1392.313056] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1392.313061] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1392.313066] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1392.313071] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 01:59:11 executing program 5: pkey_alloc(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 01:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async, rerun: 64) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x1, 0xfffffffffffffff8, 0x6) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) (async, rerun: 32) accept4$netrom(r1, 0x0, 0x0, 0x0) (rerun: 32) [ 1392.481332] FAULT_INJECTION: forcing a failure. [ 1392.481332] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.492633] CPU: 0 PID: 24911 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1392.500517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1392.509864] Call Trace: [ 1392.512456] dump_stack+0x1b2/0x281 [ 1392.516085] should_fail.cold+0x10a/0x149 [ 1392.520292] should_failslab+0xd6/0x130 [ 1392.524269] kmem_cache_alloc+0x40/0x3c0 [ 1392.528332] __es_insert_extent+0x338/0x1360 [ 1392.532753] ext4_es_insert_extent+0x1b9/0x530 [ 1392.537336] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1392.543142] ext4_map_blocks+0x887/0x1730 [ 1392.547298] ? ext4_issue_zeroout+0x150/0x150 [ 1392.551797] ? __ext4_new_inode+0x27c/0x4eb0 [ 1392.556203] ext4_getblk+0x98/0x3f0 [ 1392.559813] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1392.564114] ext4_bread+0x6c/0x1a0 [ 1392.567633] ? ext4_getblk+0x3f0/0x3f0 [ 1392.571506] ? dquot_initialize_needed+0x240/0x240 [ 1392.576426] ext4_append+0x143/0x350 [ 1392.580122] ext4_mkdir+0x4c9/0xbd0 [ 1392.583739] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1392.588390] ? security_inode_mkdir+0xca/0x100 [ 1392.592953] vfs_mkdir+0x463/0x6e0 [ 1392.596477] SyS_mkdirat+0x1fd/0x270 [ 1392.600184] ? SyS_mknod+0x30/0x30 [ 1392.603708] ? fput_many+0xe/0x140 [ 1392.607229] ? do_syscall_64+0x4c/0x640 [ 1392.611181] ? SyS_mknod+0x30/0x30 [ 1392.614702] do_syscall_64+0x1d5/0x640 [ 1392.618571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.623746] RIP: 0033:0x7faed27e5307 [ 1392.627433] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1392.635120] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1392.642372] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1392.649713] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 [ 1392.656981] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1392.664228] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1392.673435] hfs: can't find a HFS filesystem on dev loop2 01:59:11 executing program 0: getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) getgroups(0x0, &(0x7f0000000100)) (async) getgroups(0x5, &(0x7f0000000040)=[0xee01, r1, r2, r0, r2]) r4 = getgid() syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x88, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="2b7fbee04b48567e512994e06a68881ce3ca537899", 0x15, 0x5}, {&(0x7f0000000100)="b3d49cead6e1255af8ea2ac7690acf031aedb720f070ca14ed1c8a61272ddbd4dcdae3ee3b9cdaed8c5ae8", 0x2b, 0x100000000}, {&(0x7f0000000140)="83d637a5fd36ee9af8b0fb24fcfdccb307615921460ccbcdc636661f2f1f40a1f2c16f95c4f543ea62e5cffb1f53443b8ffaf8d9bed7c99345", 0x39, 0x4a2b7674}, {&(0x7f0000000180)="227934d0aa158529d47363291ba51cd9ccda1454b8a2f84ab92517edb69fc5e878e9167f9b7ef650230c344ddc2e4279573ac42912a9921d433843b6f2b1405a6e7e9231d3184eb662eee583ddda45c787e831663f7798d01730122f767af5a2b0b13d145a016cc95467ee873a029a2dd1eb492844d453928ab0f3c3cd5f0d962d4fe1ab15f834e88af2", 0x8a, 0x7}], 0x800000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r4}}, {}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3f}}, {@part={'part', 0x3d, 0x6}}, {@type={'type', 0x3d, "e0f4c2a4"}}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x10}}, {@appraise_type}]}) (async) setgroups(0x1, &(0x7f0000000400)=[r2, r3, r4]) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0xa004) 01:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x1, 0xfffffffffffffff8, 0x6) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x1, 0xfffffffffffffff8, 0x6) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd36}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0ad}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008000) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) r4 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000200)="18e2cae6928ff06cd911d573c0577508401433d0d122c5188d0ff56b53ff42ece5071ea5f024c90e197807e0bc90b94a8a1f2a30a83a4f73e3047ad2f61f5015d8f1e1c5cf2b0614af421c17c752d88f718919417c2c373e0c604167cee2", 0x5e}, {&(0x7f0000000280)="4e9a141331052f8e48cc4ca2d284b7a747c6563f5031c14c79c16b0ecab1a39be333d1f762937b88bac5f570a5accda8b2cd8d5f44adef6c7b4b19a36dc4ecea7fe866a6df7e9e5af4df539adcd283bd25b58dcdbb03d86fdc5c4ebcca988b15004dfbd3a802b69bc983943e302167caab2842bade473efd1e8cc4a99553a5a385a8bb33f8ec1240c8862a7525d10037a35cc01d053fdf16ac4383459cd71f567070855d6b57583da8c01eaa1c560362ad1777a592c7154b98608ee0a95a6b620bf25ccaf8a7844177c0e888583e7a028a150c47773d7cad155a8d5c", 0xdc, 0xeed}, {&(0x7f0000000700)="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", 0x1000, 0x1}, {&(0x7f0000000380)="0bb6e4a96d246416bc639957736a8bfe44071dbfc1341e8e17dfb2ddcc97b986ffbef6429731a089790971b7ad5b27558c92359033c9190609ff33398e5bba82a7ac2ccf3cf8a63b6b7beafcbd60dde6cb8e29cfd78a55c20f56e0cb8ee79ddfadb228c4d4c9e77ddcc908a3946a56f52634a0312109f99ec4174ce3e289c5b4e6228034d4a6c725aa3f8042", 0x8c, 0x7fffffff}, {&(0x7f0000000480)="c6ca7ef56a919b9b1571eb650ac200e624717d25472e0b6f65e971758bbae9ffc10f6182b4fbd86efbf3c39094e043b48f162da46a39100586c3937f84cb40b88556cc093bf754efc2be9a5ce3", 0x4d}, {&(0x7f0000001700)="9ed38fc695e15a52c7f2541426c8f9767535101ed0c8483df833fa1fc8cff543b6625a0884b438e8f91ea489b279a2b8c9688563ed7da1366bcef9f8675fb26f1f4c4a56fda9e5e5818b2cfa5dedc36ab8d918b7e32aa41d83b8948069f2c7fe1b956f3054f67f51bce93aac78962abe54199f307879a913ebca15116b2fce47d9aea8302b", 0x85, 0xd6}, {&(0x7f00000017c0)="ba2d7e603b0211cf9e4ef02cfc412b0539e24991559273e857a6a305fa13b9c7a2e741711fd89a7a13fe9cb8757dbf8c92d2a1f211fe86e6e3fcee429f8118a116782536dc6b558d2c98c640e52a1bc5ff8ed44156e64c8a8f41267d2177eec767197266f14230fe1ba5cec0baab7614ee2415485327cce918f6025099d03c43f1b8d7c870fbcba4aea61e7629bc3e80adfe718514c3adab0a5ffc8995c7", 0x9e, 0x5}, {&(0x7f0000001880)="a44e23f9e4e254b2e386901515d28eba81a8f82d5dddef070c7efbff842ae036007b78b6a58c8d5572e3668adc18db11fbec248fd7d063a6fc6271d65b3ed303dd5203100bf90c5d72cde41a9dfa407bb8b3f7a3e304a758f3e8d5d39f4d5c5fb96185fcc230ec542e77755fcf5ab6f86aadbabe2ac6a37dbf31d15ece52e9539188cb014311294bb127e2f6c04823aced09d457dbf0e468479e4c9717e795b148f1ca15cd81dc9bf4c845ec6bfdf501ffe40f", 0xb3, 0x2}, {&(0x7f0000001940)="855b3ccef82c9859a3c92f1454f50ca0a1acc26d2e3e1ca57284780c9b038dfb74f83ddf6c197fdaefc3e25a045b0c1399b660b46ede1ef67c6a308d1f1ca93112bcff8f0e812580ed32a89eceef9169d97c26a10ad3bcecb553a9bd7761d87e233e166ce2dbcab2d697baecf83ad3e2b56145910a", 0x75, 0x5}], 0x0, &(0x7f0000001ac0)={[{@session={'session', 0x3d, 0x10001}}, {@creator={'creator', 0x3d, "ecd814c8"}}, {@dir_umask={'dir_umask', 0x3d, 0xf03}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffc01}}], [{@dont_hash}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt}]}) openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x200, 0x4e) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x110, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24081) 01:59:11 executing program 4: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) 01:59:11 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 44) 01:59:11 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 38) 01:59:11 executing program 4: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) pkey_alloc(0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) (async) pkey_alloc(0x0, 0x0) (async) mlockall(0x6) (async) [ 1392.807813] FAULT_INJECTION: forcing a failure. [ 1392.807813] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.830017] hfs: unable to parse mount options [ 1392.837423] hfs: unable to parse mount options [ 1392.844893] CPU: 1 PID: 24946 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1392.852788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1392.862139] Call Trace: [ 1392.864734] dump_stack+0x1b2/0x281 [ 1392.868373] should_fail.cold+0x10a/0x149 [ 1392.869529] FAULT_INJECTION: forcing a failure. [ 1392.869529] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.872556] should_failslab+0xd6/0x130 [ 1392.872569] kmem_cache_alloc+0x28e/0x3c0 [ 1392.872580] __d_alloc+0x2a/0xa20 [ 1392.872588] ? d_lookup+0x172/0x220 [ 1392.872598] d_alloc+0x46/0x240 [ 1392.872609] __lookup_hash+0x101/0x270 [ 1392.872620] filename_create+0x156/0x3f0 [ 1392.872631] ? kern_path_mountpoint+0x40/0x40 [ 1392.872646] SyS_mkdirat+0x95/0x270 [ 1392.872656] ? SyS_mknod+0x30/0x30 [ 1392.872663] ? fput_many+0xe/0x140 [ 1392.872673] ? do_syscall_64+0x4c/0x640 [ 1392.872681] ? SyS_mknod+0x30/0x30 [ 1392.872690] do_syscall_64+0x1d5/0x640 [ 1392.872704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.872712] RIP: 0033:0x7fd7232e3307 [ 1392.872723] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1392.953251] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1392.960598] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1392.967851] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1392.975102] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1392.982353] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1392.989623] CPU: 0 PID: 24958 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1392.997504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 01:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r5, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x326200656fdeae9a) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1393.006851] Call Trace: [ 1393.009440] dump_stack+0x1b2/0x281 [ 1393.013073] should_fail.cold+0x10a/0x149 [ 1393.017231] should_failslab+0xd6/0x130 [ 1393.021207] kmem_cache_alloc+0x40/0x3c0 [ 1393.025272] __es_insert_extent+0x338/0x1360 [ 1393.029691] ext4_es_insert_extent+0x1b9/0x530 [ 1393.034280] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1393.040086] ext4_map_blocks+0x887/0x1730 [ 1393.044244] ? ext4_issue_zeroout+0x150/0x150 [ 1393.048735] ? __ext4_new_inode+0x27c/0x4eb0 [ 1393.053147] ext4_getblk+0x98/0x3f0 01:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r5, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x326200656fdeae9a) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) (async) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r5, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x326200656fdeae9a) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) [ 1393.056796] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1393.061122] ext4_bread+0x6c/0x1a0 [ 1393.064666] ? ext4_getblk+0x3f0/0x3f0 [ 1393.068550] ? dquot_initialize_needed+0x240/0x240 [ 1393.073482] ext4_append+0x143/0x350 [ 1393.077203] ext4_mkdir+0x4c9/0xbd0 [ 1393.080840] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1393.085541] ? security_inode_mkdir+0xca/0x100 [ 1393.090114] vfs_mkdir+0x463/0x6e0 [ 1393.093651] SyS_mkdirat+0x1fd/0x270 [ 1393.097421] ? SyS_mknod+0x30/0x30 [ 1393.100938] ? fput_many+0xe/0x140 [ 1393.104459] ? do_syscall_64+0x4c/0x640 [ 1393.108413] ? SyS_mknod+0x30/0x30 [ 1393.111934] do_syscall_64+0x1d5/0x640 [ 1393.115810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1393.120980] RIP: 0033:0x7faed27e5307 [ 1393.124667] RSP: 002b:00007faed115af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1393.132361] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e5307 [ 1393.139642] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1393.146893] RBP: 00007faed115b1d0 R08: 0000000000000000 R09: 00007faed115b1d0 01:59:12 executing program 0: getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) getgroups(0x0, &(0x7f0000000100)) getgroups(0x5, &(0x7f0000000040)=[0xee01, r1, r2, r0, r2]) r4 = getgid() syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x88, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="2b7fbee04b48567e512994e06a68881ce3ca537899", 0x15, 0x5}, {&(0x7f0000000100)="b3d49cead6e1255af8ea2ac7690acf031aedb720f070ca14ed1c8a61272ddbd4dcdae3ee3b9cdaed8c5ae8", 0x2b, 0x100000000}, {&(0x7f0000000140)="83d637a5fd36ee9af8b0fb24fcfdccb307615921460ccbcdc636661f2f1f40a1f2c16f95c4f543ea62e5cffb1f53443b8ffaf8d9bed7c99345", 0x39, 0x4a2b7674}, {&(0x7f0000000180)="227934d0aa158529d47363291ba51cd9ccda1454b8a2f84ab92517edb69fc5e878e9167f9b7ef650230c344ddc2e4279573ac42912a9921d433843b6f2b1405a6e7e9231d3184eb662eee583ddda45c787e831663f7798d01730122f767af5a2b0b13d145a016cc95467ee873a029a2dd1eb492844d453928ab0f3c3cd5f0d962d4fe1ab15f834e88af2", 0x8a, 0x7}], 0x800000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r4}}, {}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3f}}, {@part={'part', 0x3d, 0x6}}, {@type={'type', 0x3d, "e0f4c2a4"}}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x10}}, {@appraise_type}]}) setgroups(0x1, &(0x7f0000000400)=[r2, r3, r4]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0xa004) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xee00]) (async) getgroups(0x0, &(0x7f0000000100)) (async) getgroups(0x5, &(0x7f0000000040)=[0xee01, r1, r2, r0, r2]) (async) getgid() (async) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x88, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="2b7fbee04b48567e512994e06a68881ce3ca537899", 0x15, 0x5}, {&(0x7f0000000100)="b3d49cead6e1255af8ea2ac7690acf031aedb720f070ca14ed1c8a61272ddbd4dcdae3ee3b9cdaed8c5ae8", 0x2b, 0x100000000}, {&(0x7f0000000140)="83d637a5fd36ee9af8b0fb24fcfdccb307615921460ccbcdc636661f2f1f40a1f2c16f95c4f543ea62e5cffb1f53443b8ffaf8d9bed7c99345", 0x39, 0x4a2b7674}, {&(0x7f0000000180)="227934d0aa158529d47363291ba51cd9ccda1454b8a2f84ab92517edb69fc5e878e9167f9b7ef650230c344ddc2e4279573ac42912a9921d433843b6f2b1405a6e7e9231d3184eb662eee583ddda45c787e831663f7798d01730122f767af5a2b0b13d145a016cc95467ee873a029a2dd1eb492844d453928ab0f3c3cd5f0d962d4fe1ab15f834e88af2", 0x8a, 0x7}], 0x800000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r4}}, {}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3f}}, {@part={'part', 0x3d, 0x6}}, {@type={'type', 0x3d, "e0f4c2a4"}}], [{@smackfsroot}, {@fsname}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, ':^^^&)/-*{!^}{*(*[+,:\'('}}, {@smackfsroot}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x10}}, {@appraise_type}]}) (async) setgroups(0x1, &(0x7f0000000400)=[r2, r3, r4]) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0xa004) (async) 01:59:12 executing program 4: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) pkey_alloc(0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) (async) pkey_alloc(0x0, 0x0) (async) mlockall(0x6) (async) 01:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r5, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x326200656fdeae9a) (async, rerun: 64) accept4$netrom(r1, 0x0, 0x0, 0x0) (rerun: 64) 01:59:12 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 39) [ 1393.154142] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1393.161391] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1393.173498] Bluetooth: hci0 command 0x0401 tx timeout 01:59:12 executing program 5: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) 01:59:12 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) 01:59:12 executing program 5: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) [ 1393.283214] hfs: can't find a HFS filesystem on dev loop2 [ 1393.289380] FAULT_INJECTION: forcing a failure. [ 1393.289380] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.300673] CPU: 0 PID: 25006 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1393.308564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1393.318295] Call Trace: [ 1393.320888] dump_stack+0x1b2/0x281 [ 1393.324529] should_fail.cold+0x10a/0x149 [ 1393.328690] should_failslab+0xd6/0x130 [ 1393.332701] kmem_cache_alloc+0x40/0x3c0 [ 1393.336785] __es_insert_extent+0x338/0x1360 [ 1393.341197] ? __es_shrink+0x8c0/0x8c0 [ 1393.345089] ? lock_acquire+0x170/0x3f0 [ 1393.347466] hfs: unable to parse mount options [ 1393.349079] ? ext4_es_insert_extent+0x11f/0x530 [ 1393.358547] ext4_es_insert_extent+0x1b9/0x530 [ 1393.363125] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1393.368915] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1393.374349] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 1393.380133] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 1393.384706] ? __lock_acquire+0x5fc/0x3f20 [ 1393.388930] ? __lock_acquire+0x5fc/0x3f20 [ 1393.393166] ? mark_buffer_dirty+0x95/0x480 [ 1393.397465] ? trace_hardirqs_on+0x10/0x10 [ 1393.401676] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1393.407020] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1393.412197] ? trace_hardirqs_on+0x10/0x10 [ 1393.416421] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1393.421259] ? ext4_es_lookup_extent+0x321/0xac0 [ 1393.426013] ? lock_acquire+0x170/0x3f0 [ 1393.429976] ? lock_acquire+0x170/0x3f0 [ 1393.433948] ? ext4_map_blocks+0x29f/0x1730 [ 1393.438256] ext4_map_blocks+0xb19/0x1730 [ 1393.442399] ? ext4_issue_zeroout+0x150/0x150 [ 1393.446894] ? __ext4_new_inode+0x27c/0x4eb0 [ 1393.451314] ext4_getblk+0x98/0x3f0 [ 1393.454949] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1393.459256] ext4_bread+0x6c/0x1a0 [ 1393.462778] ? ext4_getblk+0x3f0/0x3f0 [ 1393.466648] ? dquot_initialize_needed+0x240/0x240 [ 1393.471560] ext4_append+0x143/0x350 [ 1393.475264] ext4_mkdir+0x4c9/0xbd0 [ 1393.478874] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1393.483524] ? security_inode_mkdir+0xca/0x100 [ 1393.488094] vfs_mkdir+0x463/0x6e0 [ 1393.491618] SyS_mkdirat+0x1fd/0x270 [ 1393.495313] ? SyS_mknod+0x30/0x30 [ 1393.498917] ? fput_many+0xe/0x140 [ 1393.502434] ? do_syscall_64+0x4c/0x640 [ 1393.506386] ? SyS_mknod+0x30/0x30 [ 1393.509916] do_syscall_64+0x1d5/0x640 [ 1393.513786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1393.518952] RIP: 0033:0x7fd7232e3307 [ 1393.522636] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 01:59:12 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 45) 01:59:12 executing program 4: pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) 01:59:12 executing program 5: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) pkey_alloc(0x0, 0x0) mlockall(0x6) 01:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000080) r2 = dup(r0) accept4$netrom(r2, 0x0, 0x0, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) r4 = signalfd(r0, &(0x7f0000000140)={[0x7]}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@none, 0x2, 0x7ff, 0x8000, 0x9, 0x100, "e325c431c7af15d9783446dbd315cfe7d39d2ebee2267b06e61946b100e4ac412fd8e3bd84c6e73055ba1e7e2806a797305dff421519a36cfaa368754eae198d43395fa9085f7ba62b425b4fa0ca14fe1fa7c4c1d7877a6eb40f0f512b2cbbc1e3823e9b3ed08dfac2e6ba5a0f037b19042d996df6d3f5bd003b40417344be1d"}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x16e, 0x4) 01:59:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4a854) [ 1393.530417] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1393.537664] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1393.544919] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1393.552174] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1393.559439] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1393.574629] hfs: can't find a HFS filesystem on dev loop3 01:59:12 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 40) 01:59:12 executing program 4: pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) 01:59:12 executing program 5: pkey_alloc(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffff3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000015) mlockall(0x6) 01:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000080) (async) r2 = dup(r0) accept4$netrom(r2, 0x0, 0x0, 0x0) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) r4 = signalfd(r0, &(0x7f0000000140)={[0x7]}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@none, 0x2, 0x7ff, 0x8000, 0x9, 0x100, "e325c431c7af15d9783446dbd315cfe7d39d2ebee2267b06e61946b100e4ac412fd8e3bd84c6e73055ba1e7e2806a797305dff421519a36cfaa368754eae198d43395fa9085f7ba62b425b4fa0ca14fe1fa7c4c1d7877a6eb40f0f512b2cbbc1e3823e9b3ed08dfac2e6ba5a0f037b19042d996df6d3f5bd003b40417344be1d"}) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x16e, 0x4) 01:59:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4a854) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4a854) (async) [ 1393.670951] FAULT_INJECTION: forcing a failure. [ 1393.670951] name failslab, interval 1, probability 0, space 0, times 0 01:59:12 executing program 4: r0 = pkey_alloc(0x0, 0x7) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, r1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, r0) [ 1393.715650] FAULT_INJECTION: forcing a failure. [ 1393.715650] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.744478] CPU: 0 PID: 25041 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1393.752392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1393.761754] Call Trace: [ 1393.764347] dump_stack+0x1b2/0x281 [ 1393.767986] should_fail.cold+0x10a/0x149 [ 1393.772141] should_failslab+0xd6/0x130 [ 1393.776125] __kmalloc_track_caller+0x2bc/0x400 [ 1393.780798] ? strndup_user+0x5b/0xf0 [ 1393.784615] memdup_user+0x22/0xa0 [ 1393.788157] strndup_user+0x5b/0xf0 [ 1393.791786] ? copy_mnt_ns+0xa30/0xa30 [ 1393.795674] SyS_mount+0x39/0x120 [ 1393.799217] ? copy_mnt_ns+0xa30/0xa30 [ 1393.803117] do_syscall_64+0x1d5/0x640 [ 1393.807020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1393.812213] RIP: 0033:0x7faed27e772a 01:59:12 executing program 4: r0 = pkey_alloc(0x0, 0x7) (async) pkey_alloc(0x0, 0x0) (async) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, r1) (async) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, r0) [ 1393.815923] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1393.823629] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1393.830899] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1393.838169] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1393.845459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1393.852730] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1393.878327] CPU: 0 PID: 25050 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1393.886249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1393.895628] Call Trace: [ 1393.898218] dump_stack+0x1b2/0x281 [ 1393.901856] should_fail.cold+0x10a/0x149 [ 1393.906017] should_failslab+0xd6/0x130 [ 1393.910004] __kmalloc+0x2c1/0x400 [ 1393.913544] ? ext4_find_extent+0x879/0xbc0 [ 1393.917870] ext4_find_extent+0x879/0xbc0 [ 1393.922022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1393.927474] ext4_ext_map_blocks+0x19a/0x6b10 [ 1393.931979] ? __lock_acquire+0x5fc/0x3f20 [ 1393.936231] ? __lock_acquire+0x5fc/0x3f20 [ 1393.940478] ? mark_buffer_dirty+0x95/0x480 [ 1393.944808] ? trace_hardirqs_on+0x10/0x10 [ 1393.949042] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1393.956233] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1393.961602] ? trace_hardirqs_on+0x10/0x10 [ 1393.965840] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1393.970693] ? ext4_es_lookup_extent+0x321/0xac0 [ 1393.975456] ? lock_acquire+0x170/0x3f0 [ 1393.979434] ? lock_acquire+0x170/0x3f0 [ 1393.983410] ? ext4_map_blocks+0x29f/0x1730 [ 1393.987744] ext4_map_blocks+0xb19/0x1730 [ 1393.991900] ? ext4_issue_zeroout+0x150/0x150 [ 1393.996395] ? __ext4_new_inode+0x27c/0x4eb0 [ 1394.000812] ext4_getblk+0x98/0x3f0 [ 1394.004442] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1394.008774] ext4_bread+0x6c/0x1a0 [ 1394.012313] ? ext4_getblk+0x3f0/0x3f0 [ 1394.016203] ? dquot_initialize_needed+0x240/0x240 [ 1394.021138] ext4_append+0x143/0x350 [ 1394.024850] ext4_mkdir+0x4c9/0xbd0 [ 1394.028478] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1394.033136] ? security_inode_mkdir+0xca/0x100 [ 1394.037703] vfs_mkdir+0x463/0x6e0 [ 1394.041240] SyS_mkdirat+0x1fd/0x270 [ 1394.044953] ? SyS_mknod+0x30/0x30 [ 1394.048479] ? fput_many+0xe/0x140 [ 1394.052000] ? do_syscall_64+0x4c/0x640 [ 1394.055953] ? SyS_mknod+0x30/0x30 [ 1394.059472] do_syscall_64+0x1d5/0x640 [ 1394.063357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1394.068543] RIP: 0033:0x7fd7232e3307 [ 1394.072251] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1394.079956] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1394.087210] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1394.094458] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1394.101727] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1394.108973] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1394.118594] hfs: can't find a HFS filesystem on dev loop3 01:59:13 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 46) 01:59:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000080) r2 = dup(r0) accept4$netrom(r2, 0x0, 0x0, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) r4 = signalfd(r0, &(0x7f0000000140)={[0x7]}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000180)={@none, 0x2, 0x7ff, 0x8000, 0x9, 0x100, "e325c431c7af15d9783446dbd315cfe7d39d2ebee2267b06e61946b100e4ac412fd8e3bd84c6e73055ba1e7e2806a797305dff421519a36cfaa368754eae198d43395fa9085f7ba62b425b4fa0ca14fe1fa7c4c1d7877a6eb40f0f512b2cbbc1e3823e9b3ed08dfac2e6ba5a0f037b19042d996df6d3f5bd003b40417344be1d"}) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async, rerun: 32) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x16e, 0x4) 01:59:13 executing program 5: pkey_alloc(0x0, 0x0) mlockall(0x6) 01:59:13 executing program 4: r0 = pkey_alloc(0x0, 0x7) (async) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, r1) (async) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, r0) 01:59:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4a854) (rerun: 64) 01:59:13 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 41) 01:59:13 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x460400, 0x0) r5 = dup(0xffffffffffffffff) accept4$netrom(r5, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) 01:59:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:13 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r0) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @bcast, @null, @remote, @default]}, &(0x7f0000000080)=0x48) 01:59:13 executing program 5: mlockall(0x6) [ 1394.280259] FAULT_INJECTION: forcing a failure. [ 1394.280259] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.291683] CPU: 0 PID: 25105 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1394.299566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1394.308933] Call Trace: [ 1394.311525] dump_stack+0x1b2/0x281 [ 1394.315157] should_fail.cold+0x10a/0x149 [ 1394.319667] should_failslab+0xd6/0x130 [ 1394.323653] kmem_cache_alloc+0x40/0x3c0 01:59:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) (async, rerun: 32) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32) accept4$netrom(r1, 0x0, 0x0, 0x0) (rerun: 32) 01:59:13 executing program 4: pkey_alloc(0x0, 0x0) (async, rerun: 32) pkey_alloc(0x0, 0x1) (async, rerun: 32) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r0) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @bcast, @null, @remote, @default]}, &(0x7f0000000080)=0x48) [ 1394.327719] __es_insert_extent+0x338/0x1360 [ 1394.332126] ? __es_shrink+0x8c0/0x8c0 [ 1394.336039] ? lock_acquire+0x170/0x3f0 [ 1394.340113] ? ext4_es_insert_extent+0x11f/0x530 [ 1394.344877] ext4_es_insert_extent+0x1b9/0x530 [ 1394.349461] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1394.355260] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1394.360711] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 1394.366514] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 1394.371101] ? __lock_acquire+0x5fc/0x3f20 [ 1394.375339] ? __lock_acquire+0x5fc/0x3f20 [ 1394.379581] ? mark_buffer_dirty+0x95/0x480 [ 1394.383909] ? trace_hardirqs_on+0x10/0x10 [ 1394.388146] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1394.393546] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1394.398733] ? trace_hardirqs_on+0x10/0x10 [ 1394.402969] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1394.407821] ? ext4_es_lookup_extent+0x321/0xac0 [ 1394.412578] ? lock_acquire+0x170/0x3f0 [ 1394.414856] FAULT_INJECTION: forcing a failure. [ 1394.414856] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.416556] ? lock_acquire+0x170/0x3f0 [ 1394.416568] ? ext4_map_blocks+0x29f/0x1730 [ 1394.416585] ext4_map_blocks+0xb19/0x1730 [ 1394.416604] ? ext4_issue_zeroout+0x150/0x150 [ 1394.444650] ? __ext4_new_inode+0x27c/0x4eb0 [ 1394.449049] ext4_getblk+0x98/0x3f0 [ 1394.452662] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1394.456976] ext4_bread+0x6c/0x1a0 [ 1394.460500] ? ext4_getblk+0x3f0/0x3f0 [ 1394.464370] ? dquot_initialize_needed+0x240/0x240 [ 1394.469284] ext4_append+0x143/0x350 [ 1394.472988] ext4_mkdir+0x4c9/0xbd0 [ 1394.476614] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1394.481275] ? security_inode_mkdir+0xca/0x100 [ 1394.485854] vfs_mkdir+0x463/0x6e0 [ 1394.489386] SyS_mkdirat+0x1fd/0x270 [ 1394.493089] ? SyS_mknod+0x30/0x30 [ 1394.496614] ? fput_many+0xe/0x140 [ 1394.500139] ? do_syscall_64+0x4c/0x640 [ 1394.504104] ? SyS_mknod+0x30/0x30 [ 1394.507631] do_syscall_64+0x1d5/0x640 [ 1394.511508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1394.516680] RIP: 0033:0x7fd7232e3307 [ 1394.520375] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1394.528067] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1394.535323] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1394.542664] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1394.549935] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1394.557187] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1394.564454] CPU: 1 PID: 25110 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1394.572604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1394.581958] Call Trace: [ 1394.584544] dump_stack+0x1b2/0x281 [ 1394.588176] should_fail.cold+0x10a/0x149 [ 1394.592338] should_failslab+0xd6/0x130 [ 1394.596321] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1394.600988] ? copy_mnt_ns+0xa30/0xa30 [ 1394.604882] copy_mount_options+0x59/0x2f0 [ 1394.609116] ? copy_mnt_ns+0xa30/0xa30 [ 1394.613010] SyS_mount+0x84/0x120 [ 1394.616463] ? copy_mnt_ns+0xa30/0xa30 [ 1394.620352] do_syscall_64+0x1d5/0x640 [ 1394.624249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1394.629445] RIP: 0033:0x7faed27e772a [ 1394.633161] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1394.640870] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1394.648149] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1394.655420] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1394.662720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1394.669991] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:13 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 47) 01:59:13 executing program 5: mlockall(0x0) 01:59:13 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x1) (async) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r0) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @bcast, @null, @remote, @default]}, &(0x7f0000000080)=0x48) 01:59:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:13 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x460400, 0x0) r5 = dup(0xffffffffffffffff) accept4$netrom(r5, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x460400, 0x0) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r5, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) (async) 01:59:13 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 42) [ 1394.684533] hfs: can't find a HFS filesystem on dev loop3 01:59:13 executing program 5: mlockall(0x0) 01:59:13 executing program 1: socketpair(0x2b, 0x5, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000380)={@any, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffc0}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x203}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044054}, 0x20004080) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000003c0)={0xffff, 0x0, 0x7, 0xf57}, 0x10) accept4$netrom(r8, 0x0, 0x0, 0x1000) [ 1394.825715] FAULT_INJECTION: forcing a failure. [ 1394.825715] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.849348] CPU: 1 PID: 25163 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1394.857265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1394.866623] Call Trace: [ 1394.869219] dump_stack+0x1b2/0x281 [ 1394.872862] should_fail.cold+0x10a/0x149 [ 1394.877012] should_failslab+0xd6/0x130 [ 1394.880986] __kmalloc_track_caller+0x2bc/0x400 [ 1394.885658] ? strndup_user+0x5b/0xf0 [ 1394.889466] memdup_user+0x22/0xa0 [ 1394.893015] strndup_user+0x5b/0xf0 [ 1394.896640] ? copy_mnt_ns+0xa30/0xa30 [ 1394.900529] SyS_mount+0x39/0x120 [ 1394.903981] ? copy_mnt_ns+0xa30/0xa30 [ 1394.907868] do_syscall_64+0x1d5/0x640 [ 1394.911765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1394.916952] RIP: 0033:0x7faed27e772a [ 1394.920658] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1394.928366] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1394.935639] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1394.942913] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1394.945255] FAULT_INJECTION: forcing a failure. [ 1394.945255] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.950188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1394.968614] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:13 executing program 1: socketpair(0x2b, 0x5, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000380)={@any, 0x3}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffc0}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x203}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044054}, 0x20004080) (async, rerun: 64) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) (async, rerun: 64) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000003c0)={0xffff, 0x0, 0x7, 0xf57}, 0x10) accept4$netrom(r8, 0x0, 0x0, 0x1000) 01:59:13 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = dup(0xffffffffffffffff) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x460400, 0x0) r5 = dup(0xffffffffffffffff) accept4$netrom(r5, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r1, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x460400, 0x0) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r5, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) (async) 01:59:13 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) 01:59:13 executing program 5: mlockall(0x0) [ 1394.975893] CPU: 0 PID: 25154 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1394.984478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1394.993834] Call Trace: [ 1394.996426] dump_stack+0x1b2/0x281 [ 1395.000063] should_fail.cold+0x10a/0x149 [ 1395.004320] should_failslab+0xd6/0x130 [ 1395.008312] __kmalloc+0x2c1/0x400 [ 1395.011854] ? ext4_find_extent+0x879/0xbc0 [ 1395.016186] ext4_find_extent+0x879/0xbc0 [ 1395.020350] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1395.025808] ext4_ext_map_blocks+0x19a/0x6b10 [ 1395.030323] ? __lock_acquire+0x5fc/0x3f20 [ 1395.034570] ? mark_buffer_dirty+0x95/0x480 [ 1395.038924] ? trace_hardirqs_on+0x10/0x10 [ 1395.043193] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1395.048553] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1395.053753] ? trace_hardirqs_on+0x10/0x10 [ 1395.057990] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1395.062839] ? ext4_es_lookup_extent+0x321/0xac0 [ 1395.067602] ? lock_acquire+0x170/0x3f0 [ 1395.071577] ? lock_acquire+0x170/0x3f0 [ 1395.075551] ? ext4_map_blocks+0x623/0x1730 [ 1395.079892] ext4_map_blocks+0x675/0x1730 [ 1395.084060] ? ext4_issue_zeroout+0x150/0x150 [ 1395.088564] ? __ext4_new_inode+0x27c/0x4eb0 [ 1395.092984] ext4_getblk+0x98/0x3f0 [ 1395.096696] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1395.101024] ext4_bread+0x6c/0x1a0 [ 1395.104571] ? ext4_getblk+0x3f0/0x3f0 [ 1395.108453] ? dquot_initialize_needed+0x240/0x240 [ 1395.113396] ext4_append+0x143/0x350 [ 1395.117131] ext4_mkdir+0x4c9/0xbd0 [ 1395.120762] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1395.125435] ? security_inode_mkdir+0xca/0x100 [ 1395.130020] vfs_mkdir+0x463/0x6e0 [ 1395.133566] SyS_mkdirat+0x1fd/0x270 [ 1395.137284] ? SyS_mknod+0x30/0x30 [ 1395.140822] ? fput_many+0xe/0x140 [ 1395.144365] ? do_syscall_64+0x4c/0x640 [ 1395.148338] ? SyS_mknod+0x30/0x30 [ 1395.151877] do_syscall_64+0x1d5/0x640 [ 1395.155786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1395.160975] RIP: 0033:0x7fd7232e3307 [ 1395.164682] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 01:59:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 48) 01:59:14 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x2) 01:59:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2148000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newtfilter={0x60, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xa, 0xfff3}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x828}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xf6dd}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:14 executing program 5: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x2) 01:59:14 executing program 1: socketpair(0x2b, 0x5, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000380)={@any, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffc0}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x203}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044054}, 0x20004080) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) (async) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000003c0)={0xffff, 0x0, 0x7, 0xf57}, 0x10) (async) accept4$netrom(r8, 0x0, 0x0, 0x1000) [ 1395.172396] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1395.179663] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1395.186939] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1395.194209] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1395.201483] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1395.253098] Bluetooth: hci0 command 0x0401 tx timeout [ 1395.342794] FAULT_INJECTION: forcing a failure. [ 1395.342794] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.368549] CPU: 1 PID: 25238 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1395.376459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1395.385813] Call Trace: [ 1395.388408] dump_stack+0x1b2/0x281 [ 1395.392051] should_fail.cold+0x10a/0x149 [ 1395.396212] should_failslab+0xd6/0x130 [ 1395.400191] __kmalloc_track_caller+0x2bc/0x400 [ 1395.404866] ? kstrdup_const+0x35/0x60 [ 1395.408755] ? lock_downgrade+0x740/0x740 [ 1395.412909] kstrdup+0x36/0x70 [ 1395.416099] kstrdup_const+0x35/0x60 [ 1395.419816] alloc_vfsmnt+0xe0/0x7f0 [ 1395.423536] ? _raw_read_unlock+0x29/0x40 [ 1395.427691] vfs_kern_mount.part.0+0x27/0x470 [ 1395.432200] do_mount+0xe65/0x2a30 [ 1395.435750] ? __do_page_fault+0x159/0xad0 [ 1395.439989] ? retint_kernel+0x2d/0x2d [ 1395.443885] ? copy_mount_string+0x40/0x40 [ 1395.448136] ? memset+0x20/0x40 [ 1395.451399] ? copy_mount_options+0x1fa/0x2f0 [ 1395.456928] ? copy_mnt_ns+0xa30/0xa30 [ 1395.460918] SyS_mount+0xa8/0x120 [ 1395.464364] ? copy_mnt_ns+0xa30/0xa30 [ 1395.468237] do_syscall_64+0x1d5/0x640 [ 1395.472140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1395.477330] RIP: 0033:0x7faed27e772a [ 1395.481025] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 01:59:14 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 43) 01:59:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2148000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newtfilter={0x60, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xa, 0xfff3}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x828}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xf6dd}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:14 executing program 5: socketpair(0x2b, 0x5, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000380)={@any, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffc0}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x203}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044054}, 0x20004080) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000003c0)={0xffff, 0x0, 0x7, 0xf57}, 0x10) accept4$netrom(r8, 0x0, 0x0, 0x1000) 01:59:14 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x2) 01:59:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) [ 1395.488825] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1395.496088] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1395.503351] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1395.510617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1395.517897] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 49) 01:59:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2148000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newtfilter={0x60, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xa, 0xfff3}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x828}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xf6dd}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) 01:59:14 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x150, 0x150, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{}, {0xe, 0x7ff}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x80, 0x4}, @struct={0xd, 0xa, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x5, 0x8}, {0x3, 0x3}, {0x3, 0x4, 0x2}, {0xb, 0x2, 0x5}, {0xe, 0x2, 0x8}, {0x6, 0x1}, {0x0, 0x0, 0x55}, {0x0, 0x3, 0x48}, {0x8, 0x4, 0x5}, {0x2, 0x5, 0x4}]}, @struct={0xd, 0x9, 0x0, 0x4, 0x0, 0x7ff, [{0x1, 0x1, 0x1}, {0xe, 0x2, 0x1}, {0xa, 0x2, 0x6}, {0x3, 0x2}, {0x9, 0x4, 0x4}, {0xe, 0x0, 0x3}, {0x10, 0x3, 0x8001}, {0x3, 0x3, 0x1}, {0x3, 0x1, 0x6}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x39, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/84, 0x16b, 0x54}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x3) [ 1395.636881] FAULT_INJECTION: forcing a failure. [ 1395.636881] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.664216] FAULT_INJECTION: forcing a failure. [ 1395.664216] name failslab, interval 1, probability 0, space 0, times 0 01:59:14 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x8, &(0x7f0000000100)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000000), 0x100800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:14 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x8, &(0x7f0000000100)=0x4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000000), 0x100800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) [ 1395.693646] CPU: 0 PID: 25270 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1395.701548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1395.710903] Call Trace: [ 1395.713497] dump_stack+0x1b2/0x281 [ 1395.717138] should_fail.cold+0x10a/0x149 [ 1395.721291] should_failslab+0xd6/0x130 [ 1395.725270] kmem_cache_alloc+0x28e/0x3c0 [ 1395.729431] ext4_mb_new_blocks+0x514/0x3db0 [ 1395.733857] ? ext4_find_extent+0x6f7/0xbc0 [ 1395.738188] ? ext4_ext_search_right+0x2bc/0xaa0 01:59:14 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x8, &(0x7f0000000100)=0x4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000000), 0x100800) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) [ 1395.742954] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1395.747982] ext4_ext_map_blocks+0x2845/0x6b10 [ 1395.752581] ? __lock_acquire+0x5fc/0x3f20 [ 1395.756825] ? mark_buffer_dirty+0x95/0x480 [ 1395.761185] ? trace_hardirqs_on+0x10/0x10 [ 1395.765423] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1395.770820] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1395.776022] ? trace_hardirqs_on+0x10/0x10 [ 1395.780274] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1395.785131] ? ext4_es_lookup_extent+0x321/0xac0 [ 1395.789894] ? lock_acquire+0x170/0x3f0 [ 1395.793887] ext4_map_blocks+0x675/0x1730 [ 1395.798056] ? ext4_issue_zeroout+0x150/0x150 [ 1395.802556] ? __ext4_new_inode+0x27c/0x4eb0 [ 1395.806977] ext4_getblk+0x98/0x3f0 [ 1395.810632] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1395.815009] ext4_bread+0x6c/0x1a0 [ 1395.818557] ? ext4_getblk+0x3f0/0x3f0 [ 1395.822452] ? dquot_initialize_needed+0x240/0x240 [ 1395.827395] ext4_append+0x143/0x350 [ 1395.831125] ext4_mkdir+0x4c9/0xbd0 [ 1395.834770] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1395.839465] ? security_inode_mkdir+0xca/0x100 [ 1395.844058] vfs_mkdir+0x463/0x6e0 [ 1395.847608] SyS_mkdirat+0x1fd/0x270 [ 1395.851327] ? SyS_mknod+0x30/0x30 [ 1395.854874] ? fput_many+0xe/0x140 [ 1395.858422] ? do_syscall_64+0x4c/0x640 [ 1395.866921] ? SyS_mknod+0x30/0x30 [ 1395.870476] do_syscall_64+0x1d5/0x640 [ 1395.874376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1395.879577] RIP: 0033:0x7fd7232e3307 [ 1395.883285] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1395.891001] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1395.898273] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1395.905535] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1395.912937] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1395.920198] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1395.927473] CPU: 1 PID: 25272 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1395.935366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1395.944815] Call Trace: [ 1395.947408] dump_stack+0x1b2/0x281 [ 1395.951046] should_fail.cold+0x10a/0x149 [ 1395.955288] should_failslab+0xd6/0x130 [ 1395.959618] kmem_cache_alloc+0x28e/0x3c0 [ 1395.963776] alloc_vfsmnt+0x23/0x7f0 [ 1395.967494] ? _raw_read_unlock+0x29/0x40 [ 1395.971651] vfs_kern_mount.part.0+0x27/0x470 [ 1395.976155] do_mount+0xe65/0x2a30 [ 1395.979712] ? __do_page_fault+0x159/0xad0 [ 1395.983956] ? retint_kernel+0x2d/0x2d [ 1395.987857] ? copy_mount_string+0x40/0x40 [ 1395.992097] ? memset+0x20/0x40 [ 1395.995395] ? copy_mount_options+0x1fa/0x2f0 [ 1395.999905] ? copy_mnt_ns+0xa30/0xa30 [ 1396.003887] SyS_mount+0xa8/0x120 [ 1396.007358] ? copy_mnt_ns+0xa30/0xa30 [ 1396.011400] do_syscall_64+0x1d5/0x640 [ 1396.015312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1396.020509] RIP: 0033:0x7faed27e772a [ 1396.024221] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1396.031962] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1396.039241] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1396.046523] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1396.053880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1396.061155] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:14 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 44) 01:59:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000500)={0x75d7, [0xfffffff8, 0x2], 0x3}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x3, 0x4) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="66b8c90000000f23d00f21f866352000000b0f23f8d9edba430066ed0fc71bbaa000ed0f323e7af90faef8f30f08f080b2000003", 0x34}], 0x1, 0xa, &(0x7f00000003c0)=[@vmwrite={0x8, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3ff}, @cstype3={0x5, 0x7}], 0x2) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="499622206497b52b6abbe638ead9d7d22b176d6ddab621b77623301231d6d35d68a7c8e830b65570119c706815d031f12ab16df76accbb95134a7a1d9bb063b33a28d84a204829f2a63ee06e9e0b3d446d0c6691ab361578069b3d5e87e3a1f3ebd30d7e0924b6f5e06d7b85d33b9a0ea50b9e96ad12becd67dfe6fe91d43f", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25110000003c000180080008000900000014000300ac1414bb0000000000000000000000000c000700180000002100000008000b007369700008000b0073697000"], 0x50}}, 0x40cf5ad75c875449) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000100)={0x4, &(0x7f0000000780)=[{@fixed}, {@fixed}, {}, {}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:14 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async, rerun: 32) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x150, 0x150, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{}, {0xe, 0x7ff}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x80, 0x4}, @struct={0xd, 0xa, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x5, 0x8}, {0x3, 0x3}, {0x3, 0x4, 0x2}, {0xb, 0x2, 0x5}, {0xe, 0x2, 0x8}, {0x6, 0x1}, {0x0, 0x0, 0x55}, {0x0, 0x3, 0x48}, {0x8, 0x4, 0x5}, {0x2, 0x5, 0x4}]}, @struct={0xd, 0x9, 0x0, 0x4, 0x0, 0x7ff, [{0x1, 0x1, 0x1}, {0xe, 0x2, 0x1}, {0xa, 0x2, 0x6}, {0x3, 0x2}, {0x9, 0x4, 0x4}, {0xe, 0x0, 0x3}, {0x10, 0x3, 0x8001}, {0x3, 0x3, 0x1}, {0x3, 0x1, 0x6}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x39, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/84, 0x16b, 0x54}, 0x20) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x3) 01:59:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) (async) 01:59:15 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 50) 01:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x5c65, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44800) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:15 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x150, 0x150, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{}, {0xe, 0x7ff}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x80, 0x4}, @struct={0xd, 0xa, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x5, 0x8}, {0x3, 0x3}, {0x3, 0x4, 0x2}, {0xb, 0x2, 0x5}, {0xe, 0x2, 0x8}, {0x6, 0x1}, {0x0, 0x0, 0x55}, {0x0, 0x3, 0x48}, {0x8, 0x4, 0x5}, {0x2, 0x5, 0x4}]}, @struct={0xd, 0x9, 0x0, 0x4, 0x0, 0x7ff, [{0x1, 0x1, 0x1}, {0xe, 0x2, 0x1}, {0xa, 0x2, 0x6}, {0x3, 0x2}, {0x9, 0x4, 0x4}, {0xe, 0x0, 0x3}, {0x10, 0x3, 0x8001}, {0x3, 0x3, 0x1}, {0x3, 0x1, 0x6}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x39, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/84, 0x16b, 0x54}, 0x20) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x3) 01:59:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000500)={0x75d7, [0xfffffff8, 0x2], 0x3}, 0x10) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x3, 0x4) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="66b8c90000000f23d00f21f866352000000b0f23f8d9edba430066ed0fc71bbaa000ed0f323e7af90faef8f30f08f080b2000003", 0x34}], 0x1, 0xa, &(0x7f00000003c0)=[@vmwrite={0x8, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3ff}, @cstype3={0x5, 0x7}], 0x2) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) (async) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="499622206497b52b6abbe638ead9d7d22b176d6ddab621b77623301231d6d35d68a7c8e830b65570119c706815d031f12ab16df76accbb95134a7a1d9bb063b33a28d84a204829f2a63ee06e9e0b3d446d0c6691ab361578069b3d5e87e3a1f3ebd30d7e0924b6f5e06d7b85d33b9a0ea50b9e96ad12becd67dfe6fe91d43f", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25110000003c000180080008000900000014000300ac1414bb0000000000000000000000000c000700180000002100000008000b007369700008000b0073697000"], 0x50}}, 0x40cf5ad75c875449) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000100)={0x4, &(0x7f0000000780)=[{@fixed}, {@fixed}, {}, {}]}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1396.287712] FAULT_INJECTION: forcing a failure. [ 1396.287712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1396.289207] FAULT_INJECTION: forcing a failure. [ 1396.289207] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.328511] CPU: 1 PID: 25341 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1396.336420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1396.345882] Call Trace: [ 1396.348492] dump_stack+0x1b2/0x281 [ 1396.352150] should_fail.cold+0x10a/0x149 [ 1396.356311] __alloc_pages_nodemask+0x22c/0x2720 [ 1396.361080] ? trace_hardirqs_on+0x10/0x10 [ 1396.365326] ? _find_next_bit+0xdb/0x100 [ 1396.369396] ? pcpu_alloc+0xbe0/0xf50 [ 1396.373206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1396.378058] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1396.383513] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1396.388542] alloc_pages_current+0x155/0x260 [ 1396.392991] ? __lockdep_init_map+0x100/0x560 [ 1396.397496] get_zeroed_page+0x19/0x50 [ 1396.401391] mount_fs+0x1c7/0x2a0 [ 1396.404858] vfs_kern_mount.part.0+0x5b/0x470 [ 1396.409359] do_mount+0xe65/0x2a30 [ 1396.412900] ? __do_page_fault+0x159/0xad0 [ 1396.417132] ? retint_kernel+0x2d/0x2d [ 1396.421019] ? copy_mount_string+0x40/0x40 [ 1396.425271] ? memset+0x20/0x40 [ 1396.428557] ? copy_mount_options+0x1fa/0x2f0 [ 1396.433054] ? copy_mnt_ns+0xa30/0xa30 [ 1396.436936] SyS_mount+0xa8/0x120 [ 1396.440384] ? copy_mnt_ns+0xa30/0xa30 [ 1396.444270] do_syscall_64+0x1d5/0x640 [ 1396.448165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1396.453357] RIP: 0033:0x7faed27e772a [ 1396.457066] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1396.464772] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1396.472129] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 01:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x5c65, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44800) (async) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1396.479481] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1396.486739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1396.493996] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1396.501266] CPU: 0 PID: 25336 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1396.509158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1396.518537] Call Trace: [ 1396.521126] dump_stack+0x1b2/0x281 [ 1396.524760] should_fail.cold+0x10a/0x149 [ 1396.528920] should_failslab+0xd6/0x130 [ 1396.532909] kmem_cache_alloc+0x28e/0x3c0 [ 1396.538020] ext4_mb_new_blocks+0x514/0x3db0 [ 1396.542437] ? ext4_find_extent+0x6f7/0xbc0 [ 1396.546764] ? ext4_ext_search_right+0x2bc/0xaa0 [ 1396.551529] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1396.556587] ext4_ext_map_blocks+0x2845/0x6b10 [ 1396.561181] ? __lock_acquire+0x5fc/0x3f20 [ 1396.565425] ? mark_buffer_dirty+0x95/0x480 [ 1396.569751] ? trace_hardirqs_on+0x10/0x10 [ 1396.573989] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1396.579365] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1396.584562] ? trace_hardirqs_on+0x10/0x10 [ 1396.588806] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1396.593656] ? ext4_es_lookup_extent+0x321/0xac0 [ 1396.598502] ? lock_acquire+0x170/0x3f0 [ 1396.602592] ext4_map_blocks+0x675/0x1730 [ 1396.606739] ? ext4_issue_zeroout+0x150/0x150 [ 1396.611237] ? __ext4_new_inode+0x27c/0x4eb0 [ 1396.615640] ext4_getblk+0x98/0x3f0 [ 1396.619268] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1396.623582] ext4_bread+0x6c/0x1a0 [ 1396.627118] ? ext4_getblk+0x3f0/0x3f0 [ 1396.631001] ? dquot_initialize_needed+0x240/0x240 [ 1396.636085] ext4_append+0x143/0x350 [ 1396.639784] ext4_mkdir+0x4c9/0xbd0 [ 1396.643420] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1396.648139] ? security_inode_mkdir+0xca/0x100 [ 1396.652704] vfs_mkdir+0x463/0x6e0 [ 1396.656251] SyS_mkdirat+0x1fd/0x270 [ 1396.659949] ? SyS_mknod+0x30/0x30 [ 1396.663481] ? fput_many+0xe/0x140 [ 1396.667108] ? do_syscall_64+0x4c/0x640 [ 1396.671066] ? SyS_mknod+0x30/0x30 [ 1396.674590] do_syscall_64+0x1d5/0x640 [ 1396.678463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1396.683632] RIP: 0033:0x7fd7232e3307 [ 1396.687323] RSP: 002b:00007fd721c58f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1396.695018] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e3307 [ 1396.702270] RDX: 00000000000001ff RSI: 00000000200000c0 RDI: 00000000ffffff9c [ 1396.709521] RBP: 00007fd721c591d0 R08: 0000000000000000 R09: 00007fd721c591d0 [ 1396.716791] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000080 [ 1396.724046] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 01:59:15 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 45) 01:59:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000500)={0x75d7, [0xfffffff8, 0x2], 0x3}, 0x10) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) (rerun: 32) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="66b8c90000000f23d00f21f866352000000b0f23f8d9edba430066ed0fc71bbaa000ed0f323e7af90faef8f30f08f080b2000003", 0x34}], 0x1, 0xa, &(0x7f00000003c0)=[@vmwrite={0x8, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3ff}, @cstype3={0x5, 0x7}], 0x2) (async) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) (async, rerun: 32) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="499622206497b52b6abbe638ead9d7d22b176d6ddab621b77623301231d6d35d68a7c8e830b65570119c706815d031f12ab16df76accbb95134a7a1d9bb063b33a28d84a204829f2a63ee06e9e0b3d446d0c6691ab361578069b3d5e87e3a1f3ebd30d7e0924b6f5e06d7b85d33b9a0ea50b9e96ad12becd67dfe6fe91d43f", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25110000003c000180080008000900000014000300ac1414bb0000000000000000000000000c000700180000002100000008000b007369700008000b0073697000"], 0x50}}, 0x40cf5ad75c875449) (async, rerun: 32) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r5, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000100)={0x4, &(0x7f0000000780)=[{@fixed}, {@fixed}, {}, {}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x5c65, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44800) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x5c65, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44800) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 01:59:15 executing program 4: pkey_alloc(0x0, 0x6) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, r0) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) pkey_alloc(0x0, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf250400000008000400050000000c000280060002004e230000080006000500000030000380060007004e220000080001000200000014000600fe8800000000000000000000000000010600040009000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040024}, 0x4008850) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80250000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004840) 01:59:15 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 51) 01:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x15, 0x7fffffff, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:59:15 executing program 4: pkey_alloc(0x0, 0x6) (async) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, r0) (async) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, r1) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) pkey_alloc(0x0, 0x1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf250400000008000400050000000c000280060002004e230000080006000500000030000380060007004e220000080001000200000014000600fe8800000000000000000000000000010600040009000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040024}, 0x4008850) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80250000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004840) 01:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) [ 1396.894582] FAULT_INJECTION: forcing a failure. [ 1396.894582] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.898899] FAULT_INJECTION: forcing a failure. [ 1396.898899] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.936718] CPU: 1 PID: 25385 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1396.944674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1396.954040] Call Trace: [ 1396.956634] dump_stack+0x1b2/0x281 [ 1396.960274] should_fail.cold+0x10a/0x149 [ 1396.964432] should_failslab+0xd6/0x130 [ 1396.968415] kmem_cache_alloc+0x28e/0x3c0 [ 1396.972571] getname_flags+0xc8/0x550 [ 1396.976374] ? __do_page_fault+0x159/0xad0 [ 1396.980615] user_path_at_empty+0x2a/0x50 [ 1396.984770] do_mount+0x118/0x2a30 [ 1396.988309] ? __do_page_fault+0x159/0xad0 [ 1396.992537] ? retint_kernel+0x2d/0x2d [ 1396.996423] ? copy_mount_string+0x40/0x40 [ 1397.000737] ? memset+0x20/0x40 [ 1397.004004] ? copy_mount_options+0x1fa/0x2f0 [ 1397.008483] ? copy_mnt_ns+0xa30/0xa30 [ 1397.012355] SyS_mount+0xa8/0x120 [ 1397.015794] ? copy_mnt_ns+0xa30/0xa30 [ 1397.019666] do_syscall_64+0x1d5/0x640 [ 1397.023543] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.028718] RIP: 0033:0x7faed27e772a [ 1397.032423] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1397.040130] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1397.047389] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1397.054742] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1397.062004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1397.069273] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1397.076549] CPU: 0 PID: 25390 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1397.084623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1397.094068] Call Trace: [ 1397.096659] dump_stack+0x1b2/0x281 [ 1397.100295] should_fail.cold+0x10a/0x149 [ 1397.104458] should_failslab+0xd6/0x130 [ 1397.108448] __kmalloc_track_caller+0x2bc/0x400 [ 1397.113130] ? strndup_user+0x5b/0xf0 [ 1397.116939] memdup_user+0x22/0xa0 [ 1397.120487] strndup_user+0x5b/0xf0 [ 1397.124117] ? copy_mnt_ns+0xa30/0xa30 [ 1397.128007] SyS_mount+0x68/0x120 [ 1397.131461] ? copy_mnt_ns+0xa30/0xa30 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) 01:59:16 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendto$netrom(r2, &(0x7f0000000180)="0f1c176dea42c5196fbe8ebd4619d91976d12c1982c8b1351a92ddd02afa10c93203f910525f6d1e2445c41c60ec9511e0f0e3171fe6b543d85fd55b5aab45073622fa2bf5b15b87ddb1bc3a0be7ce58adf4d95750e9e211d22c26bdbf89ad6b7c07085839a82f823237dac9d263424a7eeb6ff1e190633236e84ceb92ffe631", 0x80, 0xc000, 0x0, 0x0) [ 1397.135354] do_syscall_64+0x1d5/0x640 [ 1397.139280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.144486] RIP: 0033:0x7fd7232e572a [ 1397.148195] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1397.155909] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1397.163191] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1397.170469] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1397.177752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1397.185027] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 01:59:16 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 46) 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) 01:59:16 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 52) 01:59:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 01:59:16 executing program 4: pkey_alloc(0x0, 0x6) (async) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, r0) (async) pkey_alloc(0x0, 0x0) (async) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, r1) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) pkey_alloc(0x0, 0x1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf250400000008000400050000000c000280060002004e230000080006000500000030000380060007004e220000080001000200000014000600fe8800000000000000000000000000010600040009000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040024}, 0x4008850) (async) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80250000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004840) 01:59:16 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendto$netrom(r2, &(0x7f0000000180)="0f1c176dea42c5196fbe8ebd4619d91976d12c1982c8b1351a92ddd02afa10c93203f910525f6d1e2445c41c60ec9511e0f0e3171fe6b543d85fd55b5aab45073622fa2bf5b15b87ddb1bc3a0be7ce58adf4d95750e9e211d22c26bdbf89ad6b7c07085839a82f823237dac9d263424a7eeb6ff1e190633236e84ceb92ffe631", 0x80, 0xc000, 0x0, 0x0) 01:59:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd29, 0x401, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa00}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 01:59:16 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) sendto$netrom(r2, &(0x7f0000000180)="0f1c176dea42c5196fbe8ebd4619d91976d12c1982c8b1351a92ddd02afa10c93203f910525f6d1e2445c41c60ec9511e0f0e3171fe6b543d85fd55b5aab45073622fa2bf5b15b87ddb1bc3a0be7ce58adf4d95750e9e211d22c26bdbf89ad6b7c07085839a82f823237dac9d263424a7eeb6ff1e190633236e84ceb92ffe631", 0x80, 0xc000, 0x0, 0x0) [ 1397.301012] FAULT_INJECTION: forcing a failure. [ 1397.301012] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.305209] FAULT_INJECTION: forcing a failure. [ 1397.305209] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.312533] Bluetooth: hci0 command 0x0401 tx timeout [ 1397.365331] CPU: 1 PID: 25435 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1397.373245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1397.382604] Call Trace: [ 1397.385195] dump_stack+0x1b2/0x281 [ 1397.388828] should_fail.cold+0x10a/0x149 [ 1397.392994] should_failslab+0xd6/0x130 [ 1397.396975] kmem_cache_alloc+0x28e/0x3c0 [ 1397.401118] getname_kernel+0x4e/0x340 [ 1397.405007] kern_path+0x1b/0x40 [ 1397.408374] lookup_bdev+0xc6/0x1c0 [ 1397.412003] ? bd_acquire+0x440/0x440 [ 1397.415822] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.421277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1397.426302] blkdev_get_by_path+0x1b/0xa0 [ 1397.430462] mount_bdev+0x4c/0x360 [ 1397.434028] ? hfs_remount+0x1b0/0x1b0 [ 1397.437966] mount_fs+0x92/0x2a0 [ 1397.441345] vfs_kern_mount.part.0+0x5b/0x470 [ 1397.445853] do_mount+0xe65/0x2a30 [ 1397.449396] ? __do_page_fault+0x159/0xad0 [ 1397.453628] ? retint_kernel+0x2d/0x2d [ 1397.457508] ? copy_mount_string+0x40/0x40 [ 1397.461747] ? memset+0x20/0x40 [ 1397.465030] ? copy_mount_options+0x1fa/0x2f0 [ 1397.469534] ? copy_mnt_ns+0xa30/0xa30 [ 1397.473434] SyS_mount+0xa8/0x120 [ 1397.476924] ? copy_mnt_ns+0xa30/0xa30 [ 1397.480814] do_syscall_64+0x1d5/0x640 [ 1397.484708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.489897] RIP: 0033:0x7faed27e772a [ 1397.493602] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1397.501318] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1397.508592] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 01:59:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) [ 1397.515865] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1397.523140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1397.530411] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1397.544398] CPU: 0 PID: 25436 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1397.552304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1397.561657] Call Trace: 01:59:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:16 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) [ 1397.564249] dump_stack+0x1b2/0x281 [ 1397.567885] should_fail.cold+0x10a/0x149 [ 1397.572042] should_failslab+0xd6/0x130 [ 1397.576030] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1397.580707] ? copy_mnt_ns+0xa30/0xa30 [ 1397.584603] copy_mount_options+0x59/0x2f0 [ 1397.588846] ? copy_mnt_ns+0xa30/0xa30 [ 1397.592742] SyS_mount+0x84/0x120 [ 1397.596200] ? copy_mnt_ns+0xa30/0xa30 [ 1397.600100] do_syscall_64+0x1d5/0x640 [ 1397.603999] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.609192] RIP: 0033:0x7fd7232e572a [ 1397.612910] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1397.620644] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1397.627902] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1397.635155] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1397.642413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1397.649773] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 01:59:16 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 47) 01:59:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:16 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) 01:59:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xa004) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd29, 0x401, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa00}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 01:59:16 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 53) 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd29, 0x401, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa00}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd29, 0x401, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa00}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) 01:59:16 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:16 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 01:59:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xa004) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xa004) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) (async) [ 1397.777204] FAULT_INJECTION: forcing a failure. [ 1397.777204] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.778039] FAULT_INJECTION: forcing a failure. [ 1397.778039] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.823879] CPU: 1 PID: 25491 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1397.831788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1397.841147] Call Trace: [ 1397.843745] dump_stack+0x1b2/0x281 [ 1397.847379] should_fail.cold+0x10a/0x149 [ 1397.851531] should_failslab+0xd6/0x130 [ 1397.855500] __kmalloc_track_caller+0x2bc/0x400 [ 1397.860160] ? strndup_user+0x5b/0xf0 [ 1397.863968] memdup_user+0x22/0xa0 [ 1397.867511] strndup_user+0x5b/0xf0 [ 1397.871133] ? copy_mnt_ns+0xa30/0xa30 [ 1397.875013] SyS_mount+0x68/0x120 [ 1397.878453] ? copy_mnt_ns+0xa30/0xa30 [ 1397.882335] do_syscall_64+0x1d5/0x640 [ 1397.886224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.891398] RIP: 0033:0x7fd7232e572a [ 1397.895093] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1397.902883] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1397.910151] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 01:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendto$netrom(r2, &(0x7f0000000000)="6118e7f29a0852ffd720d854b44efc027da86ed6aba1bdd6ed0cd23d11b32dac9b2488529e32b3dc733a0edfa86062d96aff1a9179e1687834709b9d6fb193a02b42fcf9cba9b5dced4f6ea202166d00abb5532542e133e658edb6", 0x5b, 0x840, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) [ 1397.917414] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1397.924682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1397.931982] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1397.939275] CPU: 0 PID: 25496 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1397.947165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1397.956542] Call Trace: [ 1397.959146] dump_stack+0x1b2/0x281 [ 1397.962783] should_fail.cold+0x10a/0x149 [ 1397.966940] should_failslab+0xd6/0x130 [ 1397.970922] kmem_cache_alloc+0x28e/0x3c0 [ 1397.975079] getname_kernel+0x4e/0x340 [ 1397.978973] kern_path+0x1b/0x40 [ 1397.982348] lookup_bdev+0xc6/0x1c0 [ 1397.985980] ? bd_acquire+0x440/0x440 [ 1397.989788] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.995254] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1398.000284] blkdev_get_by_path+0x1b/0xa0 [ 1398.004536] mount_bdev+0x4c/0x360 [ 1398.008086] ? hfs_remount+0x1b0/0x1b0 [ 1398.011984] mount_fs+0x92/0x2a0 [ 1398.015541] vfs_kern_mount.part.0+0x5b/0x470 [ 1398.020046] do_mount+0xe65/0x2a30 [ 1398.023605] ? __do_page_fault+0x159/0xad0 [ 1398.027841] ? retint_kernel+0x2d/0x2d [ 1398.031735] ? copy_mount_string+0x40/0x40 [ 1398.035984] ? memset+0x20/0x40 [ 1398.039271] ? copy_mount_options+0x1fa/0x2f0 [ 1398.043769] ? copy_mnt_ns+0xa30/0xa30 [ 1398.047663] SyS_mount+0xa8/0x120 [ 1398.051121] ? copy_mnt_ns+0xa30/0xa30 [ 1398.055104] do_syscall_64+0x1d5/0x640 [ 1398.059004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.064197] RIP: 0033:0x7faed27e772a 01:59:16 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:17 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 48) 01:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendto$netrom(r2, &(0x7f0000000000)="6118e7f29a0852ffd720d854b44efc027da86ed6aba1bdd6ed0cd23d11b32dac9b2488529e32b3dc733a0edfa86062d96aff1a9179e1687834709b9d6fb193a02b42fcf9cba9b5dced4f6ea202166d00abb5532542e133e658edb6", 0x5b, 0x840, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) dup(r0) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) sendto$netrom(r2, &(0x7f0000000000)="6118e7f29a0852ffd720d854b44efc027da86ed6aba1bdd6ed0cd23d11b32dac9b2488529e32b3dc733a0edfa86062d96aff1a9179e1687834709b9d6fb193a02b42fcf9cba9b5dced4f6ea202166d00abb5532542e133e658edb6", 0x5b, 0x840, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) 01:59:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xa004) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) 01:59:17 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x0) [ 1398.067929] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1398.075639] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1398.082915] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1398.090189] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1398.097469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1398.104747] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:17 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:17 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 54) 01:59:17 executing program 4: pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0x0) 01:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) sendto$netrom(r2, &(0x7f0000000000)="6118e7f29a0852ffd720d854b44efc027da86ed6aba1bdd6ed0cd23d11b32dac9b2488529e32b3dc733a0edfa86062d96aff1a9179e1687834709b9d6fb193a02b42fcf9cba9b5dced4f6ea202166d00abb5532542e133e658edb6", 0x5b, 0x840, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 01:59:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2400a004) 01:59:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) [ 1398.164949] FAULT_INJECTION: forcing a failure. [ 1398.164949] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.226709] CPU: 0 PID: 25546 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1398.234624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1398.243990] Call Trace: [ 1398.246588] dump_stack+0x1b2/0x281 [ 1398.250237] should_fail.cold+0x10a/0x149 [ 1398.254399] should_failslab+0xd6/0x130 [ 1398.258432] kmem_cache_alloc+0x28e/0x3c0 [ 1398.262589] getname_flags+0xc8/0x550 [ 1398.266414] ? __do_page_fault+0x159/0xad0 [ 1398.270656] user_path_at_empty+0x2a/0x50 [ 1398.274810] do_mount+0x118/0x2a30 [ 1398.278357] ? __do_page_fault+0x159/0xad0 [ 1398.282600] ? retint_kernel+0x2d/0x2d [ 1398.287013] ? copy_mount_string+0x40/0x40 [ 1398.291252] ? memset+0x20/0x40 [ 1398.294535] ? copy_mount_options+0x1fa/0x2f0 [ 1398.299029] ? copy_mnt_ns+0xa30/0xa30 [ 1398.302917] SyS_mount+0xa8/0x120 [ 1398.306369] ? copy_mnt_ns+0xa30/0xa30 [ 1398.310267] do_syscall_64+0x1d5/0x640 [ 1398.314200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.319394] RIP: 0033:0x7fd7232e572a [ 1398.323101] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1398.326920] FAULT_INJECTION: forcing a failure. [ 1398.326920] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.330812] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1398.330818] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1398.330823] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1398.330829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 01:59:17 executing program 4: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) (async) pkey_alloc(0x0, 0x0) (async) 01:59:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) socketpair(0x10, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000500)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82, 0x1, &(0x7f0000000380)=""/240, 0xf0}, &(0x7f00000004c0)=0x40) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = dup(r0) accept4$netrom(r3, 0x0, 0x0, 0x0) [ 1398.330835] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1398.407239] CPU: 1 PID: 25566 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1398.415160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1398.424517] Call Trace: [ 1398.427105] dump_stack+0x1b2/0x281 [ 1398.430738] should_fail.cold+0x10a/0x149 [ 1398.435067] should_failslab+0xd6/0x130 [ 1398.439054] kmem_cache_alloc+0x28e/0x3c0 [ 1398.443210] getname_kernel+0x4e/0x340 [ 1398.447105] kern_path+0x1b/0x40 [ 1398.450477] lookup_bdev+0xc6/0x1c0 [ 1398.454105] ? bd_acquire+0x440/0x440 [ 1398.457915] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1398.463374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1398.468411] blkdev_get_by_path+0x1b/0xa0 [ 1398.472564] mount_bdev+0x4c/0x360 [ 1398.476107] ? hfs_remount+0x1b0/0x1b0 [ 1398.480007] mount_fs+0x92/0x2a0 [ 1398.483377] vfs_kern_mount.part.0+0x5b/0x470 [ 1398.487895] do_mount+0xe65/0x2a30 [ 1398.491443] ? __do_page_fault+0x159/0xad0 [ 1398.495680] ? retint_kernel+0x2d/0x2d [ 1398.499575] ? copy_mount_string+0x40/0x40 [ 1398.503819] ? memset+0x20/0x40 [ 1398.507103] ? copy_mount_options+0x1fa/0x2f0 [ 1398.511632] ? copy_mnt_ns+0xa30/0xa30 [ 1398.515526] SyS_mount+0xa8/0x120 [ 1398.519007] ? copy_mnt_ns+0xa30/0xa30 [ 1398.522904] do_syscall_64+0x1d5/0x640 [ 1398.526802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.531992] RIP: 0033:0x7faed27e772a [ 1398.535690] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1398.543375] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1398.550795] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 01:59:17 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 49) 01:59:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2400a004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2400a004) (async) 01:59:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) socketpair(0x10, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000500)=0x80) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82, 0x1, &(0x7f0000000380)=""/240, 0xf0}, &(0x7f00000004c0)=0x40) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r3 = dup(r0) accept4$netrom(r3, 0x0, 0x0, 0x0) 01:59:17 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x308, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ef3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x147a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "38edfe290ad4ac89e66e9dc4b14b482e37791029740bf396d21d4991348e0b016d48a49abad16ad9dd24d28947898ae61b4ac2a2814bb550a4581159c717ee5b200a53d0e14db430c74a9051196f0687095e7a3d9c191b93758a6e471276fb9ab68cab93da2a472905c5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf8a4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x17a}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) [ 1398.558061] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1398.565486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1398.572868] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:17 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 55) 01:59:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) getpeername$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2400a004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2400a004) (async) 01:59:17 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x308, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ef3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x147a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "38edfe290ad4ac89e66e9dc4b14b482e37791029740bf396d21d4991348e0b016d48a49abad16ad9dd24d28947898ae61b4ac2a2814bb550a4581159c717ee5b200a53d0e14db430c74a9051196f0687095e7a3d9c191b93758a6e471276fb9ab68cab93da2a472905c5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf8a4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x17a}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) 01:59:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) socketpair(0x10, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000500)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82, 0x1, &(0x7f0000000380)=""/240, 0xf0}, &(0x7f00000004c0)=0x40) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = dup(r0) accept4$netrom(r3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) (async) socketpair(0x10, 0x1, 0x6, &(0x7f0000000140)) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000500)=0x80) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x82, 0x1, &(0x7f0000000380)=""/240, 0xf0}, &(0x7f00000004c0)=0x40) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) dup(r0) (async) accept4$netrom(r3, 0x0, 0x0, 0x0) (async) 01:59:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) [ 1398.669277] FAULT_INJECTION: forcing a failure. [ 1398.669277] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.684505] FAULT_INJECTION: forcing a failure. [ 1398.684505] name failslab, interval 1, probability 0, space 0, times 0 01:59:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$netlink(0x10, 0x3, 0x7) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x810, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2}) [ 1398.715559] CPU: 1 PID: 25613 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1398.723469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1398.732822] Call Trace: [ 1398.735424] dump_stack+0x1b2/0x281 [ 1398.739060] should_fail.cold+0x10a/0x149 [ 1398.743216] should_failslab+0xd6/0x130 [ 1398.747200] __kmalloc_track_caller+0x2bc/0x400 [ 1398.751878] ? kstrdup_const+0x35/0x60 [ 1398.755770] ? lock_downgrade+0x740/0x740 [ 1398.759923] kstrdup+0x36/0x70 [ 1398.763120] kstrdup_const+0x35/0x60 [ 1398.766848] alloc_vfsmnt+0xe0/0x7f0 [ 1398.770574] ? _raw_read_unlock+0x29/0x40 [ 1398.774725] vfs_kern_mount.part.0+0x27/0x470 [ 1398.779235] do_mount+0xe65/0x2a30 [ 1398.782786] ? __do_page_fault+0x159/0xad0 [ 1398.787025] ? retint_kernel+0x2d/0x2d [ 1398.790924] ? copy_mount_string+0x40/0x40 [ 1398.795171] ? memset+0x20/0x40 [ 1398.798462] ? copy_mount_options+0x1fa/0x2f0 [ 1398.802965] ? copy_mnt_ns+0xa30/0xa30 [ 1398.806945] SyS_mount+0xa8/0x120 [ 1398.810418] ? copy_mnt_ns+0xa30/0xa30 [ 1398.814355] do_syscall_64+0x1d5/0x640 [ 1398.818254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.823551] RIP: 0033:0x7fd7232e572a [ 1398.827260] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1398.834967] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1398.842238] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1398.849594] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1398.856864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1398.864151] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1398.876434] CPU: 1 PID: 25620 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1398.884335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1398.893687] Call Trace: [ 1398.896288] dump_stack+0x1b2/0x281 [ 1398.899924] should_fail.cold+0x10a/0x149 [ 1398.904077] should_failslab+0xd6/0x130 [ 1398.908071] __kmalloc+0x2c1/0x400 [ 1398.911613] ? __list_lru_init+0x67/0x710 [ 1398.915766] __list_lru_init+0x67/0x710 [ 1398.919747] sget_userns+0x4e4/0xc10 [ 1398.923464] ? set_bdev_super+0x110/0x110 [ 1398.927641] ? ns_test_super+0x50/0x50 [ 1398.931529] ? set_bdev_super+0x110/0x110 [ 1398.935673] ? ns_test_super+0x50/0x50 [ 1398.939556] sget+0xd1/0x110 [ 1398.942580] mount_bdev+0xcd/0x360 [ 1398.946121] ? hfs_remount+0x1b0/0x1b0 [ 1398.950012] mount_fs+0x92/0x2a0 [ 1398.953388] vfs_kern_mount.part.0+0x5b/0x470 [ 1398.957885] do_mount+0xe65/0x2a30 [ 1398.961429] ? __do_page_fault+0x159/0xad0 [ 1398.965664] ? retint_kernel+0x2d/0x2d [ 1398.969555] ? copy_mount_string+0x40/0x40 [ 1398.973787] ? memset+0x20/0x40 [ 1398.977048] ? copy_mount_options+0x1fa/0x2f0 [ 1398.981520] ? copy_mnt_ns+0xa30/0xa30 [ 1398.985387] SyS_mount+0xa8/0x120 [ 1398.988819] ? copy_mnt_ns+0xa30/0xa30 [ 1398.992687] do_syscall_64+0x1d5/0x640 [ 1398.996573] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.001751] RIP: 0033:0x7faed27e772a [ 1399.005462] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1399.013152] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a 01:59:17 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 50) 01:59:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$netlink(0x10, 0x3, 0x7) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x810, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) socket$netlink(0x10, 0x3, 0x7) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x810, r2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2}) (async) 01:59:17 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x308, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ef3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x147a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "38edfe290ad4ac89e66e9dc4b14b482e37791029740bf396d21d4991348e0b016d48a49abad16ad9dd24d28947898ae61b4ac2a2814bb550a4581159c717ee5b200a53d0e14db430c74a9051196f0687095e7a3d9c191b93758a6e471276fb9ab68cab93da2a472905c5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf8a4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x17a}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) (rerun: 64) 01:59:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = accept4$netrom(r1, 0x0, 0x0, 0x0) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @null}, [@bcast, @bcast, @null, @bcast, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) getpeername$netrom(r3, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @rose, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) 01:59:17 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 56) [ 1399.020425] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1399.027678] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1399.034926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1399.042180] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = accept4$netrom(r1, 0x0, 0x0, 0x0) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @null}, [@bcast, @bcast, @null, @bcast, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) getpeername$netrom(r3, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @rose, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) 01:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000180)=0x48) 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$netlink(0x10, 0x3, 0x7) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x810, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2}) [ 1399.133817] FAULT_INJECTION: forcing a failure. [ 1399.133817] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.162252] CPU: 1 PID: 25671 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1399.170144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1399.179501] Call Trace: 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = dup(0xffffffffffffffff) accept4$netrom(r2, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xa09c) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x168, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa571}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, "e5"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x742a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4881c}, 0x80) [ 1399.182098] dump_stack+0x1b2/0x281 [ 1399.185735] should_fail.cold+0x10a/0x149 [ 1399.189890] should_failslab+0xd6/0x130 [ 1399.193872] __kmalloc_track_caller+0x2bc/0x400 [ 1399.198544] ? kstrdup_const+0x35/0x60 [ 1399.202433] ? lock_downgrade+0x740/0x740 [ 1399.206581] kstrdup+0x36/0x70 [ 1399.209772] kstrdup_const+0x35/0x60 [ 1399.213489] alloc_vfsmnt+0xe0/0x7f0 [ 1399.217201] ? _raw_read_unlock+0x29/0x40 [ 1399.221350] vfs_kern_mount.part.0+0x27/0x470 [ 1399.225860] do_mount+0xe65/0x2a30 [ 1399.229411] ? __do_page_fault+0x159/0xad0 [ 1399.233648] ? retint_kernel+0x2d/0x2d [ 1399.237538] ? copy_mount_string+0x40/0x40 [ 1399.241779] ? memset+0x20/0x40 [ 1399.245057] ? copy_mount_options+0x1fa/0x2f0 [ 1399.249551] ? copy_mnt_ns+0xa30/0xa30 [ 1399.253441] SyS_mount+0xa8/0x120 [ 1399.256890] ? copy_mnt_ns+0xa30/0xa30 [ 1399.260778] do_syscall_64+0x1d5/0x640 [ 1399.264668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.269852] RIP: 0033:0x7fd7232e572a [ 1399.273558] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = dup(0xffffffffffffffff) accept4$netrom(r2, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xa09c) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x168, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa571}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, "e5"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x742a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4881c}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x7) (async) dup(0xffffffffffffffff) (async) accept4$netrom(r2, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xa09c) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x168, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa571}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, "e5"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x742a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4881c}, 0x80) (async) 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = accept4$netrom(r1, 0x0, 0x0, 0x0) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @null}, [@bcast, @bcast, @null, @bcast, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) getpeername$netrom(r3, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @rose, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) [ 1399.281265] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1399.288576] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1399.295846] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1399.303116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1399.310391] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1399.346427] FAULT_INJECTION: forcing a failure. [ 1399.346427] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.369486] CPU: 1 PID: 25686 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1399.377403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1399.386755] Call Trace: [ 1399.389348] dump_stack+0x1b2/0x281 [ 1399.393020] should_fail.cold+0x10a/0x149 [ 1399.397170] should_failslab+0xd6/0x130 [ 1399.401147] __kmalloc+0x2c1/0x400 [ 1399.404687] ? __list_lru_init+0x67/0x710 [ 1399.408843] __list_lru_init+0x67/0x710 [ 1399.412823] sget_userns+0x504/0xc10 [ 1399.416538] ? set_bdev_super+0x110/0x110 [ 1399.420690] ? ns_test_super+0x50/0x50 [ 1399.424581] ? set_bdev_super+0x110/0x110 [ 1399.428733] ? ns_test_super+0x50/0x50 [ 1399.432621] sget+0xd1/0x110 [ 1399.435637] mount_bdev+0xcd/0x360 [ 1399.439171] ? hfs_remount+0x1b0/0x1b0 [ 1399.443056] mount_fs+0x92/0x2a0 [ 1399.446423] vfs_kern_mount.part.0+0x5b/0x470 [ 1399.450923] do_mount+0xe65/0x2a30 [ 1399.454469] ? __do_page_fault+0x159/0xad0 [ 1399.458704] ? retint_kernel+0x2d/0x2d [ 1399.462595] ? copy_mount_string+0x40/0x40 [ 1399.466831] ? memset+0x20/0x40 [ 1399.470124] ? copy_mount_options+0x1fa/0x2f0 [ 1399.474615] ? copy_mnt_ns+0xa30/0xa30 [ 1399.478503] SyS_mount+0xa8/0x120 [ 1399.481943] ? copy_mnt_ns+0xa30/0xa30 [ 1399.485823] do_syscall_64+0x1d5/0x640 [ 1399.489717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.494888] RIP: 0033:0x7faed27e772a [ 1399.498590] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1399.506292] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1399.513543] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1399.520801] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1399.528068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1399.535321] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:18 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 51) 01:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, 0x0, &(0x7f0000000180)) 01:59:18 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x0, 0xa5, 0x7, 0x0, 0x40, 0x14c01, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8}, 0x10124, 0x8, 0x5, 0x3, 0x4, 0x0, 0x4ca, 0x0, 0x9, 0x0, 0x122c}, 0x0, 0x6, 0xffffffffffffffff, 0x10) 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x7) (async) r2 = dup(0xffffffffffffffff) accept4$netrom(r2, &(0x7f0000000680)={{}, [@netrom, @null, @default, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x603, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x8046) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xa09c) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x168, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa571}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, "e5"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x742a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4881c}, 0x80) [ 1399.551777] Bluetooth: hci0 command 0x0401 tx timeout 01:59:18 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 57) 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x1, "6e4095", 0x80, 0x1}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:18 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x0, 0xa5, 0x7, 0x0, 0x40, 0x14c01, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8}, 0x10124, 0x8, 0x5, 0x3, 0x4, 0x0, 0x4ca, 0x0, 0x9, 0x0, 0x122c}, 0x0, 0x6, 0xffffffffffffffff, 0x10) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x0, 0xa5, 0x7, 0x0, 0x40, 0x14c01, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8}, 0x10124, 0x8, 0x5, 0x3, 0x4, 0x0, 0x4ca, 0x0, 0x9, 0x0, 0x122c}, 0x0, 0x6, 0xffffffffffffffff, 0x10) (async) 01:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, 0x0, &(0x7f0000000180)) 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 01:59:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x1, "6e4095", 0x80, 0x1}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x1, "6e4095", 0x80, 0x1}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) [ 1399.664498] FAULT_INJECTION: forcing a failure. [ 1399.664498] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.700864] FAULT_INJECTION: forcing a failure. [ 1399.700864] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.712758] CPU: 1 PID: 25762 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1399.720642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1399.729992] Call Trace: [ 1399.732579] dump_stack+0x1b2/0x281 [ 1399.736207] should_fail.cold+0x10a/0x149 [ 1399.740358] should_failslab+0xd6/0x130 [ 1399.744335] kmem_cache_alloc+0x28e/0x3c0 [ 1399.748487] alloc_buffer_head+0x20/0x110 [ 1399.752637] alloc_page_buffers+0xb3/0x1f0 [ 1399.756918] __getblk_slow+0x2d6/0x7a0 [ 1399.760823] __bread_gfp+0x206/0x2e0 [ 1399.764538] hfs_mdb_get+0x2dc/0x1b40 [ 1399.768336] ? mark_held_locks+0xa6/0xf0 [ 1399.772399] ? kfree+0x14a/0x250 [ 1399.775769] ? hfs_mdb_put+0x370/0x370 [ 1399.779654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1399.784670] ? __lockdep_init_map+0x100/0x560 [ 1399.789162] ? __lockdep_init_map+0x100/0x560 [ 1399.793655] hfs_fill_super+0xcdb/0x1250 [ 1399.797813] ? hfs_remount+0x1b0/0x1b0 [ 1399.801710] ? reacquire_held_locks+0xb5/0x3f0 [ 1399.806306] ? vsnprintf+0x260/0x1340 [ 1399.810334] ? pointer+0x9e0/0x9e0 [ 1399.813868] ? lock_downgrade+0x740/0x740 [ 1399.818017] ? snprintf+0xa5/0xd0 [ 1399.821469] ? vsprintf+0x30/0x30 [ 1399.824916] ? ns_test_super+0x50/0x50 [ 1399.828805] ? set_blocksize+0x125/0x380 [ 1399.832874] mount_bdev+0x2b3/0x360 [ 1399.836493] ? hfs_remount+0x1b0/0x1b0 [ 1399.840372] mount_fs+0x92/0x2a0 [ 1399.843740] vfs_kern_mount.part.0+0x5b/0x470 [ 1399.848253] do_mount+0xe65/0x2a30 [ 1399.856666] ? __do_page_fault+0x159/0xad0 [ 1399.860901] ? retint_kernel+0x2d/0x2d [ 1399.864798] ? copy_mount_string+0x40/0x40 [ 1399.869026] ? memset+0x20/0x40 [ 1399.872303] ? copy_mount_options+0x1fa/0x2f0 [ 1399.876802] ? copy_mnt_ns+0xa30/0xa30 [ 1399.880685] SyS_mount+0xa8/0x120 [ 1399.884132] ? copy_mnt_ns+0xa30/0xa30 [ 1399.888026] do_syscall_64+0x1d5/0x640 [ 1399.892089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.897269] RIP: 0033:0x7faed27e772a [ 1399.900977] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1399.908677] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1399.915978] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1399.923250] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1399.930519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1399.937781] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1399.945052] CPU: 0 PID: 25743 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1399.952936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1399.962288] Call Trace: [ 1399.964877] dump_stack+0x1b2/0x281 [ 1399.968544] should_fail.cold+0x10a/0x149 [ 1399.972703] should_failslab+0xd6/0x130 [ 1399.976688] kmem_cache_alloc+0x28e/0x3c0 [ 1399.980845] alloc_vfsmnt+0x23/0x7f0 [ 1399.984562] ? _raw_read_unlock+0x29/0x40 [ 1399.988725] vfs_kern_mount.part.0+0x27/0x470 [ 1399.989380] hfs: can't find a HFS filesystem on dev loop2 [ 1399.993242] do_mount+0xe65/0x2a30 [ 1399.993256] ? __do_page_fault+0x159/0xad0 [ 1399.993265] ? retint_kernel+0x2d/0x2d [ 1399.993280] ? copy_mount_string+0x40/0x40 [ 1400.014638] ? memset+0x20/0x40 [ 1400.017924] ? copy_mount_options+0x1fa/0x2f0 [ 1400.022425] ? copy_mnt_ns+0xa30/0xa30 [ 1400.026321] SyS_mount+0xa8/0x120 [ 1400.029775] ? copy_mnt_ns+0xa30/0xa30 [ 1400.033667] do_syscall_64+0x1d5/0x640 [ 1400.037560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.042748] RIP: 0033:0x7fd7232e572a [ 1400.046442] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1400.054285] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1400.061547] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1400.068805] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1400.076067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1400.083320] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 01:59:18 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 52) 01:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, 0x0, &(0x7f0000000180)) 01:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) lseek(r1, 0x7f, 0x3) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x42c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @private2}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xefb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xffffffffffffff7a, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ac4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:19 executing program 4: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x0, 0xa5, 0x7, 0x0, 0x40, 0x14c01, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8}, 0x10124, 0x8, 0x5, 0x3, 0x4, 0x0, 0x4ca, 0x0, 0x9, 0x0, 0x122c}, 0x0, 0x6, 0xffffffffffffffff, 0x10) 01:59:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x1, "6e4095", 0x80, 0x1}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) 01:59:19 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 58) 01:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) lseek(r1, 0x7f, 0x3) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x42c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @private2}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xefb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xffffffffffffff7a, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ac4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async, rerun: 64) accept4$netrom(r1, 0x0, 0x0, 0x0) (rerun: 64) 01:59:19 executing program 4: pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x4) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x6]}, 0x0, 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000e1b000/0x4000)=nil}) 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) [ 1400.191242] FAULT_INJECTION: forcing a failure. [ 1400.191242] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.214694] FAULT_INJECTION: forcing a failure. [ 1400.214694] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.220425] CPU: 1 PID: 25796 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1400.233780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1400.243136] Call Trace: [ 1400.245733] dump_stack+0x1b2/0x281 [ 1400.249371] should_fail.cold+0x10a/0x149 [ 1400.253526] should_failslab+0xd6/0x130 [ 1400.257514] __kmalloc_track_caller+0x2bc/0x400 [ 1400.262187] ? kstrdup_const+0x35/0x60 [ 1400.266074] ? lock_downgrade+0x740/0x740 [ 1400.270222] kstrdup+0x36/0x70 [ 1400.273409] kstrdup_const+0x35/0x60 [ 1400.277127] alloc_vfsmnt+0xe0/0x7f0 [ 1400.280838] ? _raw_read_unlock+0x29/0x40 [ 1400.284987] vfs_kern_mount.part.0+0x27/0x470 [ 1400.289485] do_mount+0xe65/0x2a30 [ 1400.293034] ? __do_page_fault+0x159/0xad0 [ 1400.297263] ? retint_kernel+0x2d/0x2d [ 1400.301148] ? copy_mount_string+0x40/0x40 [ 1400.305387] ? memset+0x20/0x40 [ 1400.308701] ? copy_mount_options+0x1fa/0x2f0 [ 1400.313192] ? copy_mnt_ns+0xa30/0xa30 [ 1400.317081] SyS_mount+0xa8/0x120 [ 1400.320534] ? copy_mnt_ns+0xa30/0xa30 [ 1400.324425] do_syscall_64+0x1d5/0x640 [ 1400.328323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.333512] RIP: 0033:0x7fd7232e572a 01:59:19 executing program 4: pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x4) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x6]}, 0x0, 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000e1b000/0x4000)=nil}) pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0xffffffffffffffff) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x3) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x4) (async) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x6]}, 0x0, 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000e1b000/0x4000)=nil}) (async) 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8400, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18104001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd091}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6eba}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x68}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd46}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b6d6a7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48cc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000020}, 0x44040) [ 1400.337216] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1400.344918] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1400.352205] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1400.359478] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1400.366754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1400.374026] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1400.397433] CPU: 0 PID: 25798 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1400.405338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1400.414696] Call Trace: [ 1400.417297] dump_stack+0x1b2/0x281 [ 1400.420930] should_fail.cold+0x10a/0x149 [ 1400.425092] should_failslab+0xd6/0x130 [ 1400.429083] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1400.433763] hfs_fill_super+0xc5/0x1250 [ 1400.437766] ? lock_downgrade+0x740/0x740 [ 1400.441921] ? format_decode+0x1cb/0x890 [ 1400.445992] ? set_precision+0x150/0x150 [ 1400.450060] ? hfs_remount+0x1b0/0x1b0 [ 1400.453963] ? reacquire_held_locks+0xb5/0x3f0 [ 1400.458561] ? vsnprintf+0x260/0x1340 [ 1400.462368] ? pointer+0x9e0/0x9e0 [ 1400.465918] ? lock_downgrade+0x740/0x740 [ 1400.470071] ? snprintf+0xa5/0xd0 [ 1400.473535] ? vsprintf+0x30/0x30 [ 1400.477000] ? ns_test_super+0x50/0x50 [ 1400.480888] ? set_blocksize+0x125/0x380 [ 1400.484949] mount_bdev+0x2b3/0x360 [ 1400.488576] ? hfs_remount+0x1b0/0x1b0 [ 1400.492468] mount_fs+0x92/0x2a0 [ 1400.495842] vfs_kern_mount.part.0+0x5b/0x470 [ 1400.500343] do_mount+0xe65/0x2a30 [ 1400.503885] ? __do_page_fault+0x159/0xad0 [ 1400.508118] ? retint_kernel+0x2d/0x2d [ 1400.512005] ? copy_mount_string+0x40/0x40 [ 1400.516247] ? memset+0x20/0x40 [ 1400.519526] ? copy_mount_options+0x1fa/0x2f0 [ 1400.524014] ? copy_mnt_ns+0xa30/0xa30 [ 1400.527886] SyS_mount+0xa8/0x120 [ 1400.531338] ? copy_mnt_ns+0xa30/0xa30 [ 1400.535206] do_syscall_64+0x1d5/0x640 [ 1400.539078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.544248] RIP: 0033:0x7faed27e772a 01:59:19 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 53) 01:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) lseek(r1, 0x7f, 0x3) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r4, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x42c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @private2}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xefb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xffffffffffffff7a, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ac4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) accept4$netrom(r1, 0x0, 0x0, 0x0) 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:19 executing program 4: pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x4) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x6]}, 0x0, 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000e1b000/0x4000)=nil}) pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0xffffffffffffffff) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x3) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x4) (async) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x6]}, 0x0, 0x8) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000e1b000/0x4000)=nil}) (async) 01:59:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8400, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18104001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd091}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6eba}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x68}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd46}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b6d6a7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48cc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000020}, 0x44040) [ 1400.548062] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1400.555749] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1400.563126] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1400.570479] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1400.577772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1400.585025] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:19 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 59) 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x20, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x881e, 0x4) userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) accept4$netrom(r1, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x3, 0x37, 0x3b, 0x0, 0x8, 0x22, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}, 0x40000, 0x100000000, 0xda50, 0x6, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x0, 0x3ff}, 0xffffffffffffffff, 0xc, r1, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x6, 0x8105, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xaf, 0x4, @perf_config_ext={0x0, 0x3f}, 0x50, 0x7f, 0x1ff, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xd, r5, 0x2) dup(r6) r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0x1a, 0x8, 0x6, 0x1ff}, 0x10) signalfd(r7, &(0x7f0000000180)={[0x10001]}, 0x8) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x9e5a, &(0x7f0000000080)=0x4) 01:59:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa004) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8400, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r3, 0x56f9e6c85edd6169}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18104001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd091}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6eba}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x68}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd46}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b6d6a7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48cc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000020}, 0x44040) 01:59:19 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) r1 = msgget(0x1, 0x20) msgctl$IPC_RMID(r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3cc, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x15c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x863c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7606}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5ea}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x1a8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1afc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x9, 0x7, @remote, 0x80000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}]}, 0x3cc}}, 0x4000040) [ 1400.685211] FAULT_INJECTION: forcing a failure. [ 1400.685211] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.708180] FAULT_INJECTION: forcing a failure. [ 1400.708180] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.734767] CPU: 0 PID: 25859 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1400.742676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1400.752048] Call Trace: [ 1400.754635] dump_stack+0x1b2/0x281 [ 1400.758266] should_fail.cold+0x10a/0x149 [ 1400.762423] should_failslab+0xd6/0x130 [ 1400.766488] __kmalloc+0x2c1/0x400 [ 1400.770046] ? __list_lru_init+0x67/0x710 [ 1400.774188] __list_lru_init+0x67/0x710 [ 1400.778178] sget_userns+0x4e4/0xc10 [ 1400.781892] ? set_bdev_super+0x110/0x110 [ 1400.786039] ? ns_test_super+0x50/0x50 [ 1400.789926] ? set_bdev_super+0x110/0x110 [ 1400.794087] ? ns_test_super+0x50/0x50 [ 1400.797969] sget+0xd1/0x110 [ 1400.800984] mount_bdev+0xcd/0x360 [ 1400.804513] ? hfs_remount+0x1b0/0x1b0 [ 1400.808386] mount_fs+0x92/0x2a0 [ 1400.811738] vfs_kern_mount.part.0+0x5b/0x470 [ 1400.816224] do_mount+0xe65/0x2a30 [ 1400.819753] ? __do_page_fault+0x159/0xad0 [ 1400.823978] ? retint_kernel+0x2d/0x2d [ 1400.827848] ? copy_mount_string+0x40/0x40 [ 1400.832068] ? memset+0x20/0x40 [ 1400.835333] ? copy_mount_options+0x1fa/0x2f0 [ 1400.839824] ? copy_mnt_ns+0xa30/0xa30 [ 1400.843714] SyS_mount+0xa8/0x120 [ 1400.847155] ? copy_mnt_ns+0xa30/0xa30 [ 1400.851026] do_syscall_64+0x1d5/0x640 [ 1400.854906] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.860084] RIP: 0033:0x7fd7232e572a [ 1400.863780] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1400.871484] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1400.878759] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) [ 1400.886022] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1400.893278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1400.901062] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1400.908335] CPU: 1 PID: 25860 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1400.916230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1400.925590] Call Trace: [ 1400.928189] dump_stack+0x1b2/0x281 [ 1400.931823] should_fail.cold+0x10a/0x149 [ 1400.935977] should_failslab+0xd6/0x130 [ 1400.939956] __kmalloc+0x2c1/0x400 [ 1400.943495] ? match_number+0x9d/0x200 [ 1400.947387] match_number+0x9d/0x200 [ 1400.951122] ? match_strdup+0xa0/0xa0 [ 1400.954929] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1400.959946] ? init_timer_key+0x68/0x300 [ 1400.964022] hfs_fill_super+0x7ba/0x1250 [ 1400.968099] ? hfs_remount+0x1b0/0x1b0 [ 1400.972121] ? reacquire_held_locks+0xb5/0x3f0 [ 1400.976710] ? vsnprintf+0x260/0x1340 [ 1400.980518] ? pointer+0x9e0/0x9e0 [ 1400.984062] ? lock_downgrade+0x740/0x740 [ 1400.988221] ? snprintf+0xa5/0xd0 [ 1400.991698] ? vsprintf+0x30/0x30 [ 1400.995155] ? ns_test_super+0x50/0x50 [ 1400.999046] ? set_blocksize+0x125/0x380 [ 1401.003124] mount_bdev+0x2b3/0x360 [ 1401.006752] ? hfs_remount+0x1b0/0x1b0 [ 1401.010643] mount_fs+0x92/0x2a0 [ 1401.014017] vfs_kern_mount.part.0+0x5b/0x470 [ 1401.018530] do_mount+0xe65/0x2a30 [ 1401.022081] ? __do_page_fault+0x159/0xad0 [ 1401.026318] ? retint_kernel+0x2d/0x2d [ 1401.030217] ? copy_mount_string+0x40/0x40 [ 1401.034479] ? memset+0x20/0x40 [ 1401.037767] ? copy_mount_options+0x1fa/0x2f0 [ 1401.042265] ? copy_mnt_ns+0xa30/0xa30 [ 1401.046158] SyS_mount+0xa8/0x120 [ 1401.049608] ? copy_mnt_ns+0xa30/0xa30 [ 1401.053498] do_syscall_64+0x1d5/0x640 [ 1401.057392] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.062582] RIP: 0033:0x7faed27e772a [ 1401.066290] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1401.074002] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a 01:59:20 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 54) 01:59:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1f}, 0x1, 0x0, 0x0, 0x4}, 0xa004) 01:59:20 executing program 4: pkey_alloc(0x0, 0x0) (async) pkey_alloc(0x0, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x10, r0, 0x0) (async, rerun: 32) r1 = msgget(0x1, 0x20) (rerun: 32) msgctl$IPC_RMID(r1, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3cc, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x15c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x863c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7606}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5ea}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x1a8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1afc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x9, 0x7, @remote, 0x80000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}]}, 0x3cc}}, 0x4000040) 01:59:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x20, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x800) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x881e, 0x4) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) accept4$netrom(r1, 0x0, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x3, 0x37, 0x3b, 0x0, 0x8, 0x22, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}, 0x40000, 0x100000000, 0xda50, 0x6, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x0, 0x3ff}, 0xffffffffffffffff, 0xc, r1, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x6, 0x8105, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xaf, 0x4, @perf_config_ext={0x0, 0x3f}, 0x50, 0x7f, 0x1ff, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xd, r5, 0x2) dup(r6) r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @default, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x7, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0x1a, 0x8, 0x6, 0x1ff}, 0x10) signalfd(r7, &(0x7f0000000180)={[0x10001]}, 0x8) (async) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x9e5a, &(0x7f0000000080)=0x4) [ 1401.081293] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1401.088561] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1401.095811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1401.103062] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1401.122555] hfs: dir_umask requires a value [ 1401.126942] hfs: unable to parse mount options 01:59:20 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffcc4}}]}) (fail_nth: 60) 01:59:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1f}, 0x1, 0x0, 0x0, 0x4}, 0xa004) [ 1401.226964] FAULT_INJECTION: forcing a failure. [ 1401.226964] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.238208] FAULT_INJECTION: forcing a failure. [ 1401.238208] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.238223] CPU: 0 PID: 25939 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1401.238232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1401.238236] Call Trace: [ 1401.238253] dump_stack+0x1b2/0x281 [ 1401.238268] should_fail.cold+0x10a/0x149 [ 1401.238284] should_failslab+0xd6/0x130 [ 1401.238295] __kmalloc+0x2c1/0x400 [ 1401.238303] ? register_shrinker+0x1ab/0x220 [ 1401.238314] register_shrinker+0x1ab/0x220 [ 1401.238323] sget_userns+0x9aa/0xc10 [ 1401.238332] ? set_bdev_super+0x110/0x110 [ 1401.238343] ? ns_test_super+0x50/0x50 [ 1401.238358] ? set_bdev_super+0x110/0x110 [ 1401.309232] ? ns_test_super+0x50/0x50 [ 1401.313118] sget+0xd1/0x110 [ 1401.316138] mount_bdev+0xcd/0x360 [ 1401.319669] ? hfs_remount+0x1b0/0x1b0 [ 1401.323548] mount_fs+0x92/0x2a0 [ 1401.326915] vfs_kern_mount.part.0+0x5b/0x470 [ 1401.331415] do_mount+0xe65/0x2a30 [ 1401.334964] ? __do_page_fault+0x159/0xad0 [ 1401.339291] ? retint_kernel+0x2d/0x2d [ 1401.343178] ? copy_mount_string+0x40/0x40 [ 1401.347413] ? memset+0x20/0x40 [ 1401.350698] ? copy_mount_options+0x1fa/0x2f0 [ 1401.355193] ? copy_mnt_ns+0xa30/0xa30 [ 1401.359082] SyS_mount+0xa8/0x120 [ 1401.362533] ? copy_mnt_ns+0xa30/0xa30 [ 1401.366441] do_syscall_64+0x1d5/0x640 [ 1401.370317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.375500] RIP: 0033:0x7faed27e772a [ 1401.379192] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1401.386881] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1401.394131] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1401.401383] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1401.408633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1401.415887] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 01:59:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @null, @bcast, @default, @remote, @null]}, 0x0) 01:59:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1f}, 0x1, 0x0, 0x0, 0x4}, 0xa004) [ 1401.423154] CPU: 1 PID: 25922 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 1401.431048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1401.440400] Call Trace: [ 1401.442990] dump_stack+0x1b2/0x281 [ 1401.446624] should_fail.cold+0x10a/0x149 [ 1401.450775] should_failslab+0xd6/0x130 [ 1401.454751] kmem_cache_alloc+0x28e/0x3c0 [ 1401.456801] ------------[ cut here ]------------ [ 1401.459068] getname_kernel+0x4e/0x340 [ 1401.459082] kern_path+0x1b/0x40 [ 1401.463957] WARNING: CPU: 0 PID: 25939 at fs/super.c:1163 kill_block_super+0xbe/0xe0 [ 1401.467833] lookup_bdev+0xc6/0x1c0 [ 1401.471173] Kernel panic - not syncing: panic_on_warn set ... [ 1401.471173] [ 1401.479038] ? bd_acquire+0x440/0x440 [ 1401.493750] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1401.499203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1401.504206] blkdev_get_by_path+0x1b/0xa0 [ 1401.508342] mount_bdev+0x4c/0x360 [ 1401.511866] ? hfs_remount+0x1b0/0x1b0 [ 1401.515735] mount_fs+0x92/0x2a0 [ 1401.519087] vfs_kern_mount.part.0+0x5b/0x470 [ 1401.523599] do_mount+0xe65/0x2a30 [ 1401.527127] ? __do_page_fault+0x159/0xad0 [ 1401.531353] ? retint_kernel+0x2d/0x2d [ 1401.535225] ? copy_mount_string+0x40/0x40 [ 1401.539448] ? memset+0x20/0x40 [ 1401.542713] ? copy_mount_options+0x1fa/0x2f0 [ 1401.547190] ? copy_mnt_ns+0xa30/0xa30 [ 1401.551061] SyS_mount+0xa8/0x120 [ 1401.554500] ? copy_mnt_ns+0xa30/0xa30 [ 1401.558369] do_syscall_64+0x1d5/0x640 [ 1401.562243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.567413] RIP: 0033:0x7fd7232e572a [ 1401.571102] RSP: 002b:00007fd721c58f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1401.578791] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007fd7232e572a [ 1401.586047] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fd721c58fe0 [ 1401.593329] RBP: 00007fd721c59020 R08: 00007fd721c59020 R09: 0000000020000080 [ 1401.600595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1401.607939] R13: 00000000200000c0 R14: 00007fd721c58fe0 R15: 0000000020000500 [ 1401.615207] CPU: 0 PID: 25939 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 [ 1401.623095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1401.632446] Call Trace: [ 1401.635035] dump_stack+0x1b2/0x281 [ 1401.638665] panic+0x1f9/0x42d [ 1401.641859] ? add_taint.cold+0x16/0x16 [ 1401.645837] ? kill_block_super+0xbe/0xe0 [ 1401.649991] ? __warn.cold+0x5/0x44 [ 1401.653625] ? kill_block_super+0xbe/0xe0 [ 1401.657772] __warn.cold+0x20/0x44 [ 1401.661319] ? ist_end_non_atomic+0x10/0x10 [ 1401.665640] ? kill_block_super+0xbe/0xe0 [ 1401.669785] report_bug+0x208/0x250 [ 1401.673416] do_error_trap+0x195/0x2d0 [ 1401.677305] ? math_error+0x2d0/0x2d0 [ 1401.681104] ? retint_kernel+0x2d/0x2d [ 1401.684997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1401.689844] invalid_op+0x1b/0x40 [ 1401.693297] RIP: 0010:kill_block_super+0xbe/0xe0 [ 1401.698060] RSP: 0018:ffff8880b4507bc8 EFLAGS: 00010246 [ 1401.703422] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90006dd5000 [ 1401.710892] RDX: 0000000000040000 RSI: ffffffff8187617e RDI: ffff88808fb5bcf0 [ 1401.718159] RBP: ffff8880a3b4c0c0 R08: ffffffff8b9ab9a8 R09: 0000000000000001 [ 1401.725428] R10: 0000000000000000 R11: ffff88809f5e03c0 R12: ffff88808fb5b840 [ 1401.732692] R13: ffffffff890baf70 R14: ffffffff88f45760 R15: dffffc0000000000 [ 1401.739951] ? kill_block_super+0xbe/0xe0 [ 1401.744085] ? kill_block_super+0xbe/0xe0 [ 1401.748213] deactivate_locked_super+0x6c/0xd0 [ 1401.752774] sget_userns+0x9c4/0xc10 [ 1401.756468] ? set_bdev_super+0x110/0x110 [ 1401.760600] ? ns_test_super+0x50/0x50 [ 1401.764464] ? set_bdev_super+0x110/0x110 [ 1401.768590] ? ns_test_super+0x50/0x50 [ 1401.772454] sget+0xd1/0x110 [ 1401.775462] mount_bdev+0xcd/0x360 [ 1401.778994] ? hfs_remount+0x1b0/0x1b0 [ 1401.782863] mount_fs+0x92/0x2a0 [ 1401.786214] vfs_kern_mount.part.0+0x5b/0x470 [ 1401.790685] do_mount+0xe65/0x2a30 [ 1401.794203] ? __do_page_fault+0x159/0xad0 [ 1401.798455] ? retint_kernel+0x2d/0x2d [ 1401.802322] ? copy_mount_string+0x40/0x40 [ 1401.806639] ? memset+0x20/0x40 [ 1401.809903] ? copy_mount_options+0x1fa/0x2f0 [ 1401.814386] ? copy_mnt_ns+0xa30/0xa30 [ 1401.818262] SyS_mount+0xa8/0x120 [ 1401.821696] ? copy_mnt_ns+0xa30/0xa30 [ 1401.825564] do_syscall_64+0x1d5/0x640 [ 1401.829437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.834617] RIP: 0033:0x7faed27e772a [ 1401.838313] RSP: 002b:00007faed115af88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1401.846011] RAX: ffffffffffffffda RBX: 0000000020000480 RCX: 00007faed27e772a [ 1401.853376] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007faed115afe0 [ 1401.860629] RBP: 00007faed115b020 R08: 00007faed115b020 R09: 0000000020000080 [ 1401.867895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1401.875147] R13: 00000000200000c0 R14: 00007faed115afe0 R15: 0000000020000500 [ 1401.882699] Kernel Offset: disabled [ 1401.886478] Rebooting in 86400 seconds..