08] ? lock_downgrade+0x720/0x720 [ 426.704453] ? vfs_write+0x3d7/0x540 [ 426.708156] ? check_preemption_disabled+0x41/0x280 [ 426.713171] ? vfs_write+0x393/0x540 [ 426.716878] ? fput+0x2b/0x190 [ 426.720065] ? ksys_write+0x1c8/0x2a0 [ 426.723865] __x64_sys_sendto+0xdd/0x1b0 [ 426.727926] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 426.732509] do_syscall_64+0xf9/0x620 [ 426.736389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.741569] RIP: 0033:0x4665d9 [ 426.744747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 426.763654] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 03:18:46 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:18:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 426.771373] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 426.778628] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 426.785907] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 426.793158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.800422] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:46 executing program 1 (fault-call:4 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce1"]) [ 426.985418] F2FS-fs (loop4): Unable to read 1th superblock [ 426.995613] VFS: could not find a valid V7 on loop3. [ 427.012278] F2FS-fs (loop4): Unable to read 2th superblock [ 427.034149] FAULT_INJECTION: forcing a failure. [ 427.034149] name failslab, interval 1, probability 0, space 0, times 0 [ 427.056815] F2FS-fs (loop4): Unable to read 1th superblock [ 427.058435] CPU: 0 PID: 17897 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 427.069865] F2FS-fs (loop4): Unable to read 2th superblock [ 427.070343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.070349] Call Trace: [ 427.070377] dump_stack+0x1fc/0x2ef [ 427.091591] should_fail.cold+0xa/0xf [ 427.095396] ? setup_fault_attr+0x200/0x200 [ 427.099730] ? sctp_bind_addr_state+0x1a1/0x330 [ 427.104406] __should_failslab+0x115/0x180 [ 427.108643] should_failslab+0x5/0x10 [ 427.112439] kmem_cache_alloc_trace+0x46/0x380 [ 427.117038] sctp_add_bind_addr+0x77/0x370 [ 427.121284] sctp_copy_local_addr_list+0x33e/0x4e0 [ 427.126223] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 427.130985] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 427.136175] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 427.141364] sctp_bind_addr_copy+0xde/0x470 [ 427.145689] sctp_sendmsg_new_asoc+0x367/0x1040 [ 427.150367] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 427.155562] ? mark_held_locks+0xa6/0xf0 [ 427.159621] ? __local_bh_enable_ip+0x159/0x270 [ 427.164289] sctp_sendmsg+0x1146/0x1580 [ 427.168283] ? sctp_id2assoc+0x260/0x260 [ 427.172346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.177109] ? retint_kernel+0x2d/0x2d [ 427.181000] ? inet_sendmsg+0x4e/0x5a0 [ 427.184886] inet_sendmsg+0x132/0x5a0 [ 427.188688] ? security_socket_sendmsg+0x83/0xb0 [ 427.193454] ? inet_recvmsg+0x5c0/0x5c0 [ 427.197439] sock_sendmsg+0xc3/0x120 [ 427.201168] __sys_sendto+0x21a/0x320 [ 427.204970] ? __ia32_sys_getpeername+0xb0/0xb0 [ 427.209635] ? lock_downgrade+0x720/0x720 [ 427.213780] ? vfs_write+0x3d7/0x540 [ 427.217499] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.222257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.227025] ? rcu_nmi_exit+0xb3/0x180 [ 427.230923] ? retint_kernel+0x2d/0x2d [ 427.234825] __x64_sys_sendto+0xdd/0x1b0 [ 427.238884] ? do_syscall_64+0x56/0x620 [ 427.242856] do_syscall_64+0xf9/0x620 [ 427.246656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.251838] RIP: 0033:0x4665d9 [ 427.255027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 427.273919] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 427.281621] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 427.288881] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 427.296141] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 427.303403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.310665] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:49 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:18:49 executing program 1 (fault-call:4 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:49 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x11a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:18:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:18:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce1"]) 03:18:49 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 429.399992] VFS: could not find a valid V7 on loop2. [ 429.412578] VFS: could not find a valid V7 on loop3. [ 429.439707] FAULT_INJECTION: forcing a failure. [ 429.439707] name failslab, interval 1, probability 0, space 0, times 0 [ 429.478842] F2FS-fs (loop4): Unable to read 1th superblock [ 429.495973] F2FS-fs (loop4): Unable to read 2th superblock [ 429.505558] CPU: 1 PID: 17929 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 429.513450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.522804] Call Trace: [ 429.525406] dump_stack+0x1fc/0x2ef 03:18:49 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 429.529048] should_fail.cold+0xa/0xf [ 429.532866] ? setup_fault_attr+0x200/0x200 [ 429.537199] ? sctp_bind_addr_state+0x1a1/0x330 [ 429.541883] __should_failslab+0x115/0x180 [ 429.546134] should_failslab+0x5/0x10 [ 429.549947] kmem_cache_alloc_trace+0x46/0x380 [ 429.554545] sctp_add_bind_addr+0x77/0x370 [ 429.558794] sctp_copy_local_addr_list+0x33e/0x4e0 [ 429.563739] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 429.568508] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 429.573736] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 429.578937] sctp_bind_addr_copy+0xde/0x470 [ 429.583270] sctp_sendmsg_new_asoc+0x367/0x1040 [ 429.587973] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 429.593176] ? mark_held_locks+0xa6/0xf0 [ 429.597249] ? __local_bh_enable_ip+0x159/0x270 [ 429.601927] sctp_sendmsg+0x1146/0x1580 [ 429.605906] ? sctp_id2assoc+0x260/0x260 [ 429.609974] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.614785] ? retint_kernel+0x2d/0x2d [ 429.618670] ? inet_recvmsg+0x5c0/0x5c0 [ 429.622652] inet_sendmsg+0x132/0x5a0 [ 429.626448] ? inet_recvmsg+0x5c0/0x5c0 [ 429.630408] sock_sendmsg+0xc3/0x120 [ 429.634139] __sys_sendto+0x21a/0x320 [ 429.637934] ? __ia32_sys_getpeername+0xb0/0xb0 [ 429.642600] ? lock_downgrade+0x720/0x720 [ 429.646736] ? vfs_write+0x3d7/0x540 [ 429.650471] ? check_preemption_disabled+0x41/0x280 [ 429.655473] ? vfs_write+0x393/0x540 [ 429.659181] ? fput+0x2b/0x190 [ 429.662389] ? ksys_write+0x1c8/0x2a0 [ 429.666177] __x64_sys_sendto+0xdd/0x1b0 [ 429.670243] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 429.674808] do_syscall_64+0xf9/0x620 [ 429.678625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.683917] RIP: 0033:0x4665d9 [ 429.687096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.705995] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.713702] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 429.720963] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 03:18:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:18:49 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x11a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 429.728233] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 429.735493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.742773] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce1"]) [ 429.773401] VFS: could not find a valid V7 on loop2. 03:18:49 executing program 1 (fault-call:4 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:49 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 429.943846] FAULT_INJECTION: forcing a failure. [ 429.943846] name failslab, interval 1, probability 0, space 0, times 0 [ 429.971481] VFS: could not find a valid V7 on loop3. [ 429.984864] CPU: 1 PID: 17957 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 429.992762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.002116] Call Trace: [ 430.004714] dump_stack+0x1fc/0x2ef [ 430.009308] should_fail.cold+0xa/0xf [ 430.013121] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.017884] ? setup_fault_attr+0x200/0x200 [ 430.022212] ? sctp_bind_addr_state+0x1a1/0x330 [ 430.026895] __should_failslab+0x115/0x180 [ 430.031153] should_failslab+0x5/0x10 [ 430.034982] kmem_cache_alloc_trace+0x46/0x380 [ 430.039579] sctp_add_bind_addr+0x77/0x370 [ 430.043814] sctp_copy_local_addr_list+0x33e/0x4e0 [ 430.048746] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 430.053500] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 430.058690] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 430.063878] sctp_bind_addr_copy+0xde/0x470 [ 430.068206] sctp_sendmsg_new_asoc+0x367/0x1040 [ 430.072877] ? rcu_nmi_exit+0xb3/0x180 [ 430.076749] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 430.081926] ? retint_kernel+0x2d/0x2d [ 430.085833] ? sctp_sendmsg+0x8e2/0x1580 [ 430.089894] sctp_sendmsg+0x1146/0x1580 [ 430.093866] ? sctp_id2assoc+0x260/0x260 [ 430.097915] ? aa_sk_perm+0x165/0x930 [ 430.101711] ? aa_sk_perm+0x534/0x930 [ 430.105525] inet_sendmsg+0x132/0x5a0 [ 430.109357] ? security_socket_sendmsg+0x83/0xb0 [ 430.114111] ? inet_recvmsg+0x5c0/0x5c0 [ 430.118087] sock_sendmsg+0xc3/0x120 [ 430.121839] __sys_sendto+0x21a/0x320 [ 430.125638] ? __ia32_sys_getpeername+0xb0/0xb0 [ 430.130318] ? lock_downgrade+0x720/0x720 [ 430.134475] ? vfs_write+0x3d7/0x540 [ 430.138203] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.142969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.147717] ? rcu_nmi_exit+0xb3/0x180 [ 430.151613] ? retint_kernel+0x2d/0x2d [ 430.155486] __x64_sys_sendto+0xdd/0x1b0 [ 430.159551] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 430.164142] do_syscall_64+0xf9/0x620 [ 430.167942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.173126] RIP: 0033:0x4665d9 [ 430.176302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:18:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) [ 430.195186] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.202911] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 430.210175] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 430.217444] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 430.224710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.231971] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:50 executing program 1 (fault-call:4 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce13c"]) 03:18:50 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 430.373149] FAULT_INJECTION: forcing a failure. [ 430.373149] name failslab, interval 1, probability 0, space 0, times 0 03:18:50 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 430.481814] CPU: 0 PID: 17979 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 430.489732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.499095] Call Trace: [ 430.501696] dump_stack+0x1fc/0x2ef [ 430.505338] should_fail.cold+0xa/0xf [ 430.509148] ? setup_fault_attr+0x200/0x200 [ 430.513480] ? sctp_bind_addr_state+0x1a1/0x330 [ 430.518183] __should_failslab+0x115/0x180 [ 430.522429] should_failslab+0x5/0x10 [ 430.526234] kmem_cache_alloc_trace+0x46/0x380 [ 430.530850] sctp_add_bind_addr+0x77/0x370 [ 430.535093] sctp_copy_local_addr_list+0x33e/0x4e0 [ 430.540037] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 430.544849] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 430.550042] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 430.555247] sctp_bind_addr_copy+0xde/0x470 [ 430.559613] sctp_sendmsg_new_asoc+0x367/0x1040 [ 430.564296] ? rcu_nmi_exit+0xb3/0x180 [ 430.568201] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 430.573434] ? lock_sock_nested+0x94/0x110 [ 430.577663] ? __local_bh_enable_ip+0x18d/0x270 [ 430.582317] sctp_sendmsg+0x1146/0x1580 [ 430.586312] ? sctp_id2assoc+0x260/0x260 [ 430.590378] ? aa_sk_perm+0x534/0x930 [ 430.594179] inet_sendmsg+0x132/0x5a0 [ 430.597970] ? security_socket_sendmsg+0x83/0xb0 [ 430.602720] ? inet_recvmsg+0x5c0/0x5c0 [ 430.606708] sock_sendmsg+0xc3/0x120 [ 430.610412] __sys_sendto+0x21a/0x320 [ 430.614208] ? __ia32_sys_getpeername+0xb0/0xb0 [ 430.618878] ? lock_downgrade+0x720/0x720 [ 430.623028] ? vfs_write+0x3d7/0x540 [ 430.631172] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.635927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.640700] ? rcu_nmi_exit+0xb3/0x180 [ 430.644592] ? retint_kernel+0x2d/0x2d [ 430.648476] __x64_sys_sendto+0xdd/0x1b0 [ 430.652540] ? __sanitizer_cov_trace_pc+0x22/0x50 [ 430.657379] do_syscall_64+0xf9/0x620 [ 430.661168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.666340] RIP: 0033:0x4665d9 03:18:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) [ 430.669541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 430.688431] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.696125] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 430.703385] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 430.710669] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 430.717947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.725216] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:50 executing program 1 (fault-call:4 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 430.802252] VFS: could not find a valid V7 on loop3. 03:18:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce13c"]) [ 430.967884] FAULT_INJECTION: forcing a failure. [ 430.967884] name failslab, interval 1, probability 0, space 0, times 0 [ 430.981208] CPU: 0 PID: 18015 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 430.989093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.998437] Call Trace: [ 431.001039] dump_stack+0x1fc/0x2ef [ 431.004682] should_fail.cold+0xa/0xf [ 431.008498] ? setup_fault_attr+0x200/0x200 [ 431.012827] ? sctp_bind_addr_state+0x1a1/0x330 [ 431.017510] __should_failslab+0x115/0x180 [ 431.021751] should_failslab+0x5/0x10 [ 431.025559] kmem_cache_alloc_trace+0x46/0x380 [ 431.030156] sctp_add_bind_addr+0x77/0x370 [ 431.034404] sctp_copy_local_addr_list+0x33e/0x4e0 [ 431.039365] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 431.044139] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 431.049354] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 431.054556] sctp_bind_addr_copy+0xde/0x470 [ 431.058980] sctp_sendmsg_new_asoc+0x367/0x1040 [ 431.063665] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 431.068868] ? mark_held_locks+0xa6/0xf0 [ 431.072941] ? __local_bh_enable_ip+0x159/0x270 [ 431.077629] sctp_sendmsg+0x1146/0x1580 [ 431.081619] ? sctp_id2assoc+0x260/0x260 [ 431.085691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.090464] ? retint_kernel+0x2d/0x2d [ 431.094380] inet_sendmsg+0x132/0x5a0 [ 431.098187] ? security_socket_sendmsg+0x83/0xb0 [ 431.102948] ? inet_recvmsg+0x5c0/0x5c0 [ 431.106922] sock_sendmsg+0xc3/0x120 [ 431.110648] __sys_sendto+0x21a/0x320 [ 431.114458] ? __ia32_sys_getpeername+0xb0/0xb0 [ 431.119114] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 431.123679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.128423] ? ksys_write+0x253/0x2a0 [ 431.132204] ? __sanitizer_cov_trace_pc+0x40/0x50 [ 431.137025] ? ksys_write+0x1c8/0x2a0 [ 431.140811] __x64_sys_sendto+0xdd/0x1b0 [ 431.144854] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 431.149448] do_syscall_64+0xf9/0x620 [ 431.153234] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.158405] RIP: 0033:0x4665d9 [ 431.161594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.180488] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 431.188187] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 431.195522] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 431.202782] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 431.210031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.217278] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:52 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:18:52 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x11a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:18:52 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:18:52 executing program 1 (fault-call:4 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 03:18:52 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d6f6e018bb901fcb5e929d8e800fec42b859a7cf0c0cbcdbb3462957056c418511dace3696d08010b8a9492ed1c4a2d9e047b3c30617d2c846cc52f3e47ab4b08964470e8ec3fa345cdca0ffd62cbeb37f995342cb718e07e358bc9d4b727da200126826af4ee222c7ce13c"]) [ 432.886671] f2fs_msg: 14 callbacks suppressed [ 432.886683] F2FS-fs (loop4): Unable to read 1th superblock [ 432.899584] VFS: could not find a valid V7 on loop3. [ 432.922235] VFS: could not find a valid V7 on loop2. [ 432.944540] FAULT_INJECTION: forcing a failure. [ 432.944540] name failslab, interval 1, probability 0, space 0, times 0 [ 432.949027] F2FS-fs (loop4): Unable to read 2th superblock [ 432.967312] F2FS-fs (loop4): Unable to read 1th superblock [ 432.974589] F2FS-fs (loop4): Unable to read 2th superblock [ 432.993711] CPU: 1 PID: 18036 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 433.001607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.010961] Call Trace: [ 433.013556] dump_stack+0x1fc/0x2ef [ 433.017197] should_fail.cold+0xa/0xf [ 433.021033] ? setup_fault_attr+0x200/0x200 [ 433.025364] ? lock_release+0x429/0x8b0 [ 433.029349] __should_failslab+0x115/0x180 [ 433.033618] should_failslab+0x5/0x10 [ 433.037425] kmem_cache_alloc_trace+0x46/0x380 03:18:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 433.042021] sctp_add_bind_addr+0x77/0x370 [ 433.046278] sctp_copy_local_addr_list+0x33e/0x4e0 [ 433.051221] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 433.056105] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 433.061300] sctp_bind_addr_copy+0xde/0x470 [ 433.065629] sctp_sendmsg_new_asoc+0x367/0x1040 [ 433.070286] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 433.075467] ? mark_held_locks+0xa6/0xf0 [ 433.079565] ? __local_bh_enable_ip+0x159/0x270 [ 433.084247] sctp_sendmsg+0x1146/0x1580 [ 433.088233] ? sctp_id2assoc+0x260/0x260 [ 433.092300] ? check_preemption_disabled+0x41/0x280 [ 433.097315] ? aa_sk_perm+0x534/0x930 [ 433.101125] inet_sendmsg+0x132/0x5a0 [ 433.104934] ? security_socket_sendmsg+0x83/0xb0 [ 433.109679] ? inet_recvmsg+0x5c0/0x5c0 [ 433.113650] sock_sendmsg+0xc3/0x120 [ 433.117371] __sys_sendto+0x21a/0x320 [ 433.121194] ? __ia32_sys_getpeername+0xb0/0xb0 [ 433.125864] ? lock_downgrade+0x720/0x720 [ 433.130015] ? vfs_write+0x3d7/0x540 [ 433.133741] ? check_preemption_disabled+0x41/0x280 [ 433.138801] ? vfs_write+0x393/0x540 [ 433.142501] ? fput+0x2b/0x190 [ 433.145679] ? ksys_write+0x1c8/0x2a0 [ 433.149483] __x64_sys_sendto+0xdd/0x1b0 [ 433.153548] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 433.158160] do_syscall_64+0xf9/0x620 [ 433.161981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.167204] RIP: 0033:0x4665d9 [ 433.170434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:18:53 executing program 1 (fault-call:4 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 433.189348] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.197038] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 433.204308] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 433.211563] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 433.218824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.226096] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:53 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 433.306903] VFS: could not find a valid V7 on loop2. 03:18:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 03:18:53 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 433.392674] FAULT_INJECTION: forcing a failure. [ 433.392674] name failslab, interval 1, probability 0, space 0, times 0 [ 433.431922] VFS: could not find a valid V7 on loop3. 03:18:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) [ 433.474700] CPU: 1 PID: 18058 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 433.482621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.491974] Call Trace: [ 433.494569] dump_stack+0x1fc/0x2ef [ 433.498205] should_fail.cold+0xa/0xf [ 433.502092] ? setup_fault_attr+0x200/0x200 [ 433.506404] ? lock_release+0x429/0x8b0 [ 433.510369] __should_failslab+0x115/0x180 [ 433.514604] should_failslab+0x5/0x10 [ 433.518413] kmem_cache_alloc_trace+0x46/0x380 03:18:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 433.523005] sctp_add_bind_addr+0x77/0x370 [ 433.527250] sctp_copy_local_addr_list+0x33e/0x4e0 [ 433.532210] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 433.536979] ? sctp_bind_addr_copy+0x15d/0x470 [ 433.541570] sctp_bind_addr_copy+0xde/0x470 [ 433.545904] sctp_sendmsg_new_asoc+0x367/0x1040 [ 433.550582] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 433.555803] ? mark_held_locks+0xa6/0xf0 [ 433.559877] ? __local_bh_enable_ip+0x159/0x270 [ 433.564543] sctp_sendmsg+0x1146/0x1580 [ 433.568516] ? sctp_id2assoc+0x260/0x260 [ 433.572583] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.577343] ? retint_kernel+0x2d/0x2d [ 433.581232] ? inet_sendmsg+0x4e/0x5a0 [ 433.585122] inet_sendmsg+0x132/0x5a0 [ 433.588923] ? security_socket_sendmsg+0x83/0xb0 [ 433.593699] ? inet_recvmsg+0x5c0/0x5c0 [ 433.597659] sock_sendmsg+0xc3/0x120 [ 433.601372] __sys_sendto+0x21a/0x320 [ 433.605173] ? __ia32_sys_getpeername+0xb0/0xb0 [ 433.609841] ? lock_downgrade+0x720/0x720 [ 433.613985] ? vfs_write+0x3d7/0x540 [ 433.617704] ? check_preemption_disabled+0x41/0x280 [ 433.622735] ? vfs_write+0x393/0x540 [ 433.626434] ? fput+0x2b/0x190 [ 433.629620] ? ksys_write+0x1c8/0x2a0 [ 433.633446] __x64_sys_sendto+0xdd/0x1b0 [ 433.637505] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 433.642076] do_syscall_64+0xf9/0x620 [ 433.645882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.651067] RIP: 0033:0x4665d9 [ 433.654262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.673233] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.680935] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 433.688205] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 433.695481] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 433.702752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.710019] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:55 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x11a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:18:55 executing program 1 (fault-call:4 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:55 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:18:55 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:18:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:18:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) [ 435.927524] VFS: could not find a valid V7 on loop2. [ 435.980836] VFS: could not find a valid V7 on loop3. 03:18:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 436.024825] FAULT_INJECTION: forcing a failure. [ 436.024825] name failslab, interval 1, probability 0, space 0, times 0 [ 436.060911] CPU: 0 PID: 18103 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 436.068826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.078178] Call Trace: [ 436.080774] dump_stack+0x1fc/0x2ef [ 436.084414] should_fail.cold+0xa/0xf [ 436.088259] ? setup_fault_attr+0x200/0x200 [ 436.092598] ? sctp_bind_addr_state+0x1a1/0x330 [ 436.097287] __should_failslab+0x115/0x180 [ 436.101561] should_failslab+0x5/0x10 [ 436.105475] kmem_cache_alloc_trace+0x46/0x380 [ 436.110072] sctp_add_bind_addr+0x77/0x370 [ 436.114325] sctp_copy_local_addr_list+0x33e/0x4e0 [ 436.119276] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 436.124049] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 436.124842] VFS: could not find a valid V7 on loop2. [ 436.129247] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 436.129264] sctp_bind_addr_copy+0xde/0x470 [ 436.129284] sctp_sendmsg_new_asoc+0x367/0x1040 [ 436.129304] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 436.129324] ? mark_held_locks+0xa6/0xf0 [ 436.129339] ? __local_bh_enable_ip+0x159/0x270 [ 436.129364] sctp_sendmsg+0x1146/0x1580 [ 436.166551] ? sctp_id2assoc+0x260/0x260 [ 436.170616] ? aa_sk_perm+0x165/0x930 [ 436.174427] ? aa_sk_perm+0x534/0x930 [ 436.178252] inet_sendmsg+0x132/0x5a0 [ 436.182066] ? security_socket_sendmsg+0x83/0xb0 [ 436.186853] ? inet_recvmsg+0x5c0/0x5c0 [ 436.190848] sock_sendmsg+0xc3/0x120 [ 436.194574] __sys_sendto+0x21a/0x320 [ 436.198409] ? __ia32_sys_getpeername+0xb0/0xb0 [ 436.203109] ? lock_downgrade+0x720/0x720 [ 436.207287] ? retint_kernel+0x2d/0x2d [ 436.211195] ? fput+0x2b/0x190 [ 436.214392] ? ksys_write+0x1c8/0x2a0 [ 436.218201] __x64_sys_sendto+0xdd/0x1b0 [ 436.222273] ? lockdep_hardirqs_on+0x3a8/0x5c0 03:18:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 436.226858] do_syscall_64+0xf9/0x620 [ 436.230681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.235872] RIP: 0033:0x4665d9 [ 436.239076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 436.257981] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 436.265696] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 03:18:56 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 436.272953] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 436.280218] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 436.287469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.294730] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:56 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:18:56 executing program 1 (fault-call:4 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 436.411060] VFS: could not find a valid V7 on loop2. [ 436.464158] VFS: could not find a valid V7 on loop3. [ 436.472772] VFS: could not find a valid V7 on loop2. [ 436.479776] FAULT_INJECTION: forcing a failure. [ 436.479776] name failslab, interval 1, probability 0, space 0, times 0 [ 436.506786] CPU: 1 PID: 18130 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 436.514692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.524047] Call Trace: [ 436.526653] dump_stack+0x1fc/0x2ef [ 436.530296] should_fail.cold+0xa/0xf [ 436.534127] ? rcu_nmi_exit+0xb3/0x180 [ 436.538023] ? setup_fault_attr+0x200/0x200 [ 436.542346] ? sctp_bind_addr_state+0x1a1/0x330 [ 436.547026] __should_failslab+0x115/0x180 [ 436.551271] should_failslab+0x5/0x10 [ 436.555078] kmem_cache_alloc_trace+0x46/0x380 [ 436.559671] sctp_add_bind_addr+0x77/0x370 [ 436.563916] sctp_copy_local_addr_list+0x33e/0x4e0 [ 436.568860] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 436.573626] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 436.579784] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 436.584982] sctp_bind_addr_copy+0xde/0x470 [ 436.589315] sctp_sendmsg_new_asoc+0x367/0x1040 [ 436.593992] ? rcu_nmi_exit+0xb3/0x180 [ 436.597896] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 436.603104] sctp_sendmsg+0x1146/0x1580 [ 436.607088] ? sctp_id2assoc+0x260/0x260 [ 436.611155] ? aa_label_sk_perm+0xf1/0x510 [ 436.615394] ? debug_lockdep_rcu_enabled+0x8/0xe0 [ 436.620246] ? aa_sk_perm+0x534/0x930 [ 436.624066] inet_sendmsg+0x132/0x5a0 [ 436.627873] ? security_socket_sendmsg+0x83/0xb0 [ 436.632632] ? inet_recvmsg+0x5c0/0x5c0 [ 436.636605] sock_sendmsg+0xc3/0x120 [ 436.640307] __sys_sendto+0x21a/0x320 [ 436.644130] ? __ia32_sys_getpeername+0xb0/0xb0 [ 436.648788] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 436.653362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 436.658109] ? ksys_write+0x24b/0x2a0 [ 436.661915] ? fput+0x2b/0x190 [ 436.665102] ? ksys_write+0x1c8/0x2a0 [ 436.668900] __x64_sys_sendto+0xdd/0x1b0 [ 436.672975] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 436.677569] do_syscall_64+0xf9/0x620 [ 436.681361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.686533] RIP: 0033:0x4665d9 [ 436.689712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 436.708604] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 436.716293] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 436.723551] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 436.730812] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 436.738069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.745343] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:58 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:18:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:18:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 03:18:58 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:18:58 executing program 1 (fault-call:4 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:18:58 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 438.974742] FAULT_INJECTION: forcing a failure. [ 438.974742] name failslab, interval 1, probability 0, space 0, times 0 [ 438.987505] CPU: 1 PID: 18162 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 438.995407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.004766] Call Trace: [ 439.007367] dump_stack+0x1fc/0x2ef [ 439.011037] should_fail.cold+0xa/0xf [ 439.014851] ? setup_fault_attr+0x200/0x200 [ 439.019182] ? sctp_bind_addr_state+0x1a1/0x330 [ 439.023865] __should_failslab+0x115/0x180 [ 439.028110] should_failslab+0x5/0x10 [ 439.031949] kmem_cache_alloc_trace+0x46/0x380 [ 439.036542] sctp_add_bind_addr+0x77/0x370 [ 439.040788] sctp_copy_local_addr_list+0x33e/0x4e0 [ 439.045724] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 439.050490] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 439.055691] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 439.060890] sctp_bind_addr_copy+0xde/0x470 [ 439.065246] sctp_sendmsg_new_asoc+0x367/0x1040 [ 439.069946] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 439.075155] ? mark_held_locks+0xa6/0xf0 [ 439.079310] ? __local_bh_enable_ip+0x159/0x270 [ 439.084003] sctp_sendmsg+0x1146/0x1580 [ 439.087988] ? sctp_id2assoc+0x260/0x260 [ 439.092060] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.096829] ? retint_kernel+0x2d/0x2d [ 439.100737] inet_sendmsg+0x132/0x5a0 [ 439.104548] ? security_socket_sendmsg+0x83/0xb0 [ 439.109309] ? inet_recvmsg+0x5c0/0x5c0 [ 439.113312] sock_sendmsg+0xc3/0x120 [ 439.117032] __sys_sendto+0x21a/0x320 [ 439.120839] ? __ia32_sys_getpeername+0xb0/0xb0 03:18:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 439.125515] ? lock_downgrade+0x720/0x720 [ 439.129668] ? vfs_write+0x3d7/0x540 [ 439.133396] ? check_preemption_disabled+0x41/0x280 [ 439.138142] VFS: could not find a valid V7 on loop2. [ 439.138422] ? vfs_write+0x393/0x540 [ 439.147221] ? fput+0x2b/0x190 [ 439.150431] ? ksys_write+0x1c8/0x2a0 [ 439.154245] __x64_sys_sendto+0xdd/0x1b0 [ 439.158318] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 439.162911] do_syscall_64+0xf9/0x620 [ 439.166728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.171922] RIP: 0033:0x4665d9 [ 439.175115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.194026] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 439.201723] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 439.208980] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 03:18:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 439.220830] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 439.228095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.235361] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:18:59 executing program 1 (fault-call:4 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 439.304279] VFS: could not find a valid V7 on loop3. 03:18:59 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:18:59 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 439.466985] VFS: could not find a valid V7 on loop2. 03:18:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x0, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 439.504794] FAULT_INJECTION: forcing a failure. [ 439.504794] name failslab, interval 1, probability 0, space 0, times 0 [ 439.524383] CPU: 1 PID: 18185 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 439.532273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.541625] Call Trace: [ 439.544218] dump_stack+0x1fc/0x2ef [ 439.547846] should_fail.cold+0xa/0xf [ 439.551651] ? setup_fault_attr+0x200/0x200 [ 439.555981] ? sctp_bind_addr_state+0x1a1/0x330 [ 439.560657] __should_failslab+0x115/0x180 [ 439.564892] should_failslab+0x5/0x10 [ 439.568709] kmem_cache_alloc_trace+0x46/0x380 [ 439.573293] sctp_add_bind_addr+0x77/0x370 [ 439.577530] sctp_copy_local_addr_list+0x33e/0x4e0 [ 439.582462] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 439.587227] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 439.592436] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 439.597627] sctp_bind_addr_copy+0xde/0x470 [ 439.601958] sctp_sendmsg_new_asoc+0x367/0x1040 [ 439.606630] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 439.611870] ? mark_held_locks+0xa6/0xf0 [ 439.615932] ? __local_bh_enable_ip+0x159/0x270 [ 439.620604] sctp_sendmsg+0x1146/0x1580 [ 439.624582] ? sctp_id2assoc+0x260/0x260 [ 439.628650] ? aa_sk_perm+0x534/0x930 [ 439.632463] inet_sendmsg+0x132/0x5a0 [ 439.636268] ? security_socket_sendmsg+0x83/0xb0 [ 439.641022] ? inet_recvmsg+0x5c0/0x5c0 [ 439.644998] sock_sendmsg+0xc3/0x120 [ 439.648723] __sys_sendto+0x21a/0x320 [ 439.652544] ? __ia32_sys_getpeername+0xb0/0xb0 [ 439.657213] ? lock_downgrade+0x720/0x720 [ 439.661382] ? vfs_write+0x3d7/0x540 [ 439.665102] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.669861] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.674638] ? rcu_nmi_exit+0xb3/0x180 [ 439.678527] ? retint_kernel+0x2d/0x2d [ 439.682512] __x64_sys_sendto+0xdd/0x1b0 [ 439.686665] ? __sys_sendto+0x320/0x320 [ 439.690665] do_syscall_64+0xf9/0x620 [ 439.694475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.699663] RIP: 0033:0x4665d9 [ 439.702969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.721896] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 439.729608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 439.736904] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 439.744169] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 439.751436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.758707] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 439.839349] VFS: could not find a valid V7 on loop2. [ 439.844968] VFS: could not find a valid V7 on loop3. [ 441.050037] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.055794] ieee802154 phy1 wpan1: encryption failed: -22 03:19:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:01 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:01 executing program 1 (fault-call:4 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:01 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:01 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x0, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 441.978164] FAULT_INJECTION: forcing a failure. [ 441.978164] name failslab, interval 1, probability 0, space 0, times 0 [ 442.051502] VFS: could not find a valid V7 on loop3. [ 442.054024] CPU: 0 PID: 18219 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 442.064525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.073894] Call Trace: [ 442.076531] dump_stack+0x1fc/0x2ef [ 442.080695] should_fail.cold+0xa/0xf [ 442.084509] ? setup_fault_attr+0x200/0x200 [ 442.088926] ? rcu_nmi_exit+0xb3/0x180 [ 442.092827] ? retint_kernel+0x2d/0x2d [ 442.096732] __should_failslab+0x115/0x180 [ 442.100989] should_failslab+0x5/0x10 [ 442.104807] kmem_cache_alloc_trace+0x46/0x380 [ 442.109412] sctp_add_bind_addr+0x77/0x370 [ 442.113666] sctp_copy_local_addr_list+0x33e/0x4e0 [ 442.118607] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 442.123395] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 442.128602] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 442.133833] sctp_bind_addr_copy+0xde/0x470 [ 442.138173] sctp_sendmsg_new_asoc+0x367/0x1040 [ 442.142849] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 442.148049] ? mark_held_locks+0xa6/0xf0 [ 442.152110] ? __local_bh_enable_ip+0x159/0x270 [ 442.156788] sctp_sendmsg+0x1146/0x1580 [ 442.161722] ? sctp_id2assoc+0x260/0x260 [ 442.165786] ? aa_sk_perm+0x534/0x930 [ 442.169595] ? retint_kernel+0x2d/0x2d [ 442.173490] inet_sendmsg+0x132/0x5a0 [ 442.177291] ? security_socket_sendmsg+0x83/0xb0 [ 442.182088] ? inet_recvmsg+0x5c0/0x5c0 [ 442.186066] sock_sendmsg+0xc3/0x120 [ 442.189782] __sys_sendto+0x21a/0x320 [ 442.193599] ? __ia32_sys_getpeername+0xb0/0xb0 [ 442.198271] ? lock_downgrade+0x720/0x720 [ 442.202426] ? vfs_write+0x3d7/0x540 [ 442.206148] ? check_preemption_disabled+0x41/0x280 [ 442.211167] ? vfs_write+0x393/0x540 [ 442.214880] ? fput+0x2b/0x190 [ 442.218103] ? ksys_write+0x1c8/0x2a0 [ 442.221912] __x64_sys_sendto+0xdd/0x1b0 [ 442.225981] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 442.230736] do_syscall_64+0xf9/0x620 [ 442.234539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.239727] RIP: 0033:0x4665d9 [ 442.242916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.262678] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.270386] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 442.277650] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 442.284982] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 442.292245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:19:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 442.299510] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:02 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:02 executing program 1 (fault-call:4 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 442.416683] VFS: could not find a valid V7 on loop2. 03:19:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x0, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 442.486432] VFS: could not find a valid V7 on loop3. 03:19:02 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579", 0x24, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:02 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 442.616684] FAULT_INJECTION: forcing a failure. [ 442.616684] name failslab, interval 1, probability 0, space 0, times 0 [ 442.643644] VFS: could not find a valid V7 on loop2. [ 442.654108] CPU: 1 PID: 18255 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 442.662006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.671363] Call Trace: [ 442.673957] dump_stack+0x1fc/0x2ef [ 442.677589] should_fail.cold+0xa/0xf [ 442.681413] ? setup_fault_attr+0x200/0x200 [ 442.685737] ? sctp_bind_addr_state+0x1a1/0x330 [ 442.691218] __should_failslab+0x115/0x180 [ 442.695471] should_failslab+0x5/0x10 [ 442.699300] kmem_cache_alloc_trace+0x46/0x380 [ 442.703914] sctp_add_bind_addr+0x77/0x370 [ 442.708154] sctp_copy_local_addr_list+0x33e/0x4e0 [ 442.713084] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 442.717951] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 442.723143] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 442.728333] sctp_bind_addr_copy+0xde/0x470 [ 442.732658] sctp_sendmsg_new_asoc+0x367/0x1040 [ 442.737327] ? rcu_nmi_exit+0xb3/0x180 [ 442.741212] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 442.746401] ? retint_kernel+0x2d/0x2d [ 442.750306] ? sctp_endpoint_lookup_assoc+0x174/0x280 [ 442.755513] sctp_sendmsg+0x1146/0x1580 [ 442.759496] ? sctp_id2assoc+0x260/0x260 [ 442.763564] ? check_preemption_disabled+0x41/0x280 [ 442.768585] ? aa_sk_perm+0x534/0x930 [ 442.772392] ? retint_kernel+0x2d/0x2d [ 442.776281] inet_sendmsg+0x132/0x5a0 [ 442.780083] ? security_socket_sendmsg+0x83/0xb0 [ 442.784837] ? inet_recvmsg+0x5c0/0x5c0 [ 442.788814] sock_sendmsg+0xc3/0x120 [ 442.792551] __sys_sendto+0x21a/0x320 [ 442.796352] ? __ia32_sys_getpeername+0xb0/0xb0 [ 442.801035] ? lock_downgrade+0x720/0x720 [ 442.805213] ? vfs_write+0x393/0x540 [ 442.808933] ? fput+0x2b/0x190 [ 442.812126] ? ksys_write+0x1c8/0x2a0 [ 442.815929] __x64_sys_sendto+0xdd/0x1b0 [ 442.819992] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 442.824575] do_syscall_64+0xf9/0x620 [ 442.828382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.833586] RIP: 0033:0x4665d9 [ 442.836778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.855678] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.863409] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 442.870692] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 442.877974] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 442.885237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.892502] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, 0x0}, @subvolid=0x4a}) [ 442.986083] VFS: could not find a valid V7 on loop3. 03:19:04 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:04 executing program 1 (fault-call:4 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x0, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:04 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, 0x0}, @subvolid=0x4a}) 03:19:04 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 445.022308] VFS: could not find a valid V7 on loop2. [ 445.031326] VFS: could not find a valid V7 on loop3. [ 445.077772] FAULT_INJECTION: forcing a failure. [ 445.077772] name failslab, interval 1, probability 0, space 0, times 0 [ 445.119061] VFS: could not find a valid V7 on loop2. [ 445.132513] CPU: 1 PID: 18290 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 445.140413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.149773] Call Trace: [ 445.152380] dump_stack+0x1fc/0x2ef [ 445.156043] should_fail.cold+0xa/0xf [ 445.159968] ? setup_fault_attr+0x200/0x200 [ 445.164320] ? sctp_bind_addr_state+0x1a1/0x330 [ 445.169612] __should_failslab+0x115/0x180 [ 445.173863] should_failslab+0x5/0x10 [ 445.177707] kmem_cache_alloc_trace+0x46/0x380 03:19:04 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, 0x0}, @subvolid=0x4a}) [ 445.182302] sctp_add_bind_addr+0x77/0x370 [ 445.186550] sctp_copy_local_addr_list+0x33e/0x4e0 [ 445.191491] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 445.196262] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 445.201464] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 445.206666] sctp_bind_addr_copy+0xde/0x470 [ 445.211004] sctp_sendmsg_new_asoc+0x367/0x1040 [ 445.215775] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 445.220986] ? mark_held_locks+0xa6/0xf0 [ 445.225063] ? __local_bh_enable_ip+0x159/0x270 [ 445.229770] sctp_sendmsg+0x1146/0x1580 [ 445.233756] ? sctp_id2assoc+0x260/0x260 [ 445.237840] ? check_preemption_disabled+0x41/0x280 [ 445.242882] ? aa_sk_perm+0x534/0x930 [ 445.246702] ? rcu_nmi_exit+0xb3/0x180 [ 445.250604] ? retint_kernel+0x2d/0x2d [ 445.254507] inet_sendmsg+0x132/0x5a0 [ 445.258314] ? security_socket_sendmsg+0x83/0xb0 [ 445.263073] ? inet_recvmsg+0x5c0/0x5c0 [ 445.267056] sock_sendmsg+0xc3/0x120 [ 445.270787] __sys_sendto+0x21a/0x320 [ 445.274613] ? __ia32_sys_getpeername+0xb0/0xb0 [ 445.279314] ? lock_downgrade+0x720/0x720 [ 445.283483] ? vfs_write+0x3d7/0x540 [ 445.287214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.291983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.296753] ? rcu_nmi_exit+0xb3/0x180 [ 445.300650] ? retint_kernel+0x2d/0x2d [ 445.304641] __x64_sys_sendto+0xdd/0x1b0 [ 445.308715] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 445.313304] do_syscall_64+0xf9/0x620 [ 445.317116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.322303] RIP: 0033:0x4665d9 03:19:05 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[]}, @subvolid=0x4a}) [ 445.325517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.344418] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.352131] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 445.359412] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 445.366687] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 445.373960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:19:05 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 445.381236] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 445.429929] VFS: could not find a valid V7 on loop3. 03:19:05 executing program 1 (fault-call:4 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 445.555254] VFS: could not find a valid V7 on loop2. [ 445.590613] FAULT_INJECTION: forcing a failure. [ 445.590613] name failslab, interval 1, probability 0, space 0, times 0 [ 445.609613] CPU: 0 PID: 18322 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 445.617563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.626924] Call Trace: [ 445.629521] dump_stack+0x1fc/0x2ef [ 445.633154] should_fail.cold+0xa/0xf [ 445.636957] ? setup_fault_attr+0x200/0x200 [ 445.641281] ? __should_failslab+0x73/0x180 [ 445.645605] __should_failslab+0x115/0x180 [ 445.649854] should_failslab+0x5/0x10 [ 445.653653] kmem_cache_alloc_trace+0x46/0x380 [ 445.658242] sctp_add_bind_addr+0x77/0x370 [ 445.662477] sctp_copy_local_addr_list+0x33e/0x4e0 [ 445.668190] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 445.672947] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 445.678141] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 445.683333] sctp_bind_addr_copy+0xde/0x470 [ 445.687683] sctp_sendmsg_new_asoc+0x367/0x1040 [ 445.692358] ? rcu_nmi_exit+0xb3/0x180 [ 445.696248] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 445.701438] ? lock_sock_nested+0x94/0x110 [ 445.705681] ? __local_bh_enable_ip+0x18d/0x270 [ 445.710358] sctp_sendmsg+0x1146/0x1580 [ 445.714339] ? sctp_id2assoc+0x260/0x260 [ 445.718403] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 445.722990] ? aa_sk_perm+0x534/0x930 [ 445.726801] inet_sendmsg+0x132/0x5a0 [ 445.730606] ? security_socket_sendmsg+0x83/0xb0 [ 445.735367] ? inet_recvmsg+0x5c0/0x5c0 [ 445.739379] sock_sendmsg+0xc3/0x120 [ 445.743094] __sys_sendto+0x21a/0x320 [ 445.746895] ? __ia32_sys_getpeername+0xb0/0xb0 [ 445.751580] ? lock_downgrade+0x720/0x720 [ 445.755733] ? vfs_write+0x3d7/0x540 [ 445.759451] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.764204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.768960] ? rcu_nmi_exit+0xb3/0x180 [ 445.772846] ? retint_kernel+0x2d/0x2d [ 445.776738] __x64_sys_sendto+0xdd/0x1b0 [ 445.780799] ? __sys_sendto+0x320/0x320 [ 445.784771] do_syscall_64+0xf9/0x620 [ 445.788576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.793760] RIP: 0033:0x4665d9 [ 445.796949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.815931] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.823635] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 445.830917] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 445.838179] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 445.845443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.852704] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 445.888820] VFS: could not find a valid V7 on loop2. 03:19:07 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:07 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[]}, @subvolid=0x4a}) 03:19:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:07 executing program 1 (fault-call:4 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:07 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 448.114295] VFS: could not find a valid V7 on loop3. [ 448.146784] VFS: could not find a valid V7 on loop2. [ 448.159765] FAULT_INJECTION: forcing a failure. [ 448.159765] name failslab, interval 1, probability 0, space 0, times 0 [ 448.211069] CPU: 1 PID: 18346 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 448.218977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.228334] Call Trace: [ 448.230959] dump_stack+0x1fc/0x2ef [ 448.234600] should_fail.cold+0xa/0xf [ 448.238413] ? setup_fault_attr+0x200/0x200 [ 448.242741] ? sctp_bind_addr_state+0x1a1/0x330 [ 448.247448] __should_failslab+0x115/0x180 [ 448.251690] should_failslab+0x5/0x10 [ 448.255503] kmem_cache_alloc_trace+0x46/0x380 [ 448.260099] sctp_add_bind_addr+0x77/0x370 [ 448.264348] sctp_copy_local_addr_list+0x33e/0x4e0 [ 448.269311] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 448.274081] ? sctp_bind_addr_copy+0x122/0x470 [ 448.278669] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 448.283875] sctp_bind_addr_copy+0xde/0x470 [ 448.288231] sctp_sendmsg_new_asoc+0x367/0x1040 [ 448.292912] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 448.298634] ? mark_held_locks+0xa6/0xf0 [ 448.302702] ? __local_bh_enable_ip+0x159/0x270 [ 448.307382] sctp_sendmsg+0x1146/0x1580 03:19:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[]}, @subvolid=0x4a}) [ 448.311374] ? sctp_id2assoc+0x260/0x260 [ 448.315438] ? aa_sk_perm+0x534/0x930 [ 448.319229] inet_sendmsg+0x132/0x5a0 [ 448.323020] ? security_socket_sendmsg+0x83/0xb0 [ 448.327759] ? inet_recvmsg+0x5c0/0x5c0 [ 448.331758] sock_sendmsg+0xc3/0x120 [ 448.335457] __sys_sendto+0x21a/0x320 [ 448.339243] ? __ia32_sys_getpeername+0xb0/0xb0 [ 448.343898] ? lock_downgrade+0x720/0x720 [ 448.348043] ? vfs_write+0x3d7/0x540 [ 448.351772] ? check_preemption_disabled+0x41/0x280 [ 448.356777] ? vfs_write+0x393/0x540 [ 448.360512] ? fput+0x2b/0x190 [ 448.363687] ? ksys_write+0x1c8/0x2a0 [ 448.367474] __x64_sys_sendto+0xdd/0x1b0 [ 448.371520] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 448.376088] do_syscall_64+0xf9/0x620 [ 448.379877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.385049] RIP: 0033:0x4665d9 [ 448.388227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:19:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:08 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:08 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 448.407110] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 448.414812] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 448.422075] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 448.429944] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 448.437195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.444444] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:08 executing program 1 (fault-call:4 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 448.610302] VFS: could not find a valid V7 on loop3. [ 448.619767] VFS: could not find a valid V7 on loop2. 03:19:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) [ 448.668510] FAULT_INJECTION: forcing a failure. [ 448.668510] name failslab, interval 1, probability 0, space 0, times 0 [ 448.719537] CPU: 1 PID: 18376 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 448.727448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.729028] VFS: could not find a valid V7 on loop2. [ 448.736801] Call Trace: [ 448.736825] dump_stack+0x1fc/0x2ef [ 448.736844] should_fail.cold+0xa/0xf [ 448.736869] ? rcu_nmi_exit+0xb3/0x180 [ 448.755809] ? setup_fault_attr+0x200/0x200 [ 448.760139] ? sctp_bind_addr_state+0x1a1/0x330 [ 448.764828] __should_failslab+0x115/0x180 [ 448.769075] should_failslab+0x5/0x10 [ 448.772882] kmem_cache_alloc_trace+0x46/0x380 [ 448.777483] sctp_add_bind_addr+0x77/0x370 [ 448.781733] sctp_copy_local_addr_list+0x33e/0x4e0 [ 448.786682] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 448.791459] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 448.796663] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 448.801863] sctp_bind_addr_copy+0xde/0x470 [ 448.806721] sctp_sendmsg_new_asoc+0x367/0x1040 [ 448.811439] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 448.816642] ? mark_held_locks+0xa6/0xf0 [ 448.820709] ? __local_bh_enable_ip+0x159/0x270 [ 448.825390] sctp_sendmsg+0x1146/0x1580 [ 448.829378] ? sctp_id2assoc+0x260/0x260 [ 448.833455] ? aa_sk_perm+0x534/0x930 [ 448.837275] inet_sendmsg+0x132/0x5a0 [ 448.841080] ? security_socket_sendmsg+0x83/0xb0 [ 448.845837] ? inet_recvmsg+0x5c0/0x5c0 [ 448.849815] sock_sendmsg+0xc3/0x120 [ 448.853534] __sys_sendto+0x21a/0x320 [ 448.857345] ? __ia32_sys_getpeername+0xb0/0xb0 [ 448.862023] ? lock_downgrade+0x720/0x720 [ 448.866185] ? check_preemption_disabled+0x41/0x280 [ 448.871205] ? vfs_write+0x393/0x540 [ 448.874978] ? fput+0x2b/0x190 [ 448.878159] ? ksys_write+0x1c8/0x2a0 [ 448.882052] __x64_sys_sendto+0xdd/0x1b0 [ 448.886100] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 448.890682] do_syscall_64+0xf9/0x620 [ 448.894493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.899666] RIP: 0033:0x4665d9 [ 448.902854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 448.921737] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 448.929427] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 448.936691] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 448.943960] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 448.951234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.958490] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:10 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) 03:19:10 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:10 executing program 1 (fault-call:4 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:10 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 451.142243] VFS: could not find a valid V7 on loop3. 03:19:11 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 451.195935] FAULT_INJECTION: forcing a failure. [ 451.195935] name failslab, interval 1, probability 0, space 0, times 0 [ 451.225715] VFS: could not find a valid V7 on loop2. [ 451.274215] CPU: 1 PID: 18407 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 451.282121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.291487] Call Trace: [ 451.294076] dump_stack+0x1fc/0x2ef [ 451.297708] should_fail.cold+0xa/0xf [ 451.301516] ? setup_fault_attr+0x200/0x200 [ 451.305837] ? sctp_bind_addr_state+0x1a1/0x330 [ 451.310512] __should_failslab+0x115/0x180 [ 451.314746] should_failslab+0x5/0x10 [ 451.318546] kmem_cache_alloc_trace+0x46/0x380 [ 451.323136] sctp_add_bind_addr+0x77/0x370 [ 451.327372] sctp_copy_local_addr_list+0x33e/0x4e0 [ 451.332302] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 451.337059] ? sctp_association_new+0x159f/0x1f10 [ 451.341913] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 451.347113] sctp_bind_addr_copy+0xde/0x470 [ 451.351442] sctp_sendmsg_new_asoc+0x367/0x1040 [ 451.356114] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 451.362002] ? mark_held_locks+0xa6/0xf0 [ 451.366063] ? __local_bh_enable_ip+0x159/0x270 [ 451.370745] sctp_sendmsg+0x1146/0x1580 [ 451.374718] ? sctp_id2assoc+0x260/0x260 [ 451.378782] ? aa_sk_perm+0x534/0x930 [ 451.382594] inet_sendmsg+0x132/0x5a0 [ 451.386392] ? security_socket_sendmsg+0x83/0xb0 [ 451.391161] ? inet_recvmsg+0x5c0/0x5c0 [ 451.395136] sock_sendmsg+0xc3/0x120 [ 451.398853] __sys_sendto+0x21a/0x320 [ 451.402653] ? __ia32_sys_getpeername+0xb0/0xb0 [ 451.407320] ? lock_downgrade+0x720/0x720 [ 451.411493] ? vfs_write+0x3d7/0x540 [ 451.415226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.419985] ? rcu_nmi_exit+0xb3/0x180 [ 451.423886] ? retint_kernel+0x2d/0x2d [ 451.427795] __x64_sys_sendto+0xdd/0x1b0 [ 451.431862] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 451.436456] do_syscall_64+0xf9/0x620 [ 451.440264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.445449] RIP: 0033:0x4665d9 [ 451.448650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.467544] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 03:19:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) [ 451.475250] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 451.482515] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 451.489790] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 451.497049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.504325] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:11 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:11 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) 03:19:11 executing program 1 (fault-call:4 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 451.709016] VFS: could not find a valid V7 on loop3. 03:19:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) [ 451.767069] VFS: could not find a valid V7 on loop2. [ 451.811189] FAULT_INJECTION: forcing a failure. [ 451.811189] name failslab, interval 1, probability 0, space 0, times 0 [ 451.835949] VFS: could not find a valid V7 on loop2. [ 451.884396] CPU: 0 PID: 18438 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 451.892304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.901656] Call Trace: [ 451.904249] dump_stack+0x1fc/0x2ef [ 451.907882] should_fail.cold+0xa/0xf [ 451.911689] ? setup_fault_attr+0x200/0x200 [ 451.916018] ? sctp_bind_addr_state+0x1a1/0x330 [ 451.920700] __should_failslab+0x115/0x180 [ 451.924948] should_failslab+0x5/0x10 [ 451.928758] kmem_cache_alloc_trace+0x46/0x380 [ 451.933376] sctp_add_bind_addr+0x77/0x370 [ 451.937620] sctp_copy_local_addr_list+0x33e/0x4e0 [ 451.942576] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 451.947340] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 451.952581] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 451.957837] sctp_bind_addr_copy+0xde/0x470 [ 451.962180] sctp_sendmsg_new_asoc+0x367/0x1040 [ 451.966856] ? rcu_nmi_exit+0xb3/0x180 [ 451.970753] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 451.976038] ? lock_sock_nested+0x94/0x110 [ 451.980283] ? __local_bh_enable_ip+0x18d/0x270 [ 451.984957] sctp_sendmsg+0x1146/0x1580 [ 451.988958] ? sctp_id2assoc+0x260/0x260 [ 451.993189] ? aa_sk_perm+0x534/0x930 [ 451.997008] inet_sendmsg+0x132/0x5a0 [ 452.000793] ? security_socket_sendmsg+0x83/0xb0 [ 452.005531] ? inet_recvmsg+0x5c0/0x5c0 [ 452.009503] sock_sendmsg+0xc3/0x120 [ 452.013212] __sys_sendto+0x21a/0x320 [ 452.017031] ? __ia32_sys_getpeername+0xb0/0xb0 [ 452.021686] ? lock_downgrade+0x720/0x720 [ 452.025851] ? vfs_write+0x3d7/0x540 [ 452.029593] ? check_preemption_disabled+0x41/0x280 [ 452.034605] ? vfs_write+0x393/0x540 [ 452.038316] ? fput+0x2b/0x190 [ 452.041502] ? ksys_write+0x1c8/0x2a0 [ 452.045308] __x64_sys_sendto+0xdd/0x1b0 [ 452.049421] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 452.054008] do_syscall_64+0xf9/0x620 [ 452.057794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.062975] RIP: 0033:0x4665d9 [ 452.066147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 452.085040] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 452.092729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 452.099979] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 452.107237] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 452.114501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.122125] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:13 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:13 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff0700000000"]}, @subvolid=0x4a}) 03:19:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) 03:19:13 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:13 executing program 1 (fault-call:4 fault-nth:41): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:14 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, 0x0, 0xde}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 454.215420] VFS: could not find a valid V7 on loop3. [ 454.224252] VFS: could not find a valid V7 on loop2. 03:19:14 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 454.319661] FAULT_INJECTION: forcing a failure. [ 454.319661] name failslab, interval 1, probability 0, space 0, times 0 [ 454.359303] CPU: 1 PID: 18471 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 03:19:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff0700000000"]}, @subvolid=0x4a}) [ 454.367317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.376677] Call Trace: [ 454.379285] dump_stack+0x1fc/0x2ef [ 454.382973] should_fail.cold+0xa/0xf [ 454.386786] ? setup_fault_attr+0x200/0x200 [ 454.391115] ? sctp_bind_addr_state+0x1a1/0x330 [ 454.395799] __should_failslab+0x115/0x180 [ 454.400046] should_failslab+0x5/0x10 [ 454.403856] kmem_cache_alloc_trace+0x46/0x380 [ 454.408428] sctp_add_bind_addr+0x77/0x370 [ 454.412691] sctp_copy_local_addr_list+0x33e/0x4e0 [ 454.417607] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 454.422364] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 454.427553] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 454.432731] sctp_bind_addr_copy+0xde/0x470 [ 454.437045] sctp_sendmsg_new_asoc+0x367/0x1040 [ 454.441705] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 454.446895] ? mark_held_locks+0xa6/0xf0 [ 454.450959] ? __local_bh_enable_ip+0x159/0x270 [ 454.455616] sctp_sendmsg+0x1146/0x1580 [ 454.459593] ? sctp_id2assoc+0x260/0x260 [ 454.463642] ? aa_sk_perm+0x534/0x930 [ 454.467437] inet_sendmsg+0x132/0x5a0 [ 454.471227] ? security_socket_sendmsg+0x83/0xb0 [ 454.475968] ? inet_recvmsg+0x5c0/0x5c0 [ 454.479945] sock_sendmsg+0xc3/0x120 [ 454.483644] __sys_sendto+0x21a/0x320 [ 454.487441] ? __ia32_sys_getpeername+0xb0/0xb0 [ 454.492125] ? lock_downgrade+0x720/0x720 [ 454.496779] ? vfs_write+0x3d7/0x540 [ 454.500486] ? check_preemption_disabled+0x41/0x280 [ 454.505762] ? vfs_write+0x393/0x540 [ 454.509508] ? fput+0x2b/0x190 [ 454.512693] ? ksys_write+0x1c8/0x2a0 [ 454.516499] __x64_sys_sendto+0xdd/0x1b0 [ 454.520550] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 454.525118] do_syscall_64+0xf9/0x620 [ 454.528924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.534098] RIP: 0033:0x4665d9 [ 454.537274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 454.556185] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.563915] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 454.571180] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 454.578972] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 454.586249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.593513] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:14 executing program 1 (fault-call:4 fault-nth:42): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) [ 454.682767] VFS: could not find a valid V7 on loop3. [ 454.695837] VFS: could not find a valid V7 on loop2. [ 454.767391] FAULT_INJECTION: forcing a failure. [ 454.767391] name failslab, interval 1, probability 0, space 0, times 0 [ 454.786105] CPU: 1 PID: 18496 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 454.794000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.803353] Call Trace: [ 454.805959] dump_stack+0x1fc/0x2ef [ 454.809600] should_fail.cold+0xa/0xf [ 454.813470] ? setup_fault_attr+0x200/0x200 [ 454.817800] ? sctp_bind_addr_state+0x1a1/0x330 [ 454.822484] __should_failslab+0x115/0x180 [ 454.826739] should_failslab+0x5/0x10 [ 454.830542] kmem_cache_alloc_trace+0x46/0x380 [ 454.835135] sctp_add_bind_addr+0x77/0x370 [ 454.839370] sctp_copy_local_addr_list+0x33e/0x4e0 [ 454.844298] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 454.849067] ? audit_kill_trees+0x230/0x230 [ 454.853406] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 454.858638] sctp_bind_addr_copy+0xde/0x470 [ 454.862947] sctp_sendmsg_new_asoc+0x367/0x1040 [ 454.867602] ? rcu_nmi_exit+0xb3/0x180 [ 454.871474] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 454.876661] ? lock_sock_nested+0x94/0x110 [ 454.880885] ? __local_bh_enable_ip+0x18d/0x270 [ 454.885539] sctp_sendmsg+0x1146/0x1580 [ 454.889517] ? sctp_id2assoc+0x260/0x260 [ 454.893566] ? aa_sk_perm+0x534/0x930 [ 454.897357] inet_sendmsg+0x132/0x5a0 [ 454.901142] ? security_socket_sendmsg+0x83/0xb0 [ 454.905883] ? inet_recvmsg+0x5c0/0x5c0 [ 454.909890] sock_sendmsg+0xc3/0x120 [ 454.913613] __sys_sendto+0x21a/0x320 [ 454.917433] ? __ia32_sys_getpeername+0xb0/0xb0 [ 454.922092] ? lock_downgrade+0x720/0x720 [ 454.926242] ? vfs_write+0x3d7/0x540 [ 454.929962] ? check_preemption_disabled+0x41/0x280 [ 454.934964] ? vfs_write+0x393/0x540 [ 454.938662] ? fput+0x2b/0x190 [ 454.941847] ? ksys_write+0x1c8/0x2a0 [ 454.945665] __x64_sys_sendto+0xdd/0x1b0 [ 454.949726] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 454.954309] do_syscall_64+0xf9/0x620 [ 454.958097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.963268] RIP: 0033:0x4665d9 [ 454.966445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 454.985355] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.993055] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 455.000314] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 455.007675] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 03:19:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff0700000000"]}, @subvolid=0x4a}) 03:19:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @subvolid=0x4a}) [ 455.014929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.022180] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:14 executing program 1 (fault-call:4 fault-nth:43): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:14 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:14 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 455.164658] FAULT_INJECTION: forcing a failure. [ 455.164658] name failslab, interval 1, probability 0, space 0, times 0 [ 455.212658] CPU: 1 PID: 18503 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 455.220568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.229923] Call Trace: [ 455.232524] dump_stack+0x1fc/0x2ef [ 455.236165] should_fail.cold+0xa/0xf [ 455.239978] ? rcu_nmi_exit+0xb3/0x180 [ 455.243873] ? setup_fault_attr+0x200/0x200 [ 455.248205] ? sctp_bind_addr_state+0x1a1/0x330 [ 455.252884] __should_failslab+0x115/0x180 [ 455.255559] VFS: could not find a valid V7 on loop3. [ 455.257128] should_failslab+0x5/0x10 [ 455.257145] kmem_cache_alloc_trace+0x46/0x380 [ 455.257165] sctp_add_bind_addr+0x77/0x370 [ 455.274849] sctp_copy_local_addr_list+0x33e/0x4e0 [ 455.279791] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 455.284560] ? sctp_bind_addr_copy+0x15d/0x470 [ 455.289179] sctp_bind_addr_copy+0xde/0x470 [ 455.293602] sctp_sendmsg_new_asoc+0x367/0x1040 [ 455.298290] ? rcu_nmi_exit+0xb3/0x180 [ 455.302188] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 455.307410] ? lock_sock_nested+0x94/0x110 [ 455.311660] ? __local_bh_enable_ip+0x18d/0x270 [ 455.316346] sctp_sendmsg+0x1146/0x1580 [ 455.320330] ? sctp_id2assoc+0x260/0x260 [ 455.324436] ? check_preemption_disabled+0x41/0x280 [ 455.329460] ? aa_sk_perm+0x534/0x930 [ 455.333272] ? retint_kernel+0x2d/0x2d [ 455.337172] inet_sendmsg+0x132/0x5a0 [ 455.341063] ? security_socket_sendmsg+0x83/0xb0 [ 455.345821] ? inet_recvmsg+0x5c0/0x5c0 [ 455.349801] sock_sendmsg+0xc3/0x120 [ 455.353523] __sys_sendto+0x21a/0x320 [ 455.357334] ? __ia32_sys_getpeername+0xb0/0xb0 [ 455.362019] ? lock_downgrade+0x720/0x720 [ 455.366170] ? vfs_write+0x3d7/0x540 [ 455.369914] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.374668] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.379478] ? rcu_nmi_exit+0xb3/0x180 [ 455.383373] ? retint_kernel+0x2d/0x2d [ 455.387290] __x64_sys_sendto+0xdd/0x1b0 [ 455.391379] ? __sys_sendto+0x320/0x320 [ 455.395337] do_syscall_64+0xf9/0x620 [ 455.399126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.404321] RIP: 0033:0x4665d9 [ 455.407508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 455.426416] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 455.434106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 455.441359] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 455.448610] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 455.455861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:19:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) [ 455.463114] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:17 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, 0x0, 0xde}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:17 executing program 1 (fault-call:4 fault-nth:44): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:17 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:17 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) 03:19:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) [ 457.419550] VFS: could not find a valid V7 on loop2. [ 457.429744] VFS: could not find a valid V7 on loop3. [ 457.434295] FAULT_INJECTION: forcing a failure. [ 457.434295] name failslab, interval 1, probability 0, space 0, times 0 [ 457.462293] CPU: 0 PID: 18547 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 457.470187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.479539] Call Trace: [ 457.482135] dump_stack+0x1fc/0x2ef [ 457.485772] should_fail.cold+0xa/0xf [ 457.489602] ? setup_fault_attr+0x200/0x200 [ 457.493929] ? sctp_bind_addr_state+0x1a1/0x330 [ 457.498617] __should_failslab+0x115/0x180 [ 457.502860] should_failslab+0x5/0x10 [ 457.506667] kmem_cache_alloc_trace+0x46/0x380 [ 457.511259] sctp_add_bind_addr+0x77/0x370 03:19:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) [ 457.515512] sctp_copy_local_addr_list+0x33e/0x4e0 [ 457.520453] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 457.525220] ? sctp_bind_addr_copy+0x15d/0x470 [ 457.529835] sctp_bind_addr_copy+0xde/0x470 [ 457.534170] sctp_sendmsg_new_asoc+0x367/0x1040 [ 457.538849] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 457.544075] ? mark_held_locks+0xa6/0xf0 [ 457.548145] ? __local_bh_enable_ip+0x159/0x270 [ 457.552826] sctp_sendmsg+0x1146/0x1580 [ 457.555849] ptrace attach of "/root/syz-executor.0"[18558] was attempted by "/root/syz-executor.0"[18559] 03:19:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) [ 457.556813] ? sctp_id2assoc+0x260/0x260 [ 457.556830] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.556855] ? retint_kernel+0x2d/0x2d [ 457.579240] ? inet_sendmsg+0x4e/0x5a0 [ 457.583133] inet_sendmsg+0x132/0x5a0 [ 457.586939] ? security_socket_sendmsg+0x83/0xb0 [ 457.591697] ? inet_recvmsg+0x5c0/0x5c0 [ 457.595677] sock_sendmsg+0xc3/0x120 [ 457.599405] __sys_sendto+0x21a/0x320 [ 457.603216] ? __ia32_sys_getpeername+0xb0/0xb0 [ 457.607895] ? lock_downgrade+0x720/0x720 [ 457.612051] ? vfs_write+0x3d7/0x540 [ 457.615782] ? check_preemption_disabled+0x41/0x280 [ 457.620795] ? vfs_write+0x393/0x540 [ 457.624700] ? fput+0x2b/0x190 [ 457.627883] ? ksys_write+0x1c8/0x2a0 [ 457.631683] __x64_sys_sendto+0xdd/0x1b0 [ 457.635742] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 457.640321] do_syscall_64+0xf9/0x620 [ 457.644149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.649329] RIP: 0033:0x4665d9 03:19:17 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, 0x0, 0xde}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 457.652541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 457.671444] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 457.679155] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 457.686420] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 457.693688] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 457.700954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.708220] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:17 executing program 1 (fault-call:4 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 457.790790] VFS: could not find a valid V7 on loop2. 03:19:17 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:17 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 457.883075] FAULT_INJECTION: forcing a failure. [ 457.883075] name failslab, interval 1, probability 0, space 0, times 0 [ 457.923358] CPU: 0 PID: 18574 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 457.931265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.940616] Call Trace: [ 457.943215] dump_stack+0x1fc/0x2ef [ 457.946854] should_fail.cold+0xa/0xf [ 457.950661] ? rcu_nmi_exit+0xb3/0x180 [ 457.954558] ? setup_fault_attr+0x200/0x200 [ 457.958920] ? sctp_bind_addr_state+0x1a1/0x330 [ 457.963616] __should_failslab+0x115/0x180 [ 457.967874] should_failslab+0x5/0x10 [ 457.971688] kmem_cache_alloc_trace+0x46/0x380 [ 457.976287] sctp_add_bind_addr+0x77/0x370 [ 457.980563] sctp_copy_local_addr_list+0x33e/0x4e0 [ 457.985509] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 457.990284] ? sctp_association_new+0x1800/0x1f10 [ 457.995133] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 458.000333] sctp_bind_addr_copy+0xde/0x470 [ 458.004667] sctp_sendmsg_new_asoc+0x367/0x1040 [ 458.009343] ? rcu_nmi_exit+0xb3/0x180 [ 458.013237] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 458.018435] ? lock_sock_nested+0x94/0x110 [ 458.022685] ? __local_bh_enable_ip+0x18d/0x270 [ 458.027364] sctp_sendmsg+0x1146/0x1580 [ 458.031352] ? sctp_id2assoc+0x260/0x260 [ 458.035430] ? aa_sk_perm+0x534/0x930 [ 458.039260] inet_sendmsg+0x132/0x5a0 [ 458.043075] ? security_socket_sendmsg+0x83/0xb0 [ 458.047842] ? inet_recvmsg+0x5c0/0x5c0 [ 458.051828] sock_sendmsg+0xc3/0x120 [ 458.055552] __sys_sendto+0x21a/0x320 [ 458.059376] ? __ia32_sys_getpeername+0xb0/0xb0 [ 458.064056] ? lock_downgrade+0x720/0x720 [ 458.068212] ? vfs_write+0x3d7/0x540 03:19:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff"]}, @subvolid=0x4a}) [ 458.071947] ? check_preemption_disabled+0x41/0x280 [ 458.076978] ? vfs_write+0x393/0x540 [ 458.080709] ? fput+0x2b/0x190 [ 458.083906] ? ksys_write+0x1c8/0x2a0 [ 458.087719] __x64_sys_sendto+0xdd/0x1b0 [ 458.091794] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 458.096383] do_syscall_64+0xf9/0x620 [ 458.100197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.105395] RIP: 0033:0x4665d9 03:19:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) [ 458.108593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 458.127522] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 458.135257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 458.142528] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 458.149808] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 458.157082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.163230] VFS: could not find a valid V7 on loop3. 03:19:17 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 458.164366] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:18 executing program 1 (fault-call:4 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:18 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 458.396428] FAULT_INJECTION: forcing a failure. [ 458.396428] name failslab, interval 1, probability 0, space 0, times 0 [ 458.427509] VFS: could not find a valid V7 on loop3. [ 458.430521] CPU: 1 PID: 18606 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 458.440517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.449978] Call Trace: [ 458.452577] dump_stack+0x1fc/0x2ef [ 458.456321] should_fail.cold+0xa/0xf [ 458.460350] ? setup_fault_attr+0x200/0x200 [ 458.464693] ? sctp_bind_addr_state+0x1a1/0x330 [ 458.469385] __should_failslab+0x115/0x180 [ 458.473632] should_failslab+0x5/0x10 [ 458.477442] kmem_cache_alloc_trace+0x46/0x380 [ 458.482043] sctp_add_bind_addr+0x77/0x370 [ 458.486444] sctp_copy_local_addr_list+0x33e/0x4e0 [ 458.491387] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 458.496157] ? retint_kernel+0x2d/0x2d [ 458.500057] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 458.505268] sctp_bind_addr_copy+0xde/0x470 [ 458.509634] sctp_sendmsg_new_asoc+0x367/0x1040 [ 458.514315] ? rcu_nmi_exit+0xb3/0x180 [ 458.518215] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 458.523415] ? preempt_schedule_common+0x45/0xc0 [ 458.528184] ? ___preempt_schedule+0x16/0x18 [ 458.532610] sctp_sendmsg+0x1146/0x1580 [ 458.536594] ? sctp_id2assoc+0x260/0x260 [ 458.540667] ? check_preemption_disabled+0x41/0x280 03:19:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000"]}, @subvolid=0x4a}) 03:19:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff"]}, @subvolid=0x4a}) 03:19:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 458.545694] ? aa_sk_perm+0x534/0x930 [ 458.549511] ? retint_kernel+0x2d/0x2d [ 458.553413] inet_sendmsg+0x132/0x5a0 [ 458.557219] ? security_socket_sendmsg+0x83/0xb0 [ 458.561985] ? inet_recvmsg+0x5c0/0x5c0 [ 458.565967] sock_sendmsg+0xc3/0x120 [ 458.569705] __sys_sendto+0x21a/0x320 [ 458.573689] ? __ia32_sys_getpeername+0xb0/0xb0 [ 458.578370] ? lock_downgrade+0x720/0x720 [ 458.582517] ? vfs_write+0x3d7/0x540 [ 458.586219] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.590968] ? rcu_nmi_exit+0xb3/0x180 [ 458.594839] ? retint_kernel+0x2d/0x2d [ 458.598739] __x64_sys_sendto+0xdd/0x1b0 [ 458.602808] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 458.607547] do_syscall_64+0xf9/0x620 [ 458.611347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.616538] RIP: 0033:0x4665d9 [ 458.619714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 458.638598] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 458.646287] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 458.653544] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 458.660810] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 458.668072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.675329] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 458.754100] VFS: could not find a valid V7 on loop2. 03:19:20 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:20 executing program 1 (fault-call:4 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:20 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:20 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff"]}, @subvolid=0x4a}) [ 460.838620] VFS: could not find a valid V7 on loop3. [ 460.852650] VFS: could not find a valid V7 on loop2. [ 460.906785] FAULT_INJECTION: forcing a failure. [ 460.906785] name failslab, interval 1, probability 0, space 0, times 0 [ 460.965900] VFS: could not find a valid V7 on loop2. [ 460.990726] CPU: 0 PID: 18648 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 460.998630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.007982] Call Trace: [ 461.010583] dump_stack+0x1fc/0x2ef [ 461.014226] should_fail.cold+0xa/0xf [ 461.018040] ? setup_fault_attr+0x200/0x200 [ 461.022366] ? sctp_bind_addr_state+0x1a1/0x330 [ 461.027049] __should_failslab+0x115/0x180 [ 461.031290] should_failslab+0x5/0x10 [ 461.035094] kmem_cache_alloc_trace+0x46/0x380 [ 461.039684] sctp_add_bind_addr+0x77/0x370 [ 461.043926] sctp_copy_local_addr_list+0x33e/0x4e0 [ 461.048866] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 461.053642] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 461.058842] sctp_bind_addr_copy+0xde/0x470 [ 461.063198] sctp_sendmsg_new_asoc+0x367/0x1040 [ 461.067907] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 461.073106] ? mark_held_locks+0xa6/0xf0 [ 461.077273] ? __local_bh_enable_ip+0x159/0x270 [ 461.081949] sctp_sendmsg+0x1146/0x1580 [ 461.085926] ? sctp_id2assoc+0x260/0x260 [ 461.089995] ? aa_sk_perm+0x534/0x930 [ 461.093799] ? retint_kernel+0x2d/0x2d [ 461.097693] inet_sendmsg+0x132/0x5a0 [ 461.101493] ? security_socket_sendmsg+0x83/0xb0 [ 461.106243] ? inet_recvmsg+0x5c0/0x5c0 [ 461.110216] sock_sendmsg+0xc3/0x120 [ 461.113931] __sys_sendto+0x21a/0x320 [ 461.117747] ? __ia32_sys_getpeername+0xb0/0xb0 [ 461.122435] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 461.127018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 461.131789] ? ksys_write+0x1c8/0x2a0 [ 461.135590] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 461.140344] ? ksys_write+0x1c8/0x2a0 [ 461.144147] __x64_sys_sendto+0xdd/0x1b0 [ 461.148296] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 461.152874] do_syscall_64+0xf9/0x620 [ 461.156680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.161866] RIP: 0033:0x4665d9 [ 461.165058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.183954] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 03:19:21 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:21 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:21 executing program 1 (fault-call:4 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 461.191658] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 461.198921] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 461.206183] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 461.213460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.220736] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 461.316058] VFS: could not find a valid V7 on loop2. [ 461.356023] FAULT_INJECTION: forcing a failure. [ 461.356023] name failslab, interval 1, probability 0, space 0, times 0 [ 461.391603] CPU: 1 PID: 18671 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 461.399506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.408860] Call Trace: [ 461.411464] dump_stack+0x1fc/0x2ef [ 461.415106] should_fail.cold+0xa/0xf [ 461.418921] ? setup_fault_attr+0x200/0x200 [ 461.423248] ? sctp_bind_addr_state+0x1a1/0x330 [ 461.427936] __should_failslab+0x115/0x180 [ 461.432181] should_failslab+0x5/0x10 [ 461.435990] kmem_cache_alloc_trace+0x46/0x380 [ 461.440589] sctp_add_bind_addr+0x77/0x370 [ 461.444835] sctp_copy_local_addr_list+0x33e/0x4e0 [ 461.449775] ? sctp_inet_bind_verify+0x1f0/0x1f0 03:19:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) [ 461.454546] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 461.459744] sctp_bind_addr_copy+0xde/0x470 [ 461.464079] sctp_sendmsg_new_asoc+0x367/0x1040 [ 461.468761] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 461.473968] ? mark_held_locks+0xa6/0xf0 [ 461.478036] ? __local_bh_enable_ip+0x159/0x270 [ 461.482742] sctp_sendmsg+0x1146/0x1580 [ 461.486729] ? sctp_id2assoc+0x260/0x260 [ 461.490800] ? check_preemption_disabled+0x41/0x280 [ 461.495830] ? aa_sk_perm+0x534/0x930 [ 461.499650] ? rcu_nmi_exit+0xb3/0x180 [ 461.503547] ? retint_kernel+0x2d/0x2d [ 461.507449] inet_sendmsg+0x132/0x5a0 [ 461.511258] ? security_socket_sendmsg+0x83/0xb0 [ 461.516019] ? inet_recvmsg+0x5c0/0x5c0 [ 461.520003] sock_sendmsg+0xc3/0x120 [ 461.523724] __sys_sendto+0x21a/0x320 [ 461.527533] ? __ia32_sys_getpeername+0xb0/0xb0 [ 461.532213] ? lock_downgrade+0x720/0x720 [ 461.536389] ? vfs_write+0x393/0x540 [ 461.540115] ? fput+0x2b/0x190 [ 461.543318] ? ksys_write+0x1c8/0x2a0 [ 461.547148] __x64_sys_sendto+0xdd/0x1b0 [ 461.551218] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 461.555827] do_syscall_64+0xf9/0x620 [ 461.559640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.564833] RIP: 0033:0x4665d9 [ 461.568027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.586931] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.594642] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 461.601917] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 461.609186] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 461.616459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.623733] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 461.677124] VFS: could not find a valid V7 on loop3. [ 461.685053] VFS: could not find a valid V7 on loop2. 03:19:23 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:23 executing program 1 (fault-call:4 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:23 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:23 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 463.905104] VFS: could not find a valid V7 on loop3. [ 463.917528] VFS: could not find a valid V7 on loop2. [ 463.954965] FAULT_INJECTION: forcing a failure. [ 463.954965] name failslab, interval 1, probability 0, space 0, times 0 [ 463.999305] CPU: 0 PID: 18704 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 464.007221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.016577] Call Trace: [ 464.019173] dump_stack+0x1fc/0x2ef [ 464.022811] should_fail.cold+0xa/0xf [ 464.026618] ? rcu_nmi_exit+0xb3/0x180 [ 464.030543] ? setup_fault_attr+0x200/0x200 [ 464.034875] ? sctp_bind_addr_state+0x1a1/0x330 [ 464.039825] __should_failslab+0x115/0x180 [ 464.044102] should_failslab+0x5/0x10 03:19:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) [ 464.047910] kmem_cache_alloc_trace+0x46/0x380 [ 464.052509] sctp_add_bind_addr+0x77/0x370 [ 464.056753] sctp_copy_local_addr_list+0x33e/0x4e0 [ 464.061695] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 464.066465] ? sctp_association_new+0x159f/0x1f10 [ 464.071314] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 464.076510] sctp_bind_addr_copy+0xde/0x470 [ 464.080845] sctp_sendmsg_new_asoc+0x367/0x1040 [ 464.085529] ? rcu_nmi_exit+0xb3/0x180 [ 464.089436] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 464.094621] ? retint_kernel+0x2d/0x2d [ 464.098512] ? sctp_sendmsg+0xd34/0x1580 [ 464.102597] sctp_sendmsg+0x1146/0x1580 [ 464.106572] ? sctp_id2assoc+0x260/0x260 [ 464.110639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 464.115412] ? retint_kernel+0x2d/0x2d [ 464.119321] inet_sendmsg+0x132/0x5a0 [ 464.123135] ? security_socket_sendmsg+0x83/0xb0 [ 464.127876] ? inet_recvmsg+0x5c0/0x5c0 [ 464.131857] sock_sendmsg+0xc3/0x120 [ 464.135568] __sys_sendto+0x21a/0x320 [ 464.139383] ? __ia32_sys_getpeername+0xb0/0xb0 [ 464.144084] ? lock_downgrade+0x720/0x720 [ 464.148229] ? vfs_write+0x3d7/0x540 [ 464.151943] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 464.156690] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 464.161434] ? rcu_nmi_exit+0xb3/0x180 [ 464.165314] ? retint_kernel+0x2d/0x2d [ 464.169219] __x64_sys_sendto+0xdd/0x1b0 [ 464.173280] ? __sys_sendto+0x320/0x320 [ 464.177242] do_syscall_64+0xf9/0x620 [ 464.181049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.186230] RIP: 0033:0x4665d9 [ 464.189425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.208325] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 464.216026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 464.223296] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 464.230657] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 464.237925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:19:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 464.245216] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:24 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:24 executing program 1 (fault-call:4 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:24 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 464.361274] VFS: could not find a valid V7 on loop3. [ 464.395014] FAULT_INJECTION: forcing a failure. [ 464.395014] name failslab, interval 1, probability 0, space 0, times 0 [ 464.440496] CPU: 1 PID: 18735 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 464.448416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.457767] Call Trace: [ 464.460364] dump_stack+0x1fc/0x2ef [ 464.464002] should_fail.cold+0xa/0xf [ 464.467815] ? setup_fault_attr+0x200/0x200 [ 464.472144] ? sctp_bind_addr_state+0x1a1/0x330 [ 464.476826] __should_failslab+0x115/0x180 [ 464.481077] should_failslab+0x5/0x10 [ 464.484899] kmem_cache_alloc_trace+0x46/0x380 [ 464.489511] sctp_add_bind_addr+0x77/0x370 [ 464.493759] sctp_copy_local_addr_list+0x33e/0x4e0 [ 464.498700] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 464.503476] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 464.508681] sctp_bind_addr_copy+0xde/0x470 [ 464.513022] sctp_sendmsg_new_asoc+0x367/0x1040 [ 464.517705] ? rcu_nmi_exit+0xb3/0x180 [ 464.521604] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 464.526812] ? mark_held_locks+0xa6/0xf0 [ 464.530890] ? __local_bh_enable_ip+0x159/0x270 [ 464.535571] sctp_sendmsg+0x1146/0x1580 [ 464.539557] ? sctp_id2assoc+0x260/0x260 [ 464.543628] ? check_preemption_disabled+0x41/0x280 [ 464.548654] ? aa_sk_perm+0x534/0x930 [ 464.552492] inet_sendmsg+0x132/0x5a0 [ 464.556299] ? security_socket_sendmsg+0x83/0xb0 [ 464.561755] ? inet_recvmsg+0x5c0/0x5c0 [ 464.563970] VFS: could not find a valid V7 on loop2. [ 464.565765] sock_sendmsg+0xc3/0x120 [ 464.565783] __sys_sendto+0x21a/0x320 [ 464.565802] ? __ia32_sys_getpeername+0xb0/0xb0 [ 464.583047] ? __mutex_unlock_slowpath+0xea/0x610 [ 464.587913] ? check_preemption_disabled+0x41/0x280 [ 464.592950] ? vfs_write+0x393/0x540 [ 464.596670] ? fput+0x2b/0x190 [ 464.599847] ? ksys_write+0x1c8/0x2a0 [ 464.603638] __x64_sys_sendto+0xdd/0x1b0 [ 464.607684] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 464.612250] do_syscall_64+0xf9/0x620 [ 464.616050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.621258] RIP: 0033:0x4665d9 03:19:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) [ 464.624432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.643321] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 464.651022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 464.658272] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 464.665540] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 464.672806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.680061] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 464.746973] VFS: could not find a valid V7 on loop2. 03:19:26 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:26 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:26 executing program 1 (fault-call:4 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:26 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 466.978918] VFS: could not find a valid V7 on loop2. [ 466.986782] VFS: could not find a valid V7 on loop3. [ 467.026078] FAULT_INJECTION: forcing a failure. [ 467.026078] name failslab, interval 1, probability 0, space 0, times 0 [ 467.040409] CPU: 0 PID: 18776 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 467.048308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.057665] Call Trace: [ 467.060261] dump_stack+0x1fc/0x2ef [ 467.063901] should_fail.cold+0xa/0xf [ 467.067710] ? setup_fault_attr+0x200/0x200 [ 467.072039] ? sctp_bind_addr_state+0x1a1/0x330 [ 467.076723] __should_failslab+0x115/0x180 [ 467.080973] should_failslab+0x5/0x10 [ 467.084777] kmem_cache_alloc_trace+0x46/0x380 [ 467.089369] sctp_add_bind_addr+0x77/0x370 [ 467.093613] sctp_copy_local_addr_list+0x33e/0x4e0 [ 467.098556] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 467.103332] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 467.108543] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 467.113742] sctp_bind_addr_copy+0xde/0x470 [ 467.118079] sctp_sendmsg_new_asoc+0x367/0x1040 03:19:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 467.122761] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 467.127966] ? mark_held_locks+0xa6/0xf0 [ 467.132036] ? __local_bh_enable_ip+0x159/0x270 [ 467.136716] sctp_sendmsg+0x1146/0x1580 [ 467.140705] ? sctp_id2assoc+0x260/0x260 [ 467.144770] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.149543] ? retint_kernel+0x2d/0x2d [ 467.153440] inet_sendmsg+0x132/0x5a0 [ 467.157227] ? security_socket_sendmsg+0x83/0xb0 [ 467.161977] ? inet_recvmsg+0x5c0/0x5c0 [ 467.165949] sock_sendmsg+0xc3/0x120 [ 467.169650] __sys_sendto+0x21a/0x320 [ 467.173497] ? __ia32_sys_getpeername+0xb0/0xb0 [ 467.178157] ? lock_downgrade+0x720/0x720 [ 467.182325] ? vfs_write+0x3d7/0x540 [ 467.186030] ? check_preemption_disabled+0x41/0x280 [ 467.191057] ? vfs_write+0x393/0x540 [ 467.194757] ? fput+0x2b/0x190 [ 467.197943] ? ksys_write+0x1c8/0x2a0 [ 467.201755] __x64_sys_sendto+0xdd/0x1b0 [ 467.205891] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 467.210550] do_syscall_64+0xf9/0x620 [ 467.214348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.219532] RIP: 0033:0x4665d9 [ 467.222710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 467.241593] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.249284] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 467.256535] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 467.263892] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 03:19:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) [ 467.271143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.278394] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:27 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 467.339138] VFS: could not find a valid V7 on loop2. 03:19:27 executing program 1 (fault-call:4 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:27 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:27 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 467.489627] VFS: Found a V7 FS (block size = 512) on device loop3 [ 467.508394] VFS: could not find a valid V7 on loop2. [ 467.546102] FAULT_INJECTION: forcing a failure. [ 467.546102] name failslab, interval 1, probability 0, space 0, times 0 [ 467.558512] CPU: 1 PID: 18800 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 467.566401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.575754] Call Trace: [ 467.578349] dump_stack+0x1fc/0x2ef [ 467.581973] should_fail.cold+0xa/0xf [ 467.585758] ? setup_fault_attr+0x200/0x200 [ 467.590072] ? sctp_bind_addr_state+0x1a1/0x330 [ 467.594749] __should_failslab+0x115/0x180 [ 467.598980] should_failslab+0x5/0x10 [ 467.602776] kmem_cache_alloc_trace+0x46/0x380 [ 467.607361] sctp_add_bind_addr+0x77/0x370 [ 467.611646] sctp_copy_local_addr_list+0x33e/0x4e0 [ 467.616591] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 467.621333] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 467.626506] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 467.631680] sctp_bind_addr_copy+0xde/0x470 [ 467.635986] sctp_sendmsg_new_asoc+0x367/0x1040 [ 467.640656] ? rcu_nmi_exit+0xb3/0x180 [ 467.644555] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 467.649750] ? retint_kernel+0x2d/0x2d [ 467.653636] sctp_sendmsg+0x1146/0x1580 [ 467.657631] ? sctp_id2assoc+0x260/0x260 [ 467.661687] ? check_preemption_disabled+0x41/0x280 [ 467.666706] ? aa_sk_perm+0x534/0x930 [ 467.670526] inet_sendmsg+0x132/0x5a0 [ 467.674322] ? security_socket_sendmsg+0x83/0xb0 [ 467.679083] ? inet_recvmsg+0x5c0/0x5c0 [ 467.683052] sock_sendmsg+0xc3/0x120 [ 467.686751] __sys_sendto+0x21a/0x320 [ 467.690549] ? __ia32_sys_getpeername+0xb0/0xb0 [ 467.695216] ? lock_downgrade+0x720/0x720 [ 467.699377] ? vfs_write+0x3d7/0x540 [ 467.703105] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.707849] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.712605] ? rcu_nmi_exit+0xb3/0x180 [ 467.716493] ? retint_kernel+0x2d/0x2d [ 467.720391] __x64_sys_sendto+0xdd/0x1b0 [ 467.724436] ? do_syscall_64+0x56/0x620 [ 467.728404] do_syscall_64+0xf9/0x620 [ 467.732219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.737401] RIP: 0033:0x4665d9 [ 467.740594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 467.759496] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.767231] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 467.774486] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 467.781741] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 467.789000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.796260] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 467.825708] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 467.846628] VFS: could not find a valid V7 on loop2. [ 467.930994] VFS: Found a V7 FS (block size = 512) on device loop3 [ 467.964456] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:29 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:29 executing program 1 (fault-call:4 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:29 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:29 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 470.067560] VFS: Found a V7 FS (block size = 512) on device loop2 [ 470.079025] VFS: Found a V7 FS (block size = 512) on device loop3 03:19:29 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:29 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 470.147554] FAULT_INJECTION: forcing a failure. [ 470.147554] name failslab, interval 1, probability 0, space 0, times 0 [ 470.205830] CPU: 0 PID: 18839 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 470.213909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.223402] Call Trace: [ 470.226022] dump_stack+0x1fc/0x2ef [ 470.229780] should_fail.cold+0xa/0xf [ 470.233612] ? setup_fault_attr+0x200/0x200 [ 470.237963] ? sctp_bind_addr_state+0x1a1/0x330 [ 470.242808] __should_failslab+0x115/0x180 [ 470.247069] should_failslab+0x5/0x10 [ 470.250982] kmem_cache_alloc_trace+0x46/0x380 03:19:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 470.255600] sctp_add_bind_addr+0x77/0x370 [ 470.260151] sctp_copy_local_addr_list+0x33e/0x4e0 [ 470.265108] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 470.269894] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 470.275205] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 470.280571] sctp_bind_addr_copy+0xde/0x470 [ 470.284934] sctp_sendmsg_new_asoc+0x367/0x1040 [ 470.289765] ? rcu_nmi_exit+0xb3/0x180 [ 470.293769] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 470.299131] ? lock_sock_nested+0x94/0x110 [ 470.303544] ? __local_bh_enable_ip+0x18d/0x270 [ 470.308250] sctp_sendmsg+0x1146/0x1580 [ 470.312263] ? sctp_id2assoc+0x260/0x260 [ 470.316450] ? aa_sk_perm+0x534/0x930 [ 470.320433] inet_sendmsg+0x132/0x5a0 [ 470.324257] ? security_socket_sendmsg+0x83/0xb0 [ 470.329033] ? inet_recvmsg+0x5c0/0x5c0 [ 470.333034] sock_sendmsg+0xc3/0x120 [ 470.336936] __sys_sendto+0x21a/0x320 [ 470.340972] ? __ia32_sys_getpeername+0xb0/0xb0 [ 470.345800] ? lock_downgrade+0x720/0x720 [ 470.349979] ? vfs_write+0x3d7/0x540 [ 470.353982] ? check_preemption_disabled+0x41/0x280 [ 470.359170] ? vfs_write+0x393/0x540 [ 470.363092] ? fput+0x2b/0x190 [ 470.366529] ? ksys_write+0x1c8/0x2a0 [ 470.370448] __x64_sys_sendto+0xdd/0x1b0 [ 470.374687] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 470.379291] do_syscall_64+0xf9/0x620 [ 470.383120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.388325] RIP: 0033:0x4665d9 03:19:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) [ 470.391541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 470.410704] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 470.418998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 470.426436] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 470.434006] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 470.441306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.449108] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 470.496144] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 470.504133] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 470.627074] VFS: Found a V7 FS (block size = 512) on device loop2 [ 470.716676] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:32 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:32 executing program 1 (fault-call:4 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000"]}, @subvolid=0x4a}) 03:19:32 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:32 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:32 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 473.163018] FAULT_INJECTION: forcing a failure. [ 473.163018] name failslab, interval 1, probability 0, space 0, times 0 [ 473.182726] VFS: Found a V7 FS (block size = 512) on device loop2 [ 473.192624] CPU: 0 PID: 18902 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 473.200831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.210200] Call Trace: [ 473.212815] dump_stack+0x1fc/0x2ef [ 473.216468] should_fail.cold+0xa/0xf [ 473.220294] ? setup_fault_attr+0x200/0x200 [ 473.224648] ? sctp_bind_addr_state+0x1a1/0x330 [ 473.229344] __should_failslab+0x115/0x180 [ 473.233700] should_failslab+0x5/0x10 [ 473.237565] kmem_cache_alloc_trace+0x46/0x380 [ 473.242170] sctp_add_bind_addr+0x77/0x370 [ 473.246429] sctp_copy_local_addr_list+0x33e/0x4e0 [ 473.251391] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 473.256172] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 473.261377] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 473.266576] sctp_bind_addr_copy+0xde/0x470 [ 473.270923] sctp_sendmsg_new_asoc+0x367/0x1040 [ 473.275607] ? rcu_nmi_exit+0xb3/0x180 [ 473.279516] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 473.284723] ? lock_sock_nested+0x94/0x110 [ 473.288981] ? __local_bh_enable_ip+0x18d/0x270 [ 473.293667] sctp_sendmsg+0x1146/0x1580 [ 473.297661] ? sctp_id2assoc+0x260/0x260 [ 473.301757] ? aa_sk_perm+0x534/0x930 [ 473.305593] inet_sendmsg+0x132/0x5a0 [ 473.309406] ? security_socket_sendmsg+0x83/0xb0 [ 473.314197] ? inet_recvmsg+0x5c0/0x5c0 [ 473.318270] sock_sendmsg+0xc3/0x120 [ 473.322019] __sys_sendto+0x21a/0x320 [ 473.325837] ? __ia32_sys_getpeername+0xb0/0xb0 [ 473.330525] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 473.335128] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.339918] ? ksys_write+0x24b/0x2a0 [ 473.343749] ? fput+0x2b/0x190 [ 473.346960] ? ksys_write+0x1c8/0x2a0 [ 473.350865] __x64_sys_sendto+0xdd/0x1b0 [ 473.354956] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 473.359699] do_syscall_64+0xf9/0x620 [ 473.363605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.368808] RIP: 0033:0x4665d9 [ 473.372019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.391075] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 473.398858] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 473.406474] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 473.413751] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 473.421031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.428312] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000"]}, @subvolid=0x4a}) 03:19:33 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:33 executing program 1 (fault-call:4 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:33 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:33 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') [ 473.520651] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 473.595020] FAULT_INJECTION: forcing a failure. [ 473.595020] name failslab, interval 1, probability 0, space 0, times 0 [ 473.606890] CPU: 0 PID: 18923 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 473.614790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.624240] Call Trace: [ 473.626855] dump_stack+0x1fc/0x2ef [ 473.630512] should_fail.cold+0xa/0xf [ 473.634344] ? rcu_nmi_exit+0xb3/0x180 [ 473.638250] ? setup_fault_attr+0x200/0x200 03:19:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000"]}, @subvolid=0x4a}) [ 473.642593] ? sctp_bind_addr_state+0x1a1/0x330 [ 473.647273] __should_failslab+0x115/0x180 [ 473.651516] should_failslab+0x5/0x10 [ 473.655338] kmem_cache_alloc_trace+0x46/0x380 [ 473.660015] sctp_add_bind_addr+0x77/0x370 [ 473.664403] sctp_copy_local_addr_list+0x33e/0x4e0 [ 473.669478] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 473.674376] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 473.679729] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 473.684920] sctp_bind_addr_copy+0xde/0x470 [ 473.689495] sctp_sendmsg_new_asoc+0x367/0x1040 [ 473.694166] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 473.699487] ? mark_held_locks+0xa6/0xf0 [ 473.703563] ? __local_bh_enable_ip+0x159/0x270 [ 473.708234] sctp_sendmsg+0x1146/0x1580 [ 473.712218] ? sctp_id2assoc+0x260/0x260 [ 473.716285] ? aa_sk_perm+0x534/0x930 [ 473.720094] inet_sendmsg+0x132/0x5a0 [ 473.724364] ? security_socket_sendmsg+0x83/0xb0 [ 473.729258] ? inet_recvmsg+0x5c0/0x5c0 [ 473.733454] sock_sendmsg+0xc3/0x120 [ 473.737226] __sys_sendto+0x21a/0x320 [ 473.741031] ? __ia32_sys_getpeername+0xb0/0xb0 [ 473.745990] ? lock_downgrade+0x720/0x720 [ 473.750286] ? vfs_write+0x3d7/0x540 [ 473.754007] ? check_preemption_disabled+0x41/0x280 [ 473.759028] ? vfs_write+0x393/0x540 [ 473.762743] ? fput+0x2b/0x190 [ 473.765936] ? ksys_write+0x1c8/0x2a0 [ 473.769932] __x64_sys_sendto+0xdd/0x1b0 [ 473.773994] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 473.778634] do_syscall_64+0xf9/0x620 [ 473.782439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.787922] RIP: 0033:0x4665d9 [ 473.791191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.810183] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 473.817982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 473.825262] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 473.832576] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 473.839842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.847109] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 473.993820] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:35 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:35 executing program 1 (fault-call:4 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:35 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') 03:19:35 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900000000"]}, @subvolid=0x4a}) [ 476.169194] FAULT_INJECTION: forcing a failure. [ 476.169194] name failslab, interval 1, probability 0, space 0, times 0 03:19:36 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') 03:19:36 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 476.246584] CPU: 1 PID: 18955 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 476.254814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.264492] Call Trace: [ 476.267111] dump_stack+0x1fc/0x2ef [ 476.270769] should_fail.cold+0xa/0xf [ 476.274600] ? setup_fault_attr+0x200/0x200 [ 476.279206] ? sctp_bind_addr_state+0x1a1/0x330 [ 476.283905] __should_failslab+0x115/0x180 [ 476.288264] should_failslab+0x5/0x10 [ 476.292094] kmem_cache_alloc_trace+0x46/0x380 [ 476.296899] sctp_add_bind_addr+0x77/0x370 [ 476.301171] sctp_copy_local_addr_list+0x33e/0x4e0 [ 476.306128] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 476.311686] ? retint_kernel+0x2d/0x2d [ 476.315711] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 476.320932] sctp_bind_addr_copy+0xde/0x470 [ 476.325640] sctp_sendmsg_new_asoc+0x367/0x1040 [ 476.330514] ? rcu_nmi_exit+0xb3/0x180 [ 476.334447] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 476.339724] ? lock_sock_nested+0x94/0x110 [ 476.343982] ? __local_bh_enable_ip+0x18d/0x270 [ 476.348669] sctp_sendmsg+0x1146/0x1580 [ 476.352704] ? sctp_id2assoc+0x260/0x260 [ 476.356783] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 476.361555] ? aa_sk_perm+0x534/0x930 [ 476.365385] inet_sendmsg+0x132/0x5a0 [ 476.369198] ? security_socket_sendmsg+0x83/0xb0 [ 476.374055] ? inet_recvmsg+0x5c0/0x5c0 [ 476.378045] sock_sendmsg+0xc3/0x120 [ 476.382476] __sys_sendto+0x21a/0x320 [ 476.386295] ? __ia32_sys_getpeername+0xb0/0xb0 [ 476.390982] ? __mutex_unlock_slowpath+0x96/0x610 [ 476.395855] ? check_preemption_disabled+0x41/0x280 [ 476.400893] ? vfs_write+0x393/0x540 [ 476.404616] ? fput+0x2b/0x190 [ 476.407816] ? ksys_write+0x1c8/0x2a0 [ 476.411637] __x64_sys_sendto+0xdd/0x1b0 [ 476.415718] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 476.420508] do_syscall_64+0xf9/0x620 [ 476.424399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.429603] RIP: 0033:0x4665d9 03:19:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900000000"]}, @subvolid=0x4a}) [ 476.432811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 476.451863] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 476.459655] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 476.466934] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 476.474437] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 476.481720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.489004] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:36 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 476.523194] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:36 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:36 executing program 1 (fault-call:4 fault-nth:57): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 476.643783] FAULT_INJECTION: forcing a failure. [ 476.643783] name failslab, interval 1, probability 0, space 0, times 0 [ 476.655673] CPU: 0 PID: 18986 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 476.663576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.672943] Call Trace: [ 476.675565] dump_stack+0x1fc/0x2ef [ 476.679219] should_fail.cold+0xa/0xf [ 476.683137] ? setup_fault_attr+0x200/0x200 [ 476.687480] ? sctp_bind_addr_state+0x1a1/0x330 03:19:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900000000"]}, @subvolid=0x4a}) [ 476.692180] __should_failslab+0x115/0x180 [ 476.696445] should_failslab+0x5/0x10 [ 476.700268] kmem_cache_alloc_trace+0x46/0x380 [ 476.704863] sctp_add_bind_addr+0x77/0x370 [ 476.709256] sctp_copy_local_addr_list+0x33e/0x4e0 [ 476.714206] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 476.719033] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 476.724222] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 476.729430] sctp_bind_addr_copy+0xde/0x470 [ 476.733776] sctp_sendmsg_new_asoc+0x367/0x1040 [ 476.738599] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 476.743988] ? mark_held_locks+0xa6/0xf0 [ 476.748363] ? __local_bh_enable_ip+0x159/0x270 [ 476.753063] sctp_sendmsg+0x1146/0x1580 [ 476.757047] ? sctp_id2assoc+0x260/0x260 [ 476.761110] ? aa_sk_perm+0x534/0x930 [ 476.764918] inet_sendmsg+0x132/0x5a0 [ 476.768818] ? security_socket_sendmsg+0x83/0xb0 [ 476.773659] ? inet_recvmsg+0x5c0/0x5c0 [ 476.777643] sock_sendmsg+0xc3/0x120 [ 476.781354] __sys_sendto+0x21a/0x320 [ 476.785228] ? __ia32_sys_getpeername+0xb0/0xb0 [ 476.789929] ? lock_downgrade+0x720/0x720 [ 476.794086] ? vfs_write+0x3d7/0x540 [ 476.797809] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 476.802748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 476.807623] ? rcu_nmi_exit+0xb3/0x180 [ 476.811775] ? retint_kernel+0x2d/0x2d [ 476.815675] __x64_sys_sendto+0xdd/0x1b0 [ 476.819741] ? __sys_sendto+0x320/0x320 [ 476.823765] do_syscall_64+0xf9/0x620 [ 476.827584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.832931] RIP: 0033:0x4665d9 [ 476.836179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 476.855166] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 476.863185] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 476.870465] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 476.877751] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 476.885118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.892694] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 476.932271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 477.040634] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:38 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:38 executing program 3: syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') 03:19:38 executing program 1 (fault-call:4 fault-nth:58): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:38 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid}) 03:19:39 executing program 3: syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') [ 479.251369] FAULT_INJECTION: forcing a failure. [ 479.251369] name failslab, interval 1, probability 0, space 0, times 0 [ 479.302742] CPU: 0 PID: 19009 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 479.310783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.320370] Call Trace: [ 479.323323] dump_stack+0x1fc/0x2ef [ 479.327063] should_fail.cold+0xa/0xf [ 479.330938] ? setup_fault_attr+0x200/0x200 [ 479.335432] ? sctp_bind_addr_state+0x1a1/0x330 [ 479.340210] __should_failslab+0x115/0x180 [ 479.344828] should_failslab+0x5/0x10 [ 479.348747] kmem_cache_alloc_trace+0x46/0x380 [ 479.353805] sctp_add_bind_addr+0x77/0x370 [ 479.358212] sctp_copy_local_addr_list+0x33e/0x4e0 [ 479.363270] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 479.368176] ? sctp_bind_addr_copy+0x31/0x470 [ 479.372974] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 479.378669] sctp_bind_addr_copy+0xde/0x470 [ 479.383007] sctp_sendmsg_new_asoc+0x367/0x1040 [ 479.387910] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 479.393275] ? mark_held_locks+0xa6/0xf0 [ 479.397339] ? __local_bh_enable_ip+0x159/0x270 [ 479.402297] sctp_sendmsg+0x1146/0x1580 [ 479.406446] ? sctp_id2assoc+0x260/0x260 [ 479.410520] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.415660] ? retint_kernel+0x2d/0x2d [ 479.419551] ? inet_recvmsg+0x5c0/0x5c0 [ 479.423531] inet_sendmsg+0x132/0x5a0 [ 479.427335] ? inet_recvmsg+0x5c0/0x5c0 [ 479.431329] sock_sendmsg+0xc3/0x120 [ 479.435242] __sys_sendto+0x21a/0x320 [ 479.439047] ? __ia32_sys_getpeername+0xb0/0xb0 [ 479.443718] ? lock_downgrade+0x720/0x720 [ 479.447871] ? vfs_write+0x3d7/0x540 [ 479.451592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.456410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.461169] ? rcu_nmi_exit+0xb3/0x180 [ 479.465062] ? retint_kernel+0x2d/0x2d [ 479.468957] __x64_sys_sendto+0xdd/0x1b0 [ 479.473121] ? __sys_sendto+0x320/0x320 [ 479.477234] do_syscall_64+0xf9/0x620 [ 479.481095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.486458] RIP: 0033:0x4665d9 [ 479.489870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 479.509195] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.517136] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 479.524407] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 479.531715] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 479.539018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.546356] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:39 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid}) [ 479.560460] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 479.566879] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:39 executing program 1 (fault-call:4 fault-nth:59): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:39 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:39 executing program 3: syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') 03:19:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid}) [ 479.777144] FAULT_INJECTION: forcing a failure. [ 479.777144] name failslab, interval 1, probability 0, space 0, times 0 [ 479.823922] CPU: 0 PID: 19038 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 479.831843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.841210] Call Trace: [ 479.843815] dump_stack+0x1fc/0x2ef [ 479.847555] should_fail.cold+0xa/0xf [ 479.851371] ? setup_fault_attr+0x200/0x200 [ 479.855830] ? sctp_bind_addr_state+0x1a1/0x330 [ 479.860521] __should_failslab+0x115/0x180 [ 479.864771] should_failslab+0x5/0x10 [ 479.868581] kmem_cache_alloc_trace+0x46/0x380 [ 479.873177] sctp_add_bind_addr+0x77/0x370 [ 479.877428] sctp_copy_local_addr_list+0x33e/0x4e0 [ 479.882366] ? sctp_inet_bind_verify+0x1f0/0x1f0 [ 479.887138] ? sctp_auth_asoc_copy_shkeys+0x21f/0x2c0 [ 479.892345] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 479.897577] sctp_bind_addr_copy+0xde/0x470 [ 479.901917] sctp_sendmsg_new_asoc+0x367/0x1040 [ 479.906605] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 479.911821] ? mark_held_locks+0xa6/0xf0 [ 479.915902] ? __local_bh_enable_ip+0x159/0x270 [ 479.920612] sctp_sendmsg+0x1146/0x1580 [ 479.924602] ? sctp_id2assoc+0x260/0x260 [ 479.928681] ? aa_sk_perm+0x534/0x930 [ 479.932507] inet_sendmsg+0x132/0x5a0 [ 479.936317] ? security_socket_sendmsg+0x83/0xb0 [ 479.941081] ? inet_recvmsg+0x5c0/0x5c0 [ 479.945064] sock_sendmsg+0xc3/0x120 [ 479.948789] __sys_sendto+0x21a/0x320 [ 479.952600] ? __ia32_sys_getpeername+0xb0/0xb0 [ 479.957281] ? lock_downgrade+0x720/0x720 [ 479.961437] ? vfs_write+0x3d7/0x540 [ 479.965154] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.969897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.974641] ? rcu_nmi_exit+0xb3/0x180 [ 479.978526] ? retint_kernel+0x2d/0x2d [ 479.982427] __x64_sys_sendto+0xdd/0x1b0 [ 479.986502] ? do_syscall_64+0x56/0x620 [ 479.990472] do_syscall_64+0xf9/0x620 [ 479.994275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.999586] RIP: 0033:0x4665d9 [ 480.002774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 480.021772] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 480.029473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 480.036758] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 480.044038] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 480.051300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.058562] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 480.085824] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 480.092534] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 480.239523] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:41 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:41 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:41 executing program 1 (fault-call:4 fault-nth:60): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:41 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) 03:19:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid}) 03:19:42 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) [ 482.276750] FAULT_INJECTION: forcing a failure. [ 482.276750] name failslab, interval 1, probability 0, space 0, times 0 [ 482.308025] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 482.310144] CPU: 1 PID: 19077 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 482.321808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.331158] Call Trace: [ 482.333754] dump_stack+0x1fc/0x2ef [ 482.337395] should_fail.cold+0xa/0xf [ 482.341211] ? setup_fault_attr+0x200/0x200 [ 482.345547] ? lock_acquire+0x170/0x3c0 [ 482.349540] __should_failslab+0x115/0x180 [ 482.353788] should_failslab+0x5/0x10 [ 482.357605] kmem_cache_alloc_trace+0x284/0x380 [ 482.362288] sctp_transport_new+0x71/0x710 [ 482.366558] sctp_assoc_add_peer+0x2a6/0x1050 [ 482.371064] ? sctp_bind_addr_copy+0x209/0x470 [ 482.375653] sctp_sendmsg_new_asoc+0x580/0x1040 [ 482.380351] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 482.385547] ? mark_held_locks+0xa6/0xf0 [ 482.389607] ? __local_bh_enable_ip+0x159/0x270 [ 482.394293] sctp_sendmsg+0x1146/0x1580 [ 482.398286] ? sctp_id2assoc+0x260/0x260 [ 482.402350] ? aa_sk_perm+0x534/0x930 [ 482.406170] inet_sendmsg+0x132/0x5a0 [ 482.409979] ? security_socket_sendmsg+0x83/0xb0 [ 482.414747] ? inet_recvmsg+0x5c0/0x5c0 [ 482.418721] sock_sendmsg+0xc3/0x120 [ 482.422437] __sys_sendto+0x21a/0x320 [ 482.426238] ? __ia32_sys_getpeername+0xb0/0xb0 [ 482.430908] ? lock_downgrade+0x720/0x720 [ 482.435052] ? vfs_write+0x3d7/0x540 [ 482.438819] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 482.443579] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 482.448338] ? rcu_nmi_exit+0xb3/0x180 [ 482.452227] ? retint_kernel+0x2d/0x2d [ 482.456124] __x64_sys_sendto+0xdd/0x1b0 [ 482.460186] ? __sys_sendto+0x320/0x320 [ 482.464159] do_syscall_64+0xf9/0x620 [ 482.467977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.473259] RIP: 0033:0x4665d9 [ 482.476449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 482.495433] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 482.503144] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 482.510424] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 482.517686] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 03:19:42 executing program 1 (fault-call:4 fault-nth:61): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 482.524950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.532229] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:42 executing program 3: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) 03:19:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:42 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:42 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 482.678961] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 482.726546] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 482.789952] FAULT_INJECTION: forcing a failure. [ 482.789952] name failslab, interval 1, probability 0, space 0, times 0 [ 482.850010] CPU: 1 PID: 19099 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 482.857927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.867306] Call Trace: [ 482.869905] dump_stack+0x1fc/0x2ef [ 482.873543] should_fail.cold+0xa/0xf [ 482.877355] ? setup_fault_attr+0x200/0x200 [ 482.881693] __should_failslab+0x115/0x180 [ 482.885943] should_failslab+0x5/0x10 [ 482.889751] kmem_cache_alloc_trace+0x284/0x380 [ 482.894439] sctp_stream_init_ext+0x47/0x1f0 03:19:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff"]}, @subvolid=0x4a}) [ 482.898883] sctp_sendmsg_to_asoc+0x1728/0x1ea0 [ 482.903564] ? sctp_sendmsg_new_asoc+0x5ac/0x1040 [ 482.908413] ? sctp_sendmsg_new_asoc+0x5de/0x1040 [ 482.913276] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 482.918384] ? rcu_nmi_exit+0xb3/0x180 [ 482.922278] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 482.927476] ? retint_kernel+0x2d/0x2d [ 482.931386] sctp_sendmsg+0xe23/0x1580 [ 482.935289] ? sctp_id2assoc+0x260/0x260 [ 482.939373] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 482.944147] ? retint_kernel+0x2d/0x2d [ 482.948055] ? inet_sendmsg+0x4e/0x5a0 [ 482.951951] inet_sendmsg+0x132/0x5a0 [ 482.955749] ? security_socket_sendmsg+0x83/0xb0 [ 482.960499] ? inet_recvmsg+0x5c0/0x5c0 [ 482.964479] sock_sendmsg+0xc3/0x120 [ 482.968193] __sys_sendto+0x21a/0x320 [ 482.971979] ? __ia32_sys_getpeername+0xb0/0xb0 [ 482.976635] ? lock_downgrade+0x720/0x720 [ 482.980780] ? vfs_write+0x3d7/0x540 [ 482.984485] ? check_preemption_disabled+0x41/0x280 [ 482.989502] ? vfs_write+0x393/0x540 [ 482.993207] ? fput+0x2b/0x190 [ 482.996386] ? ksys_write+0x1c8/0x2a0 [ 483.000188] __x64_sys_sendto+0xdd/0x1b0 [ 483.004250] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 483.008876] do_syscall_64+0xf9/0x620 [ 483.012676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.017859] RIP: 0033:0x4665d9 [ 483.021129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.040011] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.047714] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 483.054982] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 483.062239] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 483.069499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.076768] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 483.094298] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:45 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:45 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"]}, @subvolid=0x4a}) 03:19:45 executing program 1 (fault-call:4 fault-nth:62): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff"]}, @subvolid=0x4a}) [ 485.347299] FAULT_INJECTION: forcing a failure. [ 485.347299] name failslab, interval 1, probability 0, space 0, times 0 [ 485.369567] CPU: 1 PID: 19140 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 485.377489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.386844] Call Trace: [ 485.389443] dump_stack+0x1fc/0x2ef [ 485.393081] should_fail.cold+0xa/0xf [ 485.396895] ? setup_fault_attr+0x200/0x200 [ 485.401231] __should_failslab+0x115/0x180 [ 485.405475] should_failslab+0x5/0x10 [ 485.409284] kmem_cache_alloc_trace+0x284/0x380 [ 485.413992] sctp_transport_new+0x71/0x710 [ 485.418239] sctp_assoc_add_peer+0x2a6/0x1050 [ 485.422743] ? sctp_bind_addr_copy+0x209/0x470 [ 485.427332] sctp_sendmsg_new_asoc+0x580/0x1040 [ 485.432012] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 485.437216] ? mark_held_locks+0xa6/0xf0 [ 485.441288] ? __local_bh_enable_ip+0x159/0x270 [ 485.445967] sctp_sendmsg+0x1146/0x1580 [ 485.449952] ? sctp_id2assoc+0x260/0x260 [ 485.454034] ? aa_sk_perm+0x534/0x930 [ 485.457894] inet_sendmsg+0x132/0x5a0 [ 485.461731] ? security_socket_sendmsg+0x83/0xb0 [ 485.466520] ? inet_recvmsg+0x5c0/0x5c0 [ 485.470511] sock_sendmsg+0xc3/0x120 [ 485.474237] __sys_sendto+0x21a/0x320 [ 485.478049] ? __ia32_sys_getpeername+0xb0/0xb0 [ 485.482725] ? lock_downgrade+0x720/0x720 [ 485.486889] ? vfs_write+0x3d7/0x540 [ 485.490620] ? check_preemption_disabled+0x41/0x280 [ 485.495735] ? vfs_write+0x393/0x540 [ 485.499444] ? fput+0x2b/0x190 [ 485.502622] ? ksys_write+0x1c8/0x2a0 [ 485.506443] __x64_sys_sendto+0xdd/0x1b0 [ 485.510505] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 485.515072] do_syscall_64+0xf9/0x620 [ 485.518866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.524037] RIP: 0033:0x4665d9 [ 485.527210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.546091] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.553799] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 485.561065] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 485.568319] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 485.575574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.582827] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(0xffffffffffffffff, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:45 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:45 executing program 1 (fault-call:4 fault-nth:63): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 485.608504] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:45 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) [ 485.856120] FAULT_INJECTION: forcing a failure. [ 485.856120] name failslab, interval 1, probability 0, space 0, times 0 [ 485.885852] CPU: 1 PID: 19160 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 485.893761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.903116] Call Trace: [ 485.905713] dump_stack+0x1fc/0x2ef [ 485.909353] should_fail.cold+0xa/0xf [ 485.913165] ? setup_fault_attr+0x200/0x200 [ 485.917496] ? retint_kernel+0x2d/0x2d [ 485.921402] __should_failslab+0x115/0x180 [ 485.925652] should_failslab+0x5/0x10 [ 485.929461] kmem_cache_alloc_node+0x54/0x3b0 [ 485.933969] __alloc_skb+0x71/0x560 [ 485.937619] _sctp_make_chunk+0x50/0x260 [ 485.941694] sctp_make_control+0x30/0x2d0 [ 485.945853] sctp_make_init+0x6b3/0xc30 [ 485.949852] ? sctp_init_cause+0x220/0x220 [ 485.954105] ? sctp_sm_lookup_event+0x9b/0x490 [ 485.958704] ? sctp_sm_lookup_event+0x12c/0x490 [ 485.963378] ? dccp_diag_dump+0x40/0x40 [ 485.967361] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.972741] sctp_sf_do_prm_asoc+0xbb/0x340 [ 485.977071] ? sctp_cname+0x1a0/0x1a0 [ 485.980889] sctp_do_sm+0x162/0x5110 [ 485.984617] ? kasan_kmalloc+0x139/0x160 [ 485.988693] ? kmem_cache_alloc_trace+0x12f/0x380 [ 485.993546] ? sctp_stream_init_ext+0x47/0x1f0 [ 485.998135] ? sctp_sendmsg_to_asoc+0x1728/0x1ea0 [ 486.002980] ? sctp_sendmsg+0xe23/0x1580 [ 486.007046] ? inet_sendmsg+0x132/0x5a0 [ 486.011033] ? sctp_do_8_2_transport_strike.constprop.0+0x950/0x950 [ 486.017447] ? do_syscall_64+0xf9/0x620 [ 486.021437] ? mark_held_locks+0xa6/0xf0 [ 486.025516] ? io_schedule_timeout+0x140/0x140 [ 486.030115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 486.034886] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 486.039475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 486.044337] ? mark_held_locks+0xa6/0xf0 [ 486.048443] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 486.053216] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 486.057806] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 486.062574] ? rcu_nmi_exit+0xb3/0x180 [ 486.066476] ? __sk_mem_raise_allocated+0x704/0x1360 [ 486.071596] sctp_primitive_ASSOCIATE+0x98/0xc0 [ 486.076302] sctp_sendmsg_to_asoc+0x7bd/0x1ea0 [ 486.080898] ? sctp_sendmsg_new_asoc+0xa43/0x1040 [ 486.085754] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 486.090872] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 486.096075] ? lock_sock_nested+0x94/0x110 [ 486.100327] ? __local_bh_enable_ip+0x18d/0x270 [ 486.105024] sctp_sendmsg+0xe23/0x1580 [ 486.108927] ? sctp_id2assoc+0x260/0x260 [ 486.113005] ? aa_sk_perm+0x534/0x930 [ 486.116835] inet_sendmsg+0x132/0x5a0 [ 486.120661] ? security_socket_sendmsg+0x83/0xb0 [ 486.125431] ? inet_recvmsg+0x5c0/0x5c0 [ 486.129424] sock_sendmsg+0xc3/0x120 [ 486.133173] __sys_sendto+0x21a/0x320 [ 486.136986] ? __ia32_sys_getpeername+0xb0/0xb0 [ 486.141674] ? lock_downgrade+0x720/0x720 [ 486.145836] ? vfs_write+0x3d7/0x540 [ 486.149573] ? check_preemption_disabled+0x41/0x280 [ 486.154609] ? vfs_write+0x393/0x540 [ 486.158333] ? fput+0x2b/0x190 [ 486.161533] ? ksys_write+0x1c8/0x2a0 [ 486.165350] __x64_sys_sendto+0xdd/0x1b0 [ 486.169598] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 486.174191] do_syscall_64+0xf9/0x620 [ 486.178007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.183207] RIP: 0033:0x4665d9 [ 486.186412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.205342] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.213050] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 486.220313] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 486.227582] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 486.234855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.242113] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 486.261262] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:48 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300000000000009000000000000000000"]}, @subvolid=0x4a}) 03:19:48 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:48 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:48 executing program 1 (fault-call:4 fault-nth:64): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:48 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 488.387307] FAULT_INJECTION: forcing a failure. [ 488.387307] name failslab, interval 1, probability 0, space 0, times 0 [ 488.427630] FAULT_INJECTION: forcing a failure. [ 488.427630] name failslab, interval 1, probability 0, space 0, times 0 [ 488.459617] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 488.470698] CPU: 0 PID: 19195 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 488.478590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.487944] Call Trace: [ 488.490538] dump_stack+0x1fc/0x2ef [ 488.494169] should_fail.cold+0xa/0xf [ 488.497975] ? setup_fault_attr+0x200/0x200 [ 488.502303] ? setup_fault_attr+0x200/0x200 [ 488.506627] __should_failslab+0x115/0x180 [ 488.510864] should_failslab+0x5/0x10 [ 488.514671] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 488.519710] __kmalloc_node_track_caller+0x38/0x70 [ 488.524655] __alloc_skb+0xae/0x560 [ 488.528290] _sctp_make_chunk+0x50/0x260 [ 488.532367] sctp_make_control+0x30/0x2d0 [ 488.536529] sctp_make_init+0x6b3/0xc30 [ 488.540552] ? lock_downgrade+0x720/0x720 [ 488.544705] ? sctp_init_cause+0x220/0x220 [ 488.548949] ? is_bpf_text_address+0xfc/0x1b0 [ 488.553447] ? sctp_sm_lookup_event+0x12c/0x490 [ 488.558117] ? dccp_diag_dump+0x40/0x40 [ 488.562098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.567504] sctp_sf_do_prm_asoc+0xbb/0x340 [ 488.571848] ? sctp_cname+0x1a0/0x1a0 [ 488.575648] sctp_do_sm+0x162/0x5110 [ 488.579407] ? kasan_kmalloc+0x139/0x160 [ 488.583489] ? kmem_cache_alloc_trace+0x12f/0x380 [ 488.588339] ? sctp_stream_init_ext+0x47/0x1f0 [ 488.592930] ? sctp_sendmsg_to_asoc+0x1728/0x1ea0 [ 488.597801] ? sctp_sendmsg+0xe23/0x1580 [ 488.601873] ? inet_sendmsg+0x132/0x5a0 [ 488.605856] ? sctp_do_8_2_transport_strike.constprop.0+0x950/0x950 [ 488.612275] ? do_syscall_64+0xf9/0x620 [ 488.616259] ? mark_held_locks+0xa6/0xf0 [ 488.620326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.625089] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 488.629671] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.634432] ? rcu_nmi_exit+0xb3/0x180 [ 488.638322] ? retint_kernel+0x2d/0x2d [ 488.642223] ? __sanitizer_cov_trace_pc+0x27/0x50 [ 488.647066] ? __sk_mem_raise_allocated+0x704/0x1360 [ 488.652202] sctp_primitive_ASSOCIATE+0x98/0xc0 [ 488.656885] sctp_sendmsg_to_asoc+0x7bd/0x1ea0 [ 488.661491] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 488.666594] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 488.671799] ? mark_held_locks+0xa6/0xf0 [ 488.675863] ? __local_bh_enable_ip+0x159/0x270 [ 488.680538] sctp_sendmsg+0xe23/0x1580 [ 488.684432] ? sctp_id2assoc+0x260/0x260 [ 488.688492] ? aa_sk_perm+0x165/0x930 [ 488.692298] ? aa_sk_perm+0x534/0x930 [ 488.696131] inet_sendmsg+0x132/0x5a0 [ 488.699936] ? security_socket_sendmsg+0x83/0xb0 [ 488.704780] ? inet_recvmsg+0x5c0/0x5c0 [ 488.708763] sock_sendmsg+0xc3/0x120 [ 488.712499] __sys_sendto+0x21a/0x320 [ 488.716303] ? __ia32_sys_getpeername+0xb0/0xb0 [ 488.720995] ? lock_downgrade+0x720/0x720 [ 488.725153] ? vfs_write+0x3d7/0x540 [ 488.728879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.733640] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.738405] ? rcu_nmi_exit+0xb3/0x180 [ 488.742296] ? retint_kernel+0x2d/0x2d [ 488.746190] __x64_sys_sendto+0xdd/0x1b0 [ 488.750255] ? audit_kill_trees+0x230/0x230 [ 488.754578] do_syscall_64+0xf9/0x620 [ 488.758394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.763580] RIP: 0033:0x4665d9 [ 488.766770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.785669] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.793396] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 488.800664] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 488.807931] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 488.815217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.822569] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 488.848963] CPU: 1 PID: 19200 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 03:19:48 executing program 3 (fault-call:16 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:48 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 488.856861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.866245] Call Trace: [ 488.868841] dump_stack+0x1fc/0x2ef [ 488.872487] should_fail.cold+0xa/0xf [ 488.876301] ? setup_fault_attr+0x200/0x200 [ 488.880633] ? lock_acquire+0x170/0x3c0 [ 488.884625] __should_failslab+0x115/0x180 [ 488.888886] should_failslab+0x5/0x10 [ 488.892693] kmem_cache_alloc+0x277/0x370 [ 488.896843] getname_flags+0xce/0x590 [ 488.900638] do_symlinkat+0x86/0x2c0 [ 488.904447] ? ksys_write+0x1c8/0x2a0 [ 488.908232] ? __ia32_sys_unlink+0x50/0x50 [ 488.912499] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 488.917848] ? trace_hardirqs_off_caller+0x6e/0x210 [ 488.922861] ? do_syscall_64+0x21/0x620 [ 488.926828] do_syscall_64+0xf9/0x620 [ 488.930618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.935811] RIP: 0033:0x4665d9 [ 488.938987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.957885] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 488.965575] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 488.972841] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 488.980092] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 488.987343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.994607] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 03:19:48 executing program 1 (fault-call:4 fault-nth:65): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:48 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 489.086369] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:48 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 489.191305] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 489.191519] FAULT_INJECTION: forcing a failure. [ 489.191519] name failslab, interval 1, probability 0, space 0, times 0 [ 489.231943] CPU: 1 PID: 19217 Comm: syz-executor.3 Not tainted 4.19.190-syzkaller #0 [ 489.239847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.245721] FAULT_INJECTION: forcing a failure. [ 489.245721] name failslab, interval 1, probability 0, space 0, times 0 [ 489.249206] Call Trace: [ 489.249228] dump_stack+0x1fc/0x2ef [ 489.249248] should_fail.cold+0xa/0xf [ 489.249267] ? setup_fault_attr+0x200/0x200 [ 489.249290] __should_failslab+0x115/0x180 [ 489.249307] should_failslab+0x5/0x10 [ 489.249323] kmem_cache_alloc_trace+0x284/0x380 [ 489.249342] snd_pcm_oss_change_params_locked+0x1a2/0x39d0 [ 489.249360] ? __mutex_lock+0x2b6/0x1260 [ 489.249391] ? __mutex_lock+0x3a8/0x1260 [ 489.301317] ? snd_pcm_plugin_append+0x190/0x190 [ 489.306102] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 489.310981] ? __mutex_add_waiter+0x160/0x160 [ 489.315481] ? do_lock_file_wait+0x4c0/0x4c0 [ 489.319906] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.324688] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 489.329288] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.334066] ? rcu_nmi_exit+0xb3/0x180 [ 489.337960] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 489.342547] ? snd_pcm_oss_sync+0x800/0x800 [ 489.346868] snd_pcm_oss_sync+0x2e0/0x800 [ 489.351043] ? snd_pcm_oss_release+0x264/0x300 [ 489.355630] ? snd_pcm_oss_sync+0x800/0x800 [ 489.359952] snd_pcm_oss_release+0x26c/0x300 [ 489.364363] ? snd_pcm_oss_sync+0x800/0x800 [ 489.368686] __fput+0x2ce/0x890 [ 489.371975] task_work_run+0x148/0x1c0 [ 489.375871] exit_to_usermode_loop+0x251/0x2a0 [ 489.380475] do_syscall_64+0x538/0x620 [ 489.384368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.389557] RIP: 0033:0x4665d9 [ 489.392751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.411651] RSP: 002b:00007f0f0b867188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 489.419371] RAX: 0000000000000005 RBX: 000000000056bf60 RCX: 00000000004665d9 [ 489.426638] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 489.433922] RBP: 00007f0f0b8671d0 R08: 0000000000000000 R09: 0000000000000000 [ 489.441187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.448455] R13: 00007ffdeb83f8af R14: 00007f0f0b867300 R15: 0000000000022000 [ 489.455748] CPU: 0 PID: 19228 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 489.463636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.472990] Call Trace: [ 489.475608] dump_stack+0x1fc/0x2ef [ 489.479243] should_fail.cold+0xa/0xf [ 489.483052] ? setup_fault_attr+0x200/0x200 [ 489.487384] ? retint_kernel+0x2d/0x2d [ 489.491284] __should_failslab+0x115/0x180 [ 489.495529] should_failslab+0x5/0x10 [ 489.499335] kmem_cache_alloc+0x3f/0x370 [ 489.501871] FAULT_INJECTION: forcing a failure. [ 489.501871] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 489.503448] sctp_chunkify+0x4b/0x2e0 [ 489.519010] _sctp_make_chunk+0x149/0x260 [ 489.523155] sctp_make_control+0x30/0x2d0 [ 489.527314] sctp_make_init+0x6b3/0xc30 [ 489.531293] ? lock_downgrade+0x720/0x720 [ 489.535440] ? sctp_init_cause+0x220/0x220 [ 489.539677] ? is_bpf_text_address+0xfc/0x1b0 [ 489.544170] ? sctp_sm_lookup_event+0x12c/0x490 [ 489.548832] ? dccp_diag_dump+0x40/0x40 [ 489.552802] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.558165] sctp_sf_do_prm_asoc+0xbb/0x340 [ 489.562485] ? sctp_cname+0x1a0/0x1a0 [ 489.566281] sctp_do_sm+0x162/0x5110 [ 489.570010] ? kasan_kmalloc+0x139/0x160 [ 489.574083] ? kmem_cache_alloc_trace+0x12f/0x380 [ 489.578918] ? sctp_stream_init_ext+0x47/0x1f0 [ 489.583501] ? sctp_sendmsg_to_asoc+0x1728/0x1ea0 [ 489.588336] ? sctp_sendmsg+0xe23/0x1580 [ 489.592393] ? inet_sendmsg+0x132/0x5a0 [ 489.596382] ? sctp_do_8_2_transport_strike.constprop.0+0x950/0x950 [ 489.602779] ? do_syscall_64+0xf9/0x620 [ 489.606761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.611516] ? mark_held_locks+0xa6/0xf0 [ 489.615589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.620355] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 489.624939] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.630395] ? rcu_nmi_exit+0xb3/0x180 [ 489.634279] ? retint_kernel+0x2d/0x2d [ 489.638173] ? __sk_mem_raise_allocated+0x7f/0x1360 [ 489.643187] ? __sk_mem_raise_allocated+0x704/0x1360 [ 489.648292] sctp_primitive_ASSOCIATE+0x98/0xc0 [ 489.652974] sctp_sendmsg_to_asoc+0x7bd/0x1ea0 [ 489.657569] ? mark_held_locks+0xa6/0xf0 [ 489.661652] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 489.666236] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 489.671332] ? rcu_nmi_exit+0xb3/0x180 [ 489.675231] ? retint_kernel+0x2d/0x2d [ 489.679139] sctp_sendmsg+0xe23/0x1580 [ 489.683038] ? sctp_id2assoc+0x260/0x260 [ 489.687098] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.691863] ? retint_kernel+0x2d/0x2d [ 489.695848] ? inet_recvmsg+0x5c0/0x5c0 [ 489.699836] inet_sendmsg+0x132/0x5a0 [ 489.703635] ? inet_recvmsg+0x5c0/0x5c0 [ 489.707630] sock_sendmsg+0xc3/0x120 [ 489.711344] __sys_sendto+0x21a/0x320 [ 489.715146] ? __ia32_sys_getpeername+0xb0/0xb0 [ 489.719816] ? __mutex_unlock_slowpath+0x96/0x610 [ 489.724676] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.729431] ? rcu_nmi_exit+0xb3/0x180 [ 489.733317] ? retint_kernel+0x2d/0x2d [ 489.737206] ? __x64_sys_sendto+0xd/0x1b0 [ 489.741364] __x64_sys_sendto+0xdd/0x1b0 [ 489.745443] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 489.750021] do_syscall_64+0xf9/0x620 [ 489.753835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.759019] RIP: 0033:0x4665d9 [ 489.762206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.781105] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.788807] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 489.796070] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 489.803331] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 489.810613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.817875] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 [ 489.825172] CPU: 1 PID: 19235 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 489.833061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.842437] Call Trace: [ 489.845035] dump_stack+0x1fc/0x2ef [ 489.848673] should_fail.cold+0xa/0xf [ 489.852517] ? setup_fault_attr+0x200/0x200 [ 489.856856] ? mark_held_locks+0xf0/0xf0 [ 489.860944] __alloc_pages_nodemask+0x239/0x2890 [ 489.865716] ? _copy_from_user+0xd2/0x130 [ 489.869896] ? __lock_acquire+0x6de/0x3ff0 [ 489.874148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 489.879008] ? proc_fail_nth_write+0x95/0x1d0 [ 489.883620] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 489.888573] cache_grow_begin+0xa4/0x8a0 [ 489.892646] ? setup_fault_attr+0x200/0x200 [ 489.896975] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 489.901742] cache_alloc_refill+0x273/0x340 [ 489.906078] kmem_cache_alloc+0x346/0x370 [ 489.910239] getname_flags+0xce/0x590 [ 489.914051] do_symlinkat+0x86/0x2c0 [ 489.917775] ? ksys_write+0x1c8/0x2a0 [ 489.921585] ? __ia32_sys_unlink+0x50/0x50 [ 489.925826] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 489.931199] ? trace_hardirqs_off_caller+0x6e/0x210 [ 489.936224] ? do_syscall_64+0x21/0x620 [ 489.940238] do_syscall_64+0xf9/0x620 [ 489.944054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.949251] RIP: 0033:0x4665d9 [ 489.952450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.971365] RSP: 002b:00007f6fca0f2188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a 03:19:49 executing program 1 (fault-call:4 fault-nth:66): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 489.979072] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 489.986335] RDX: 0000000020000180 RSI: ffffffffffffffff RDI: 00000000200004c0 [ 489.993606] RBP: 00007f6fca0f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 490.000877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.008140] R13: 00007ffe01ebcbef R14: 00007f6fca0f2300 R15: 0000000000022000 [ 490.136524] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 490.157089] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 490.167217] FAULT_INJECTION: forcing a failure. [ 490.167217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.179004] CPU: 1 PID: 19245 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 [ 490.186882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.196231] Call Trace: [ 490.198837] dump_stack+0x1fc/0x2ef [ 490.202477] should_fail.cold+0xa/0xf [ 490.206292] ? setup_fault_attr+0x200/0x200 [ 490.210634] ? retint_kernel+0x2d/0x2d [ 490.214544] __alloc_pages_nodemask+0x239/0x2890 [ 490.219329] ? depot_save_stack+0x106/0x410 [ 490.223682] ? kasan_kmalloc+0x139/0x160 [ 490.227755] ? __kmalloc_node_track_caller+0x4c/0x70 [ 490.232869] ? _sctp_make_chunk+0x50/0x260 [ 490.237137] ? sctp_make_control+0x30/0x2d0 [ 490.241463] ? sctp_make_init+0x6b3/0xc30 [ 490.245612] ? sctp_sf_do_prm_asoc+0xbb/0x340 [ 490.250117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 490.254964] ? sctp_sendmsg+0xe23/0x1580 [ 490.259023] ? inet_sendmsg+0x132/0x5a0 [ 490.262994] ? sock_sendmsg+0xc3/0x120 [ 490.266879] ? __sys_sendto+0x21a/0x320 [ 490.270865] ? __x64_sys_sendto+0xdd/0x1b0 [ 490.275093] ? do_syscall_64+0xf9/0x620 [ 490.279066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.284433] ? mark_held_locks+0xa6/0xf0 [ 490.288506] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.293274] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 490.297851] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.302610] cache_grow_begin+0xa4/0x8a0 [ 490.306685] ? setup_fault_attr+0x200/0x200 [ 490.311003] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 490.315758] cache_alloc_refill+0x273/0x340 [ 490.320082] kmem_cache_alloc+0x346/0x370 [ 490.324231] sctp_chunkify+0x4b/0x2e0 [ 490.328030] _sctp_make_chunk+0x149/0x260 [ 490.332196] sctp_make_control+0x30/0x2d0 [ 490.336356] sctp_make_init+0x6b3/0xc30 [ 490.340337] ? sctp_init_cause+0x220/0x220 [ 490.344571] ? sctp_sm_lookup_event+0x9b/0x490 [ 490.349153] ? __sanitizer_cov_trace_switch+0x3a/0x80 [ 490.354345] ? sctp_sm_lookup_event+0x12c/0x490 [ 490.359010] ? dccp_diag_dump+0x40/0x40 [ 490.362986] sctp_sf_do_prm_asoc+0xbb/0x340 [ 490.367307] ? sctp_cname+0x1a0/0x1a0 [ 490.371103] sctp_do_sm+0x162/0x5110 [ 490.374819] ? kasan_kmalloc+0x139/0x160 [ 490.378878] ? kmem_cache_alloc_trace+0x12f/0x380 [ 490.383718] ? sctp_stream_init_ext+0x47/0x1f0 [ 490.388295] ? sctp_sendmsg_to_asoc+0x1728/0x1ea0 [ 490.393143] ? sctp_sendmsg+0xe23/0x1580 [ 490.397196] ? inet_sendmsg+0x132/0x5a0 [ 490.401170] ? sctp_do_8_2_transport_strike.constprop.0+0x950/0x950 [ 490.407569] ? do_syscall_64+0xf9/0x620 [ 490.411546] ? mark_held_locks+0xa6/0xf0 [ 490.415601] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.420355] ? mark_held_locks+0xa6/0xf0 [ 490.424423] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.429186] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.433953] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 490.438533] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.443287] ? rcu_nmi_exit+0xb3/0x180 [ 490.447174] ? retint_kernel+0x2d/0x2d [ 490.451072] sctp_primitive_ASSOCIATE+0x98/0xc0 [ 490.455740] sctp_sendmsg_to_asoc+0x7bd/0x1ea0 [ 490.460336] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 490.465438] ? __sctp_setsockopt_connectx+0x1c0/0x1c0 [ 490.470644] ? mark_held_locks+0xa6/0xf0 [ 490.476361] ? lock_sock_nested+0xcb/0x110 [ 490.480609] ? __local_bh_enable_ip+0x159/0x270 [ 490.485279] sctp_sendmsg+0xe23/0x1580 [ 490.489170] ? sctp_id2assoc+0x260/0x260 [ 490.493233] ? aa_sk_perm+0x534/0x930 [ 490.497044] inet_sendmsg+0x132/0x5a0 [ 490.500842] ? security_socket_sendmsg+0x83/0xb0 [ 490.505591] ? inet_recvmsg+0x5c0/0x5c0 [ 490.509582] sock_sendmsg+0xc3/0x120 [ 490.513299] __sys_sendto+0x21a/0x320 [ 490.517101] ? __ia32_sys_getpeername+0xb0/0xb0 [ 490.521767] ? lock_downgrade+0x720/0x720 [ 490.525918] ? vfs_write+0x3d7/0x540 [ 490.529642] ? check_preemption_disabled+0x41/0x280 [ 490.534659] ? vfs_write+0x393/0x540 [ 490.538371] ? fput+0x2b/0x190 [ 490.541562] ? ksys_write+0x1c8/0x2a0 [ 490.545366] __x64_sys_sendto+0xdd/0x1b0 [ 490.549426] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 490.554004] do_syscall_64+0xf9/0x620 [ 490.557803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.562992] RIP: 0033:0x4665d9 [ 490.566179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.585087] RSP: 002b:00007f8c18674188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.592790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 490.600057] RDX: 0000000000000001 RSI: 0000000020fa3fff RDI: 0000000000000005 [ 490.607319] RBP: 00007f8c186741d0 R08: 00000000206f7000 R09: 0000000000000010 [ 490.614586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.621862] R13: 00007fff55c76d8f R14: 00007f8c18674300 R15: 0000000000022000 03:19:51 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:51 executing program 3 (fault-call:16 fault-nth:1): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:51 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:51 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:51 executing program 1 (fault-call:4 fault-nth:67): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 491.379731] FAULT_INJECTION: forcing a failure. [ 491.379731] name failslab, interval 1, probability 0, space 0, times 0 [ 491.433256] CPU: 0 PID: 19261 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 491.441171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.450530] Call Trace: [ 491.453128] dump_stack+0x1fc/0x2ef [ 491.456770] should_fail.cold+0xa/0xf [ 491.460587] ? setup_fault_attr+0x200/0x200 [ 491.464923] ? lock_acquire+0x170/0x3c0 [ 491.468926] __should_failslab+0x115/0x180 [ 491.473175] should_failslab+0x5/0x10 [ 491.477097] kmem_cache_alloc+0x277/0x370 [ 491.481259] getname_flags+0xce/0x590 [ 491.485072] do_symlinkat+0xce/0x2c0 [ 491.488831] ? __ia32_sys_unlink+0x50/0x50 [ 491.493077] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 491.498451] ? trace_hardirqs_off_caller+0x6e/0x210 [ 491.503508] ? do_syscall_64+0x21/0x620 [ 491.507491] do_syscall_64+0xf9/0x620 [ 491.511299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.516502] RIP: 0033:0x4665d9 03:19:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 491.519697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.538619] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 491.546336] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 491.553610] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 491.560887] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 491.568174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.575624] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 491.597348] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 491.734589] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:51 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:51 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\n', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:51 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 492.168401] FAULT_INJECTION: forcing a failure. [ 492.168401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.181389] CPU: 1 PID: 19306 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 492.189291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.198642] Call Trace: [ 492.201239] dump_stack+0x1fc/0x2ef [ 492.204905] should_fail.cold+0xa/0xf [ 492.208714] ? lock_acquire+0x170/0x3c0 [ 492.212701] ? setup_fault_attr+0x200/0x200 [ 492.217044] __alloc_pages_nodemask+0x239/0x2890 [ 492.221813] ? kernel_text_address+0xbd/0xf0 [ 492.226228] ? __radix_tree_lookup+0x216/0x370 [ 492.230821] ? __kernel_text_address+0x9/0x30 [ 492.235330] ? find_get_entry+0x4cd/0x8a0 [ 492.239492] ? lock_downgrade+0x720/0x720 [ 492.243676] ? __radix_tree_lookup+0x370/0x370 [ 492.248266] ? check_preemption_disabled+0x41/0x280 [ 492.253295] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 492.258154] ? do_symlinkat+0xe1/0x2c0 [ 492.262053] ? find_get_pages_range_tag+0xc50/0xc50 [ 492.267078] ? __lock_acquire+0x6de/0x3ff0 [ 492.271346] alloc_pages_current+0x193/0x2a0 [ 492.275774] do_read_cache_page+0xa36/0x1170 [ 492.280191] ? sysv_bmap+0x30/0x30 [ 492.283763] sysv_find_entry+0x21a/0x6f0 [ 492.287841] ? d_alloc+0x1b7/0x230 [ 492.291405] sysv_inode_by_name+0x6d/0x3d0 [ 492.295646] ? sysv_dotdot+0x150/0x150 [ 492.299591] ? do_raw_spin_unlock+0x171/0x230 [ 492.304099] sysv_lookup+0x7c/0x100 [ 492.307736] __lookup_hash+0x117/0x180 [ 492.311634] filename_create+0x186/0x490 [ 492.315738] ? kern_path_mountpoint+0x40/0x40 [ 492.320245] ? strncpy_from_user+0x2a2/0x350 [ 492.324665] ? getname_flags+0x25b/0x590 [ 492.328738] do_symlinkat+0xe1/0x2c0 [ 492.332486] ? __ia32_sys_unlink+0x50/0x50 [ 492.336729] ? trace_hardirqs_off_caller+0x6e/0x210 [ 492.341760] ? do_syscall_64+0x21/0x620 [ 492.345745] do_syscall_64+0xf9/0x620 [ 492.349642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.354829] RIP: 0033:0x4665d9 [ 492.358050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 492.376951] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 492.384686] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 492.391972] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 492.399244] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 492.406514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.413788] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 492.421546] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 492.503686] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:54 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:54 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, &(0x7f00000001c0)='./file0\x00', 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\v', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:54 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10049}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:54 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:54 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x1941, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 494.470652] FAULT_INJECTION: forcing a failure. [ 494.470652] name failslab, interval 1, probability 0, space 0, times 0 [ 494.522552] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 494.545287] CPU: 0 PID: 19332 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 494.553184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.562536] Call Trace: [ 494.565138] dump_stack+0x1fc/0x2ef [ 494.568780] should_fail.cold+0xa/0xf [ 494.572597] ? setup_fault_attr+0x200/0x200 [ 494.576932] ? lock_acquire+0x170/0x3c0 [ 494.580920] __should_failslab+0x115/0x180 [ 494.585166] should_failslab+0x5/0x10 [ 494.588972] kmem_cache_alloc+0x277/0x370 [ 494.593153] __d_alloc+0x2b/0xa10 [ 494.596618] d_alloc+0x4a/0x230 [ 494.599909] __lookup_hash+0xc8/0x180 [ 494.603716] filename_create+0x186/0x490 [ 494.607807] ? kern_path_mountpoint+0x40/0x40 [ 494.612307] ? strncpy_from_user+0x2a2/0x350 [ 494.616724] ? getname_flags+0x25b/0x590 [ 494.620794] do_symlinkat+0xe1/0x2c0 [ 494.624523] ? __ia32_sys_unlink+0x50/0x50 [ 494.628775] ? trace_hardirqs_off_caller+0x6e/0x210 [ 494.633803] ? do_syscall_64+0x21/0x620 [ 494.637789] do_syscall_64+0xf9/0x620 [ 494.641601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.646790] RIP: 0033:0x4665d9 [ 494.650156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:19:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x2, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @name="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"}) 03:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)="10", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 494.669084] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 494.676776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 494.684031] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 494.691305] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.698569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.705835] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 03:19:54 executing program 5 (fault-call:1 fault-nth:5): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 494.766891] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:54 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="654a40162afb8ea035b5db8171f573c4b48a0918bac95ada30fdc0dd276ce805400f5ef2619311d8afc87eebfaf5010d44f1d9ee5a06dd368b164b823043d97f0c1e4a", 0x43, 0xffffffffffffff01}, {&(0x7f0000000280)="d8fd64bb4e2bff893106d1f799917e78165a8468418ef8372b9163c75a78f6e152d6c3ae58f972f5c5e58ba778ce96b3a89c60a8f67222301af8db675d495c3f1f8b6d7320ba6befc3e820de26af67df928f86217db2074af88a1af7f32ab423e533f42d9c1fe6e66643d7c6ed1558f3cfa7a9021662003a29caba9444a67103f8a326be1bc09f5ffba5871784d552fccdb287a694795cba51c6de30de0c5137064395f63b150b5381806f050ec7c99079da3038f5ad2ec3a2d195418e8d", 0xbe, 0x3}], 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 494.920182] FAULT_INJECTION: forcing a failure. [ 494.920182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 494.955855] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 494.981672] CPU: 0 PID: 19366 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 494.989581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.998935] Call Trace: [ 495.001532] dump_stack+0x1fc/0x2ef [ 495.005165] should_fail.cold+0xa/0xf [ 495.008971] ? lock_acquire+0x170/0x3c0 [ 495.012964] ? setup_fault_attr+0x200/0x200 [ 495.017292] __alloc_pages_nodemask+0x239/0x2890 [ 495.022053] ? kernel_text_address+0xbd/0xf0 [ 495.026460] ? __radix_tree_lookup+0x216/0x370 [ 495.031038] ? __kernel_text_address+0x9/0x30 [ 495.035534] ? find_get_entry+0x4cd/0x8a0 [ 495.039685] ? lock_downgrade+0x720/0x720 [ 495.043829] ? __radix_tree_lookup+0x370/0x370 [ 495.048415] ? check_preemption_disabled+0x41/0x280 [ 495.053520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 495.058365] ? do_symlinkat+0xe1/0x2c0 [ 495.062266] ? find_get_pages_range_tag+0xc50/0xc50 [ 495.067289] ? __lock_acquire+0x6de/0x3ff0 [ 495.071539] alloc_pages_current+0x193/0x2a0 [ 495.075958] do_read_cache_page+0xa36/0x1170 [ 495.080415] ? sysv_bmap+0x30/0x30 [ 495.083958] sysv_find_entry+0x21a/0x6f0 [ 495.088040] ? d_alloc+0x1b7/0x230 [ 495.091584] sysv_inode_by_name+0x6d/0x3d0 [ 495.095815] ? sysv_dotdot+0x150/0x150 [ 495.099702] ? do_raw_spin_unlock+0x171/0x230 [ 495.104199] sysv_lookup+0x7c/0x100 [ 495.107824] __lookup_hash+0x117/0x180 [ 495.111716] filename_create+0x186/0x490 [ 495.115781] ? kern_path_mountpoint+0x40/0x40 [ 495.120294] ? strncpy_from_user+0x2a2/0x350 [ 495.124713] ? getname_flags+0x25b/0x590 [ 495.128775] do_symlinkat+0xe1/0x2c0 [ 495.132487] ? __ia32_sys_unlink+0x50/0x50 [ 495.136724] ? trace_hardirqs_off_caller+0x6e/0x210 [ 495.141741] ? do_syscall_64+0x21/0x620 [ 495.145738] do_syscall_64+0xf9/0x620 [ 495.149546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.154738] RIP: 0033:0x4665d9 [ 495.157932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:19:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 495.176831] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 495.184556] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 495.191836] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 495.199546] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.206812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.214075] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 495.368340] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 495.407781] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:57 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:19:57 executing program 5 (fault-call:1 fault-nth:6): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:19:57 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:19:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:57 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:57 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 497.630078] FAULT_INJECTION: forcing a failure. [ 497.630078] name failslab, interval 1, probability 0, space 0, times 0 [ 497.689191] CPU: 0 PID: 19405 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 497.697139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.706496] Call Trace: [ 497.709095] dump_stack+0x1fc/0x2ef [ 497.712737] should_fail.cold+0xa/0xf [ 497.716549] ? setup_fault_attr+0x200/0x200 [ 497.720896] ? lock_acquire+0x170/0x3c0 [ 497.724895] __should_failslab+0x115/0x180 [ 497.729140] should_failslab+0x5/0x10 [ 497.732946] kmem_cache_alloc+0x277/0x370 [ 497.737115] ? sysv_i_callback+0x20/0x20 [ 497.741183] sysv_alloc_inode+0x18/0x40 [ 497.745164] ? sysv_i_callback+0x20/0x20 [ 497.749237] alloc_inode+0x5d/0x180 [ 497.752869] new_inode+0x1d/0xf0 [ 497.756250] sysv_new_inode+0x10a/0x1300 [ 497.760324] ? trace_hardirqs_off+0x64/0x200 [ 497.764753] ? sysv_free_inode+0x850/0x850 [ 497.768992] ? map_id_up+0x178/0x2f0 [ 497.772713] ? in_group_p+0x103/0x2a0 [ 497.776528] ? generic_permission+0x116/0x4d0 [ 497.781027] sysv_symlink+0x93/0x180 [ 497.784750] vfs_symlink+0x453/0x6c0 [ 497.788472] do_symlinkat+0x258/0x2c0 [ 497.792327] ? __ia32_sys_unlink+0x50/0x50 [ 497.796570] ? trace_hardirqs_off_caller+0x6e/0x210 [ 497.801572] ? do_syscall_64+0x21/0x620 [ 497.805532] do_syscall_64+0xf9/0x620 [ 497.809324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.814498] RIP: 0033:0x4665d9 [ 497.817675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:19:57 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:19:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x4, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:19:57 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 497.836594] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 497.844292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 497.851554] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 497.858901] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.866159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.873420] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 03:19:57 executing program 5 (fault-call:1 fault-nth:7): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 497.899696] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:19:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff030000000000f0fd2b8d0000000000030000000000000008000000000000000000800000000000020000000000000000000000ff03000000000000090000000000000000000020000000000000"]}, @subvolid=0x4a}) [ 497.968685] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 498.105699] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 498.183861] FAULT_INJECTION: forcing a failure. [ 498.183861] name failslab, interval 1, probability 0, space 0, times 0 [ 498.213122] CPU: 0 PID: 19443 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 498.221049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.230403] Call Trace: [ 498.232992] dump_stack+0x1fc/0x2ef [ 498.236626] should_fail.cold+0xa/0xf [ 498.240429] ? setup_fault_attr+0x200/0x200 [ 498.244757] ? lock_acquire+0x170/0x3c0 [ 498.248738] __should_failslab+0x115/0x180 [ 498.252972] should_failslab+0x5/0x10 [ 498.256771] kmem_cache_alloc+0x277/0x370 [ 498.260917] ? sysv_i_callback+0x20/0x20 [ 498.264976] sysv_alloc_inode+0x18/0x40 [ 498.268946] ? sysv_i_callback+0x20/0x20 [ 498.273004] alloc_inode+0x5d/0x180 [ 498.276626] new_inode+0x1d/0xf0 [ 498.279997] sysv_new_inode+0x10a/0x1300 [ 498.284064] ? trace_hardirqs_off+0x64/0x200 [ 498.288480] ? sysv_free_inode+0x850/0x850 [ 498.292728] ? map_id_up+0x178/0x2f0 [ 498.296438] ? in_group_p+0x103/0x2a0 [ 498.300259] ? generic_permission+0x116/0x4d0 [ 498.304761] sysv_symlink+0x93/0x180 [ 498.308603] vfs_symlink+0x453/0x6c0 [ 498.312411] do_symlinkat+0x258/0x2c0 [ 498.316215] ? __ia32_sys_unlink+0x50/0x50 [ 498.320455] ? trace_hardirqs_off_caller+0x6e/0x210 [ 498.325567] ? do_syscall_64+0x21/0x620 [ 498.329552] do_syscall_64+0xf9/0x620 [ 498.333367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 498.338552] RIP: 0033:0x4665d9 [ 498.341755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.360668] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 498.368376] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 498.375656] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 498.382921] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.390188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.397555] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 498.501146] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:00 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:00 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:00 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x5, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x688ec0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:00 executing program 5 (fault-call:1 fault-nth:8): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 500.594046] FAULT_INJECTION: forcing a failure. [ 500.594046] name failslab, interval 1, probability 0, space 0, times 0 [ 500.653591] CPU: 0 PID: 19464 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 500.661597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.670955] Call Trace: [ 500.673576] dump_stack+0x1fc/0x2ef [ 500.677221] should_fail.cold+0xa/0xf [ 500.681034] ? setup_fault_attr+0x200/0x200 [ 500.685378] __should_failslab+0x115/0x180 [ 500.689621] should_failslab+0x5/0x10 [ 500.693427] kmem_cache_alloc+0x3f/0x370 [ 500.697498] ? mempool_alloc+0x350/0x350 [ 500.701571] mempool_alloc+0x146/0x350 [ 500.705469] ? find_get_entry+0x4f4/0x8a0 [ 500.709627] ? mempool_resize+0x790/0x790 [ 500.713786] ? __find_get_block+0x7a6/0xde0 [ 500.718124] bio_alloc_bioset+0x389/0x5e0 [ 500.722279] ? map_id_up+0x178/0x2f0 [ 500.726000] ? bvec_alloc+0x2f0/0x2f0 [ 500.729811] ? __unlock_page_memcg+0x4f/0x100 [ 500.734317] ? check_preemption_disabled+0x41/0x280 [ 500.739360] submit_bh_wbc+0x141/0x760 [ 500.743273] __sync_dirty_buffer+0x14e/0x320 [ 500.747693] __sysv_write_inode+0xe04/0x1180 [ 500.752113] ? sysv_count_free_blocks+0x810/0x810 [ 500.756971] ? mark_held_locks+0xf0/0xf0 [ 500.761037] ? block_to_path.isra.0+0x84/0x440 [ 500.765628] sysv_truncate+0x96d/0xec0 [ 500.769523] ? get_block+0x1510/0x1510 [ 500.773423] ? get_block+0x1510/0x1510 [ 500.777329] ? __inode_wait_for_writeback+0x184/0x1f0 [ 500.782528] ? evict+0x2b7/0x760 [ 500.785907] ? lock_downgrade+0x720/0x720 [ 500.790097] sysv_evict_inode+0xcb/0x110 [ 500.794166] ? sysv_put_super+0x220/0x220 [ 500.798326] evict+0x2ed/0x760 [ 500.801527] iput+0x4f1/0x860 [ 500.804650] sysv_symlink+0x130/0x180 [ 500.808465] vfs_symlink+0x453/0x6c0 [ 500.812196] do_symlinkat+0x258/0x2c0 [ 500.816019] ? __ia32_sys_unlink+0x50/0x50 [ 500.820354] ? trace_hardirqs_off_caller+0x6e/0x210 [ 500.825393] ? do_syscall_64+0x21/0x620 [ 500.829465] do_syscall_64+0xf9/0x620 [ 500.833283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.838478] RIP: 0033:0x4665d9 [ 500.841680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.860700] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 500.868418] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 500.875696] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 500.882973] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.890274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.897545] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 03:20:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x6, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:00 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 500.932813] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:00 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{'\xdc+/-$#!'}, {'v7\x00'}, {}, {}, {'[}]:}&'}, {'v7\x00'}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:00 executing program 5 (fault-call:1 fault-nth:9): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 501.156260] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 501.164608] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 501.293308] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 501.310154] FAULT_INJECTION: forcing a failure. [ 501.310154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 501.322806] CPU: 0 PID: 19516 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 501.330717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.340063] Call Trace: [ 501.342700] dump_stack+0x1fc/0x2ef [ 501.346357] should_fail.cold+0xa/0xf [ 501.350157] ? lock_acquire+0x170/0x3c0 [ 501.354181] ? setup_fault_attr+0x200/0x200 [ 501.358510] __alloc_pages_nodemask+0x239/0x2890 [ 501.363265] ? mark_held_locks+0xf0/0xf0 [ 501.367313] ? check_preemption_disabled+0x41/0x280 [ 501.372320] ? find_get_entry+0x4cd/0x8a0 [ 501.376486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 501.381315] ? lock_downgrade+0x720/0x720 [ 501.385454] ? find_get_entry+0x4f4/0x8a0 [ 501.389604] ? find_get_pages_range_tag+0xc50/0xc50 [ 501.394620] alloc_pages_current+0x193/0x2a0 [ 501.399055] pagecache_get_page+0x5bb/0xd50 [ 501.403390] ? block_to_path.isra.0+0x440/0x440 [ 501.408058] grab_cache_page_write_begin+0x6a/0xa0 [ 501.412985] block_write_begin+0x33/0x2e0 [ 501.417119] sysv_write_begin+0x35/0xe0 [ 501.421080] __page_symlink+0x170/0x200 [ 501.425041] ? page_get_link+0x520/0x520 [ 501.429105] ? generic_permission+0x116/0x4d0 [ 501.433611] sysv_symlink+0xcf/0x180 [ 501.437324] vfs_symlink+0x453/0x6c0 [ 501.441038] do_symlinkat+0x258/0x2c0 [ 501.444844] ? __ia32_sys_unlink+0x50/0x50 [ 501.449100] ? trace_hardirqs_off_caller+0x6e/0x210 [ 501.454129] ? do_syscall_64+0x21/0x620 [ 501.458100] do_syscall_64+0xf9/0x620 [ 501.461920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 501.467094] RIP: 0033:0x4665d9 [ 501.470281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.489205] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 501.496924] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 501.504323] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 501.511576] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.518837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.526119] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 501.559107] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 502.490192] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.495786] ieee802154 phy1 wpan1: encryption failed: -22 03:20:03 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x7, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000016c0), 0x8, 0x402801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:03 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:03 executing program 5 (fault-call:1 fault-nth:10): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:03 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:03 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 503.734038] FAULT_INJECTION: forcing a failure. [ 503.734038] name failslab, interval 1, probability 0, space 0, times 0 [ 503.780104] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 503.783694] CPU: 1 PID: 19535 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 503.793994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.803350] Call Trace: [ 503.805953] dump_stack+0x1fc/0x2ef [ 503.809601] should_fail.cold+0xa/0xf [ 503.813417] ? setup_fault_attr+0x200/0x200 [ 503.817774] ? mark_held_locks+0xa6/0xf0 [ 503.821849] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 503.826964] __should_failslab+0x115/0x180 [ 503.831208] should_failslab+0x5/0x10 [ 503.835041] kmem_cache_alloc+0x3f/0x370 [ 503.839113] ? mempool_alloc+0x350/0x350 [ 503.843182] mempool_alloc+0x146/0x350 [ 503.847082] ? mempool_resize+0x790/0x790 [ 503.851243] ? find_get_entries+0xaa/0xa90 [ 503.855578] ? mark_held_locks+0xf0/0xf0 [ 503.859667] bio_alloc_bioset+0x389/0x5e0 [ 503.863846] ? map_id_up+0x178/0x2f0 [ 503.867567] ? bvec_alloc+0x2f0/0x2f0 [ 503.871397] submit_bh_wbc+0x141/0x760 [ 503.875298] __sync_dirty_buffer+0x14e/0x320 [ 503.879735] __sysv_write_inode+0xe04/0x1180 [ 503.884244] ? sysv_count_free_blocks+0x810/0x810 [ 503.889123] ? create_page_buffers+0x190/0x350 [ 503.893709] ? block_to_path.isra.0+0x84/0x440 [ 503.898296] sysv_truncate+0x96d/0xec0 [ 503.902301] ? lock_acquire+0x170/0x3c0 [ 503.906278] ? get_block+0x1510/0x1510 [ 503.910169] ? up_write+0x18/0x150 [ 503.913726] ? unmap_mapping_pages+0x123/0x2b0 [ 503.918306] ? do_wp_page+0x2210/0x2210 [ 503.922301] ? unlock_page+0x13d/0x230 [ 503.926191] sysv_write_begin+0xc1/0xe0 [ 503.930178] __page_symlink+0x170/0x200 [ 503.934159] ? page_get_link+0x520/0x520 [ 503.938663] ? generic_permission+0x116/0x4d0 [ 503.943161] sysv_symlink+0xcf/0x180 [ 503.946878] vfs_symlink+0x453/0x6c0 [ 503.950594] do_symlinkat+0x258/0x2c0 [ 503.954396] ? __ia32_sys_unlink+0x50/0x50 [ 503.958664] ? trace_hardirqs_off_caller+0x6e/0x210 [ 503.963707] ? do_syscall_64+0x21/0x620 [ 503.967797] do_syscall_64+0xf9/0x620 [ 503.971610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.976802] RIP: 0033:0x4665d9 [ 503.980012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.998933] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 504.006657] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 504.013922] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 504.021186] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 03:20:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2c28c0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 504.028625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.035889] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 03:20:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x8, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:03 executing program 5 (fault-call:1 fault-nth:11): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:03 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 504.126070] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 504.157802] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:04 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 504.277085] FAULT_INJECTION: forcing a failure. [ 504.277085] name failslab, interval 1, probability 0, space 0, times 0 [ 504.305829] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 504.323198] CPU: 0 PID: 19572 Comm: syz-executor.5 Not tainted 4.19.190-syzkaller #0 [ 504.331097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.340456] Call Trace: [ 504.343052] dump_stack+0x1fc/0x2ef [ 504.346692] should_fail.cold+0xa/0xf [ 504.350503] ? setup_fault_attr+0x200/0x200 [ 504.354827] ? ___preempt_schedule+0x16/0x18 [ 504.359241] __should_failslab+0x115/0x180 [ 504.363485] should_failslab+0x5/0x10 [ 504.367277] kmem_cache_alloc+0x3f/0x370 [ 504.371346] ? mempool_alloc+0x350/0x350 [ 504.375403] mempool_alloc+0x146/0x350 [ 504.379277] ? mempool_resize+0x790/0x790 [ 504.383417] ? mark_held_locks+0xf0/0xf0 [ 504.387488] ? generic_make_request+0xdf0/0xdf0 [ 504.392156] bio_alloc_bioset+0x389/0x5e0 [ 504.396289] ? map_id_up+0x178/0x2f0 [ 504.399985] ? bvec_alloc+0x2f0/0x2f0 [ 504.403769] ? __unlock_page_memcg+0x4f/0x100 [ 504.408252] ? check_preemption_disabled+0x41/0x280 [ 504.413269] submit_bh_wbc+0x141/0x760 [ 504.417142] __sync_dirty_buffer+0x14e/0x320 [ 504.421539] __sysv_write_inode+0xe04/0x1180 [ 504.425945] ? sysv_count_free_blocks+0x810/0x810 [ 504.430785] ? mark_held_locks+0xf0/0xf0 [ 504.434840] ? block_to_path.isra.0+0x84/0x440 [ 504.439419] sysv_truncate+0x96d/0xec0 [ 504.443303] ? get_block+0x1510/0x1510 [ 504.447192] ? get_block+0x1510/0x1510 [ 504.451082] ? __inode_wait_for_writeback+0x184/0x1f0 [ 504.456255] ? evict+0x2b7/0x760 [ 504.459606] ? lock_downgrade+0x720/0x720 [ 504.463764] sysv_evict_inode+0xcb/0x110 [ 504.467840] ? sysv_put_super+0x220/0x220 [ 504.471971] evict+0x2ed/0x760 [ 504.475152] iput+0x4f1/0x860 [ 504.478250] sysv_symlink+0x130/0x180 [ 504.482060] vfs_symlink+0x453/0x6c0 [ 504.485758] do_symlinkat+0x258/0x2c0 [ 504.489543] ? __ia32_sys_unlink+0x50/0x50 [ 504.493778] ? trace_hardirqs_off_caller+0x6e/0x210 [ 504.498786] ? do_syscall_64+0x21/0x620 [ 504.502744] do_syscall_64+0xf9/0x620 [ 504.506533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.511705] RIP: 0033:0x4665d9 [ 504.514892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.533793] RSP: 002b:00007f6fca113188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 504.541506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 504.548757] RDX: 0000000020000180 RSI: 0000000000000005 RDI: 00000000200004c0 [ 504.556009] RBP: 00007f6fca1131d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.563268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.570529] R13: 00007ffe01ebcbef R14: 00007f6fca113300 R15: 0000000000022000 [ 504.602905] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 504.692524] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:06 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x9, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) dup2(r3, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:06 executing program 5 (fault-call:1 fault-nth:12): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:06 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(0x0, r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:06 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:06 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:06 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 506.806779] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 506.822493] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xa, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x9, 0x20407) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:06 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xb, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 506.985319] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 507.073326] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 507.176646] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:09 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:09 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0xffffffffffffffcb}], 0x230c011, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x15) 03:20:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x9, 0x9, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:09 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xc, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:09 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:09 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:09 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce89d632bf1313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bceb091b6236bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xd, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:09 executing program 3: r0 = perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1217, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}, 0x10800, 0xfffffffffffffffc, 0xdd5, 0x3, 0xd6f, 0x0, 0xffff}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x3) syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(r0) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) r7 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4112, 0x0) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) [ 509.834025] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c1, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000016c0)={0x1fc, 0x2}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x27) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) r6 = dup2(r4, r5) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r7 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x9, 0x6, 0x80, 0x1f, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x1400, 0x6, 0x8, 0x9, 0x6, 0xff, 0x200, 0x0, 0x1, 0x0, 0x2}, r6, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r6}, r8, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:09 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 510.050095] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 510.079592] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 510.190020] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:12 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:12 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001700)=[{&(0x7f0000000200)="7fbfdf21dc849f74bb8639c9bd4aa6b7616098b6af4a", 0x16, 0x2}, {&(0x7f0000000240)="ca38df23e35e033e0cbcbb99f6c3d3a8631305a70fcd54297562807832dcd229332cc0078ff9fb023e5cc2a7e5c188ae0d4d6fd3b9a436695b3a1c582eb3655f3ad863314356c6a111143800f06dab0022929d41bf4ccfbb329bff2534744b4d644e796eeca2d61625", 0x69, 0xd2}, {&(0x7f00000002c0)="cfd9d48907ae5793d70bef05f7cf56badac02e3bc8ac28ec39da0b202b65ca9fddd980e0de6e0612e58f106134b3cfac4733ceda417056c8f564aec2b9bb863eb4898d29539f1fe2b70591894c88dafb46e20f03443af204bc2cc61f0a7c07fe09a4dcd27a121145d0e14b9837", 0x6d, 0x10001}, {&(0x7f0000000340)="e388003e5f3aa7bf1478977df3d4337c0f59ceae7c0ab757f0f6ec475d3ecf2c366875c4ff9e7fad540bbf552f3d9031dbb1604e4a013e9ec689f751278bfa36fd70a63bc1ad83e856f2802bd4ebd7a3684ca144ad33dde0194e5d2049d16eabf2bc7d68550836ba556c7a650a28bed6614382f07c9bedeccea6301113b7315f332ec3c4f5a16e6a29084ac0e8d3a93fdd4aa29167faad7ea4710d53ea6d59bd85e71739df37a56e6a3773c3dc14e2e75e175dd730ddec1d1f554efb71c43d007f5ec06e12620f4e035f14a0235a8f221b9b3e847d056565c4d2aff01d169d8f75fc2353b8737e", 0xe7, 0xbea}, {&(0x7f0000000440)="beb690e3", 0x4, 0x7ff}, {&(0x7f0000000480), 0x0, 0x1ff}, {&(0x7f0000000500)="beecc46c4ab4", 0x6, 0x8}, {&(0x7f0000000540)="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", 0x1000, 0xa3}, {&(0x7f0000001540)="de375cae9f224cffccaa8e9ca0aa1fc7e41f30a83dba1afb8260f2fb0a7ef5d02f841d7415795a41b1d22d5baaac4c8873e87e6432e299ee86acf8b9ded948736a95abf3b769334ded0e1ceb1a170e5d29614de0b83b9a99db04623202876c17a87e1d83027961f80388bf5b7dbb52e1c48900e3eeb904625978c20d578d8fc2503d35c84988084f667ab315d695f9c3116cd88075a607febf68572c272f", 0x9e, 0xfe5}, {&(0x7f0000001600)="d46b1e809f1254f9a11651e9f21e3ae00966d7716cd9897e20864b78be801a2c2e13c736c276b94b99d8e3f02f49f7effdabfcfcc2167f1c59cfea724ff670a2c6f50b555286c329be3de2bf31938f2e981191b61e94429bf9a325d45ee1569c75489b7a94f715c3918b05a7e814aa406d480a1e48c83d98f6ffef84bac70fccda50da84a436b59a8c27d09d87a6986d28e34a2ccfe4ea7a3be1dcca3ef38c54c8d5ea8de614e6ec63d9ab632a3607320c69181bc9350e7c12e6e177386435ac49e26d49a89a24fb0bfcff54ac4484e4f991fe022503e3348cacc98effcd4120c2e05ad2dbc6890d3ab2e5ea52e1d1c2254aeef98ad23a91a3", 0xf9, 0x7fff}], 0x2000000, &(0x7f0000001800)={[{@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x6b, 0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x38]}}, {@size={'size', 0x3d, [0x2d, 0x30, 0xd1a29e0d55d73412, 0x2d, 0x31, 0x6d, 0x67]}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2d]}}}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xe, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xfa8df243cd3910c1}, 0x0, 0x2, 0x80000000, 0x2, 0x0, 0x200a497}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a77978bfd000003000080000000000100000000000009000000000000000300000000000000080040000000000000008000020000000000000001000100000000000800000000000000ff030032989cdc4f2bf8fe0000009aa749d500000000"]}, @subvolid=0x4a}) 03:20:12 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, 0x0) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:12 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:12 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(0x0, r0, &(0x7f0000000380)='./bus\x00') 03:20:12 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0xbbb8, 0x2, 0x9}) 03:20:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 512.936562] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 512.951351] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xf, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:12 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc9683a78f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4102000273", 0x48, 0x1f}], 0x200c010, &(0x7f0000000180)=ANY=[]) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00') symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:12 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(0x0, r0, &(0x7f0000000380)='./bus\x00') [ 513.160283] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 513.208483] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 513.286717] VFS: could not find a valid V7 on loop5. [ 513.347529] VFS: could not find a valid V7 on loop5. [ 513.371725] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:15 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xee}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:15 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x10, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:15 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(0x0, r0, &(0x7f0000000380)='./bus\x00') 03:20:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8142, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x2) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) 03:20:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000180)='./bus\x00') 03:20:15 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') 03:20:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x11, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 516.055047] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 516.063206] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:15 executing program 5: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0x6, 0x8, 0x1, 0x8}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x96, 0x5, 0xe1, 0x4, 0x0, 0x6, 0x1ff, 0x25, 0x40, 0xe5, 0x401, 0x5, 0x38, 0x2, 0xfe00, 0xed4, 0x45e9}, [{0x2f99b16005240fbe, 0x100, 0x4, 0xffffffffffffb1bd, 0xfff, 0x8001, 0x7ff, 0x5}], "420a969f9b5d9c22fb61af71969c7ce613c4aec067b3453a60bacc2d9a8d0042ab003ff789afea0695c449f68ddfc48a95c26de0faddb35f408189c80c73c7af77fe352c7a31cf60a7a1f4590f4749768e47b3cd795bd89a77eefed1b0631366b5ef69077499854a490026556c3a5131a02e11d64c0e4bb15abb45aa7c853ce7fc548cf47df4a8af777dcf92063fc0eba952086f578aa56b94c76d44cb84c3935d451b4713584d034b8bc2ff8a4095a4627074453c5fdfe4f78ce69e67f51a05f3ccc69fdef18999cdc5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x842) r1 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') 03:20:16 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') [ 516.251453] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) [ 516.406319] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 516.546301] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:18 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xee}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:18 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:18 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) mknodat(r1, &(0x7f0000000040)='./bus\x00', 0x20, 0x1f) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x12, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:18 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') 03:20:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f00000016c0)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad000003000080000000000100000000000000060000000000000009000007000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"/132]}, @subvolid=0x4a}) 03:20:18 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, 0x0) 03:20:18 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_mount_image$jfs(&(0x7f0000000780), &(0x7f00000007c0)='./bus\x00', 0x7fff, 0x4, &(0x7f0000000b00)=[{&(0x7f0000000800)="b661e783d0c765c95eb8a020ff9d01d4a4a48d9d93d710471678064536bf79e7c5163d085d227583cc9962a3cd3b7421237a814289f66e0447dfa3b6f5f7192765a33e9315cf292e112c502a315f2d997ea487994071212df868487557e3286e8efb4ab897dce6c169953d2c2f5309d5c25dbc9f2ce7b0fbf01bb87e4d5560cd4e235615dce14c2f2aaef5de203c7b3764a25629f244dfceb1c2eb973b721bfdacdeb1", 0xa3, 0x4}, {&(0x7f00000008c0)="50587e655dfadbc4e4c3399a7efc733cbbfbf70be019d82eb3cddb5af0afa4c356c250272b1b2490212185dfc1e40250ac8872422a74e51721fb8a01f6b33221420a48c8695515ae3659fcbb8d43f8e2cd564d9072e2334be39aaa5fb8ae60bd09af67e041a7d25f6832da0182586e842ef383f78920b8fe1e345ba720803815be045ad1c86e4ce41322a953f31eb995e7061ba0e0cf8d1dcd0da495281833061c70f94d93cb891ca557c8600f26bab1d31de5f26f66f14debd340a1b576da2ba83bd82ac3d70a900f7c7ca02a9db7111c", 0xd1, 0x7fffffff}, {&(0x7f00000009c0)="e2d1af2124b07cecbfa9a73effbd82cbe8fbe597dcbd5858e52455cd8d2006ea8cf16278c6a40266a0835c4fd378cf24e6ff8f6083c7c94c717a6b555f2e53cff493ff05af6fd558d17f2b70cc029fa463a097abc37eab373803a4fcec9ecc0574a705e07c7592438f14ad2ec4b7d26de1", 0x71, 0x21}, {&(0x7f0000000a40)="22ee59704c94ea02e9779c4e239d56d07bccbc973cc6c4bcb5d09b3f6594f4eb7c9bafdd34ed56f78aa2f6a2b116999351124aebce9304321c82d4d1030f262d8091676aad943748d2fa70e4efac2a04d9dfdc24044ad01d368f6b7cecd3a87af04a2d719f761f2e296ddf5ad2d2bae6c7140a7fea7fab51e8cceee070defa521188ed48996d9ef224f63719b4ea1eb7a8968f3429216750d6f600c76771e4d8d00de13d51989a1229f6c42ce88ab712bed37115ba475cae1f5be10e1a", 0xbd, 0x6}], 0x381042, &(0x7f0000000c40)={[{@nointegrity}, {@discard}, {@usrquota}, {@grpquota}, {@resize}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@gid={'gid', 0x3d, r1}}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, 'nodiscard'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x7, 0x5, &(0x7f0000000440)=[{&(0x7f0000000200)="afc651e60c06cec9f800456ba04eda88b1c359c8099417e7383885dbc2011fcd63c73de831b829f2e97a4390fcc55ea609c96a6f24c35224398288b848a6eea5d1346354cd8794f124d7d6b8be1d2c220f4e59b0a0e7e28e56c48a600ec22607b83ee29f1bd6d1c50d70f0c7bc050a2c23a603a43cdf5139954299abdff8ba4c6a387c8b0dfba1f6e2e743bef07fd13ecf524bc2d8d995a33b0d1094e4a57c92c52822391412c269f41ac98466967f586ea1e2bc768f755d4cbcd861e495c54bdd85451fc71a0268d55ef608caf28735cb2ebda69a53ed40cbd0e8b3149542a6b781", 0xe2, 0xc285}, {&(0x7f0000000300)="0b4a689b27e54f0d1f7b89151274dbd65d7b6cf1b8182caea2e0d04f0ac9bf2999bcb7463a31d1e4af1c3d9b182cdac4f5768b3c779209e1ea39f005c93d70cb82d1fa1188b15d0f7feb452c561c09f0a53098ef1f951be13d81f4b82056d2f270b3de6554d48f1e0be068a40c264e7322b71f50d3dd02714fe1dd2b7edac55963ab8e077253ac629c0c4e76fb29176019e4a7ef0923be13c003b8aa8330fe8a36a9f690778071665ab22cec2937179334a71827796a3e4b1aaf85cccf", 0xbd, 0x6}, {&(0x7f00000003c0)="58d04713936b36cd4c8c6ae6d2235812f6cc1613e567a1064af1b07a7de36bfb47975fca0370a41e4e412b5e806e7af694c3d9cc13c60b24b65b560f0de1a39787fc2695655331dddcddbe2edad0518117691f26a4c774eca76921305da91fd03858f0dabc65564c9dfc7fa18a950582b4b88a452e93a4eb6befb66aedf2e104", 0x80, 0x6}, {&(0x7f0000000500)="afb6608cac8ba35323f8dc145a42da6150b4368ea1ef054201cf575685823fe0679b3cedf6455262a4b63be096edd4d969ea77c69d4eab69e3a99ce69789361915b15a9cc778300e55445a84648b8ef6c9ba8c26ddbebfee715978478266e53d3b333b79a478db7b2bf3cb4df8fa4cd603c3e2f534c056b76781290a262ea9064a5730bb", 0x84, 0x2}, {&(0x7f00000005c0)="ec1ee45979a6be14486ff1fe46fe159b09f5651efde4a0f5d0a835c94da378d2a45a6bfa538b610c31aa2fbe3dcd42579bb262b60119354a3ffc8ca0a6ccbac0103857cf474ba6604354ad333ff263d3dfaf9b021331c4094eb6f6a886a415571f0add243ab542a5c77128c06034405b52dd326e5f74d31e044bac93aa620604185156bc649463fe1e98f7f33f7a0848e934d6cbf073c4900cec1d5bf7fb19fb06f865528eea315a6586b2fc999dd6882090b22a70f196c53cbb14d9e8e176b37dd1d1793ce35321251e9873429606a26a0350d1bb4ce5c37ccb0e56af0d06755984035b9d5e91052ee9585640cfff83ea59d963f0e32912", 0xf8, 0xffffffffffffffde}], 0x47d39b6cb79f17, &(0x7f0000000cc0)=ANY=[@ANYBLOB='nodiscard,nodiscard,nobarrier,order=relaxed,snapshot=0x0000000000000000,dont_appraise,subj_role=v7\x00,fscontext=unconfined_u,smackfstransmute=v7\x00,euid>', @ANYRESDEC=0xee01, @ANYBLOB="2c0076d842f054b3e99312e150b56eb8feb23e33852e69ff5d36"]) 03:20:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x13, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 519.103263] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.121661] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000020000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getaddr={0x44, 0x16, 0x800, 0x70bd26, 0x25dfdbff, {0x2, 0x1, 0x23, 0xff}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x2867cad1, 0x200, 0x20a, 0x7f}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000005c) r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='.\x00', r0, &(0x7f0000000040)='./bus\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './bus/file0', [{0x20, '.pending_reads\x00'}], 0xa, "02447d3ba324e7e91b55516be1bdb878444da6f2e5bc0cf8315428c81a95a28a938c80c27ccb4ad464de635ab8a711ebed1fd385e9f1dfdaafc2d2ccc9feb4482217183e7b6b03b4443c832f0cdd944cd1de13daf768444495968d4514c739a02c23a292bffdc1ed28a91f383f6cf5ff"}, 0x8f) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0xf2109000) openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0xc081, 0x88) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000400)=[{}, {}, {}, {}], &(0x7f0000000440)=0x20) 03:20:19 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, 0x0) [ 519.373140] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.385911] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.573263] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.645127] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x2, 0x10440) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:21 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:21 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xee}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:21 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, 0x0) 03:20:21 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x205c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000500)="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", 0x1000, 0x3) 03:20:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x14, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000020000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 522.067007] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x15, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000041c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x1000000a, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0xa771) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3a40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(r0) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) r8 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:22 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x13ff, 0x3, &(0x7f0000000400)=[{&(0x7f0000000200)="f67952ce7e0bd0842ede381397f7b7beecf3213f43b7370738e00a42c0f364e37242771d63f5710fc7b62e31e1334f95bff6a5888e54adbe31ed56b066e087f2e646211663e7a994cda893b8eb450a7d98da8e4a2bdfa75789ad7cbaeaf124ea65a9e9af8cc17db3c27168173ae704ce850d89e0569cb3dbf4f42acefe42252597186dff9af5a90352051be16c5147b90c12cb9d37d09267e1fcb5d2", 0x9c, 0x8}, {&(0x7f00000002c0)="f450952897ed9cfea337af3e3ddcc2800901727c99a76a019563ad4a8a287d4ecb33bd3f0d547cf8166a120b943acc", 0x2f, 0x4}, {&(0x7f0000000300)="596a85ccded22ac1421f21c2cb4c5509b9c000dfcb08bb2e4192513021d176de6c2ff5de86099aaa1797917f262712d9ad6db0e3134c986915ca8e33a4502ae275b74cfb1ad62a5834451fa062620e51f374d9e33b1e65cbe79e190c7ce7f9b0b06ca7af19c2078ee6b6809341e7cd186d57a79ee5252fa7faaed1e9d815eb49469c272145e83980d85c028c4bc517578d4c94fc6ca796849cbc3907ea74c226aaa1dd70ef6e2c2dd7baad74cc2ffc487fbaf952bf51cd54a091b6d6082f897056a6bcac682bd8f53e8466fdb205d7ea61f8f2b46ef5d8df4c8498ab6ef00f", 0xdf, 0x51a07bae}], 0x100000, &(0x7f0000000500)={[{@datacow}, {@max_inline={'max_inline', 0x3d, [0x38, 0x39, 0x37, 0x34]}}, {@noacl}, {@nodatacow}, {@compress_force}, {@check_int_data}], [{@fowner_gt={'fowner>', r2}}, {@uid_eq={'uid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) r5 = socket(0x11, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001cd5508d8f342c9684"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@delchain={0x2c, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff8}, {0x19, 0x5}, {0xf, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:22 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000020000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 522.497472] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 522.683425] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:24 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(r0) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000faff0700000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) 03:20:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x16, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:24 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f00000016c0)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad000003000080000000000100000000000000060000000000000009000007000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900"/132]}, @subvolid=0x4a}) 03:20:24 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:25 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e24, 0xfffffffc, @mcast1, 0x8}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800006e1c3a467c58226f9b31af39eded210000000000000000030000800000000001000007000000000600000000000000e3b5000000000000ff03000000000000ff0700000000000006000000000000000c00000000000000383a10124e6c4d88f716c234b40000800000000000020000000000000001000100000000"]}, @subvolid=0x4a}) 03:20:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x17, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:25 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') [ 525.232306] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 525.575735] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 526.030239] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:27 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x18, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8712, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = dup(r0) write$P9_RGETLOCK(r5, &(0x7f00000016c0)=ANY=[@ANYBLOB="8ed89cf48a253bea49874f22b1b3e7d294e62d7f5b1bb4d1fc0692e14f139c613431d52205dae5b59745f1992e1b245036ec7e50a9a3bd7f220b01eb7d28eeb6aada88af464a7ae045936b0470cd7259d2002566f3e283560758ee71922ef1d1a3e77d13cc75749117d6a6a43b6aeb271475e2cd7a3142bd4c0f8d05aa40faf9", @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX=r4, @ANYRESHEX, @ANYRESOCT=r1], 0x27) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$vsock_dgram(0x28, 0x2, 0x0) r9 = dup2(r7, r8) ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x81204101, &(0x7f0000000080)) write$nbd(r5, 0x0, 0x0) r10 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r10, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r9}, r11, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:27 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = open$dir(&(0x7f0000000040)='./bus\x00', 0x8a101, 0x0) getdents64(r1, &(0x7f00000001c0)=""/222, 0xde) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:27 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:28 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="95305ee3b6fc38cebedf3d4b1f2e91d43edf09e9be1b3411d4fe4f4748b31a6e66b6ab765d69b20c0c059a792a2d17a260512cfd88cfa5fb5b467a9fec1e20c3a7799277afe527f2a635602d08f835f393f9bf388362bb30a2d0b1cbf3a35423f2e341c6de4f6c5091d8283f6cc3faf356bde060a4", 0x75}, {&(0x7f00000002c0)="76b4bdc5ed77eecf1c7ba7b5f911b8021fd69648b564578f48bb7e6da6f9226e09e182400112ca9cf12cdaf12f2980a378d041773de33cce53a550a924085c3a35a02f0d8b04b23d6a9bf2626f2e21528376ae760b593de0e57b673187842a23d6470f6668331181ad1f65fc73fc3937abe969f8857ab5", 0x77}, {&(0x7f0000000040)="3da991ec94b2ca9a7a0c56b6db483c6bb6744870f62503bc1f", 0x19}, {&(0x7f0000000340)="f1aa935436b5d5250cf39f301d50a6d2e3cbb9abbe71dd5af83d3c857c41f0fc52b138e2fe18a512e3a0c769991ad7347c6628736d627988006ba60a9a9f5d05bb850d1785948a186b47c16522062c0e85239ae2d2d6fdbe6d781ac0fcfafafa3f5c4fe1c3827948a18a54f58add897337cb627f3b91b9c6142781ebda835cb41137790b9db93a3ea335210fc2207e6c9bc424e16bbbb63949bada592073ba1dacd38f3293a90ae6e59d59b9fb3dd60e7aec6f18c2b39ff27c19881bfc493c73280415e40419f24dcfbbc94f8664e25a2db1ffef08503b7d0773a236419d1815c6028c37ec5c3c1f21049f4231c35d4d", 0xf0}, {&(0x7f0000001500)="ae0abcf06bdba572eeef68919074ae5d43ac12b086ffc8ab8afb6839468d84fcc66b88204aeceb3333fab7b8143deb8d0f19bb3f72a7eda44df34623c99e5a9f65ea4c5a57b502007c59690b50689b12b08a78e9b39071cd97d1cbd1a57b51b66bfa3c91c2e72a27ffb04235bee3c402a3cb91f132d042776a0744ad1469a613fa5821ec2c55ae8fef6fb40aa116981c8f7dc3615fc2706efc8ac6a27c77b8b10c834c9f6231496b813dcb18b4602fbee419ef1e72", 0xb5}, {&(0x7f00000015c0)="8c2413170f409eb6d1f972f97737767682f96800d101d0aa507966d55f69f3ce46e0e9c02b42457fbd99fe2baa50ee925f983bc93aea766c7d5cae4a5dec1154247742b0e3b2b82f66291b86bcc39ad5e1ba6fa6991b300d06582fc44da51046a1fb7a6c43cede4950a51b40d2d8823f5a0107c27626730063f8f20d4a6ec333429a63eaca96eb0bf20c", 0x8a}], 0x7, &(0x7f0000001680)=[{0x20, 0x119, 0x192, "7b38ef097f9d7a89af20e699a407"}, {0x50, 0x1, 0x2, "82bbc2500ea5ed21cf619eb6865a45505614188a9c70c115a8ebea700dc7f4abf74000c6a1881113fd33cfcd1d17290946e986083e0b8af1f64b"}], 0x70}}, {{&(0x7f0000001700)=@vsock, 0x80, &(0x7f0000001940)=[{&(0x7f0000001780)="a10e650aaaf3af8e8769da9ed7fb1290ba17ae8ceb85ac87861f0e576b90807a5472bb9a028b6c005f83db379c6450e5e2332dea87ebdf", 0x37}, {&(0x7f00000017c0)="9ed163bc501d76d33dcee071fe557f16a865fe0f58d83913e89318c66a7598315f5db642eac31033016b5a1c54d11e907d21868b49cfb9f72141662e2c", 0x3d}, {&(0x7f0000001800)="ee9547e3c24d6a9869108ea1d2c6bee361f027266208b3337014be10f975e0b278b1cc2222f74f48acd97d499509d1a3c69e414beb7f99ff", 0x38}, {&(0x7f0000001840)="7c6e8de31a409494f6e7b3dbd65ae8a9841e285573c849474cd51076411a4e8ae9ba55fc096b520417ac897c541b92d8145abb3acec1df5a6607725e6d55e8d2cd997093149651221aef9602daaadcd398004cd36c8d47aeb9f0ca7332d04c34d2f35fd1bc28bd62da9ede22ac4a7ece62efb3cb343477fd7e8ad89b409f1048927bdbb56924f2cfb8f4cda84392ef5af5e86a6f6c", 0x95}, {&(0x7f0000001900)}], 0x5, &(0x7f00000019c0)=[{0xa8, 0x112, 0x1, "cb0994bcf372c75885537fa3538f89af41a0fc6d13e3350aab39e2d09f4d391e617ff230dbc2368f568b3435750d2dab6430dac7a05b4c9642b9ff20016a02871d4c6694a4bfb7fd915c25133470b891962b69fc894c13d6057073522b4f78773ce1ce4e5243ae5e4c8d25db1e6907505e0e72dd478dcf1ca9336be8de202f17eaefbc47afcd03838c8811bd2c55b8e7d3013d100ab91734"}, {0xe0, 0x11, 0x0, "4316ee975d5f6870482320b3fb2ff52ae31569ebbb837000843bce8f2fdd5653a6119ad4d087d38e1743b6e5d5b35ad39cb4870d97ba8c96569bab0b34fb19858f9dd6cf106c2d60bb84219ef02c31db42e5c4f4a55d59d5fd84523bcabb9b594c69e1cf1fe062c7da7aa5fb36a304a64dae8976e470d82b2ad9af9707ac307ce86856f1a4adc54ed1fed11555fde44215bdf5637ade7713de3f4acb7cc7ed2be4162f8965232afd758181abed1c5bbe6cded2a091a9239088cca218ee4d6d53bf9a8015415f8cc72449e0f699c36c"}, {0x20, 0x10a, 0xffffffff, "a2f5e5a5f1352bb225"}, {0x18, 0x113, 0x1, "12161f4f630073"}, {0x70, 0xff, 0x656de738, "01c40e4a0f7ab8f343f99ae8a3084edd15d5abf2dbd6fd2b3d60478f26ddddbfebc3d364078e29d9af97d9762a2b641c53b5235a708ee3134d2137d9cb065d1909a3a070cfe651916a6deb8f6120f8ee0b2bb8e33ac7d14e99b8"}, {0xe8, 0x115, 0xfe000000, "f0df8378748b24bf9cb21b54b25527ac37ceb8997ea385705bd4f5b2d3c8dff60ee40f042abb5584a8f501ed3f402a8668f50725b6d810bd018853d4d3607d4dac04e106ddb5fe4e2c64f87d6f1d3996194db481d94f30343757f3104c7620117ce3b8eaba8036f5a42b4e242f2c155d6741768bf348da539b925cd4e8305f4cb40626bf6d9290784868f12b58d6a8b12521de6ea6bbde076191d0bd5dcc7bea9d9e5c019cacab1b300734819d3bca316b80db6837f54bfd3b6163d1cef940047b9b6fb96d6e6baddb94f63f4ce6af59f1"}, {0x28, 0x110, 0x101, "9ce39bfb212374e9d5c0744ed6698620f186848d11c5075e"}], 0x340}}, {{&(0x7f0000001d00)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=[{0x20, 0x10b, 0x8, "81136c1a570c7ef38e81482a"}, {0x40, 0x10e, 0x0, "53b9622f4dfac54c2459223901f9bed5b2a7e6acaad1e4cf8976c07c60291fe01d4c445a454a97df9250f0"}, {0x1010, 0x10d, 0x5, "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"}, {0x78, 0x104, 0xb7, "ad39d764d94f79ddccc272fce797ef619c7863a35e0acb0c802dafbef20a8dbe2927c3da625f4b22bbf099eabbd45478a83d1795a2de8467731ebbce2ad953a0faa814b5d808659df7503e565b270b4a117715f9b54ab6bfe474c3644bb6671dc488e6a6f9c8"}], 0x10e8}}, {{&(0x7f0000002ec0)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f40)="b442bf90169126b4a8d6979d68f9f04fcb00e22a64271211f0eac245f88f89a4517718753090c2cf5b3a60725d07ffb2913c7b0a00963687c02a8522b956ee4334836680deece148da0992ec6029b90b9db3e75455345943a83cf12d2943f94fab2218b67e0ab5ef345d37975b0f488768b7d71bd4f4c7cc1730", 0x7a}, {&(0x7f0000002fc0)="75a827ac290f4cd788e0c800a71d20eca2edde60c87dd69bc48ce08e0e3001771fb5f841f27cc20faf020c4a3ffaede8e8dac6fd80d0b37398ece265b739d251cd343a4d5235a3959c1c54bd9323d3c925633e4d8bdf065ce3ae469c00a053095c981fec1014e6902fedc8c503038025e3200c549084e5a8f17f5e08933c520ca2d9bbef5d4b52de7fcf8d0bc4547bd8a977762888a97d7dc2697cca7651076ab146ef0730668c371cb42375", 0xac}, {&(0x7f0000003080)="84dffef83932445c8ca474befd1e7dea735a4ddc40", 0x15}, {&(0x7f00000030c0)="92c50fae2f614d12a46e2f2886f1b47b74bb61bd3856296dba8d408cc4f96b8b8ed2008da47e3b6335d5af71cc12a3fac295bf7fb3cc6126de90b830a1f9e07578866c4ef40904b8b02e39e95a7f09226539b3", 0x53}], 0x4}}], 0x4, 0x0) r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100006700000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 528.245475] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:28 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x19, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x18, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x2200, 0x1, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000016c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03001600000000090000000000"]}, @subvolid=0x4a}) [ 528.550960] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 528.591844] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1a, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:30 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="48e493000039f3906711f60000", @ANYRES16=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r2 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000180)='./bus\x00') 03:20:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x9, 0x20407) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x9, 0x20407) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:31 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x3fe}], 0x220c832, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xa, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 531.381219] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21d386ec, 0x1848}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) 03:20:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff030000000000f0fd2b8d0000000000030000000000000008000000000000000000800000000000020000000000000000000000ff03000000000000090000000000000000000020000000000000"]}, @subvolid=0x4a}) 03:20:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1b, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:33 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb09}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000003000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:33 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x45) vmsplice(r2, &(0x7f0000003680)=[{&(0x7f00000001c0)="87c8dad8d48116e33980e4f6b2f9ba7411b2fd6627a9361980501ed10172930c1bcc88ad33ce81a5462901165918a6bedd4587c2647ea9606a4f4191cbbe5bde54aae2d9c5c9cb03986d433465cba5c72e59dc2451565ad1b957367713328c77bce8d7b44836ecf042ce87f37967d871eeea18f3b0276c4e3a82dc11ed45cd300f1f05fb754c7adf66febfd980", 0x8d}, {&(0x7f0000000280)="f7745d0ec163e255b7d6b8a1dd6e6a7de93182db0ab7484dc6c7cf68c78c7df1b6eec4646161317a0caf188fb846a0314edc1c0f7b6ec78056147a961edd6fcf33b5c65db06898af17459efde05e21f82a579cf1156ba42568cd49389cb96a709fa8eda462f94c2fdccf3701e17d22879420407126b44b2bac615d9b38593db73b4cff8e56ca00d14e60ea589999a7c38c611c062974f99723f78c", 0x9b}, {&(0x7f0000000340)="cdbbf76d22d633c0f6ba350812d9bc828947f35ec7c6a6d043528783327639c1c820d5084e884ac60eff7c532e6043e30397838ccc7979ed978214114522a368ad6eca0a91cf765f5ca19d4d039f65418d2e5fd88b05f61ee8a94e8aa05e15829e2fa1ee2aeaaf8e50eb9f1d423a1bd46d5a2fc2eb23eaf0dd998cd9c289ffd0389c08c2a7165679a69c92dc2f5cd1c1e0301ae9ca5bc4309990ec130b14449d8c5b76966e8b2a05ee2c7c71bcdcc17164cfd899c0137d89024e2287caf29da5001875288c796877f0570dc065c9f20d19f1f4faf52b4572ce72c7951d4d05758e17cf9a51862d8e76c854fb7c6e5e6ea38f7d2595828ef4", 0xf8}, {&(0x7f0000001500)="e0ec112c6d5db3c96ed128312d83f43a41f1d77ba70f10f6864bb19493bff5ebcaddcbd53b97c7a9c36a7f09572594988c96dbc5074e4fe8b0e1220a61a948806149e05afe57144980f3f423af0718d333e346943775c83b53b7c59ef704a2cb9e645cb70b006b74e79bef849f7f52f88f1c6b1c7160f2da84c7efb47a92e858e351a706c19c9bb40ce73c7a44c296f0c251d6bc8c48f484df76ef4d426ae86a1acfa8c4aa33ce1b32dc7b82307ed412c825f85912cd9c7a7b91e3d7a5e4542b", 0xc0}, {&(0x7f0000000040)="aa1c0c5c4436a7817760deba24db29a8610822ea49f7039631b1c5b61fdd292c5670fecfdfb95f578d77ecdb21df24d593a5a7dcf4eca9ccf5f40ecd", 0x3c}, {&(0x7f00000015c0)="9a4ccd3ed744448245eb27a3eb5e5fdecd6f4d66880a6560e694d653ebc1847a8d91e617afb8e32badaae0c39bc423cbbf49f8c22be8ea3590345482d2f6f628cf3502bf8a9ce83f37ec0a32f8a96abae37a01c1e47566861d691d462a106023e33e62f26d365e29eb8694b23aabdd7720df4152f3c93bad41c0c8f207d62b05562de59136fb280d12b6c37a0e3b8744958a", 0x92}, {&(0x7f0000000440)="288086612a11c7d7a736e5f43f69fb12fe16afed4fa9e407356dba34ea52d8", 0x1f}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="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", 0x1000}], 0x9, 0x9) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000500)={{r1}, "f66613e947fd1ed7bc05a7f2b257ec42116c14c3ff8d76173980e5d75e43ae9ae43bf2345bed66c458ba127b4913f2b7b3332d4113780043623838ffb3197cba83a35f7095a51b5d3e8ec68bcf2c3dc8f85e223c75a27004bae4c7cdce4f9002d2b24a63451ffb69d2c27bbe777600725f59a04a896bbbe03ed82ec423114ae0370cf14214b069bbaac5a73d22504b8b0ac3e6761ed0ac198b81aa013da978028a1ce4676e15acfc53c00be97e0ad5c10471558a41528aba9fa1b6e9780561c1608ea5a49ff74e029047700e36cced5d464e834bf2bc94889ada33016b26586aad2b4d71c5c8fd51697dceec275e32489ec33d5e911549157e7cdbef38df46c440f0edf30e62b53ee89fe12abdba665fc9a197b2b4cebb05fa6aa780d5fe1f1f8764cf11e176f8f449dcff9c7bc04633df4693640ba48130e084cf6450b267b515381bdabc64a55ba8581e68131a208482190bddbfe0565bafb56773009b1521323ee0ed480f127b978ad75935792d9b8f7ad71b16e603ece03986afb137f1025b44e174d60ed0d59b5318edf30154944d530fd24dc3be963524f0654cc2c2b9f9cbc4ce8565523ab7eb956c51b4b732e162d232624a43ef3dad02ac3a7e9e1cbe54382c86a2dd95883de6377c279c75d22d29cfa10dad0aa516b99221d87c313a9a071a43767aedd0755ad95e43be13564e167782beb3a9e544f594260e2c93463759f411dc4e3ca5e58dd2a69f4b5514dceafc9e9e1533395add258066bb4724a4f05fed9baa367f42eb147f1b8835ddacbe8df2ad3400731bd288b0b94134c8398f7b05cfb7dafd012f099a45271008f6a3ac77b714da494aa1113b003e16ea950353dbdeb8126157a81acaeddd278e4701df7abf274bfb7d61369de31411d781ae32087caa5ca6f3b4cfc2a3efa5358986f4ecd652320ed353cb066fbcd737adc3a5776820fd24fbb0bf928a8aba171b083970f6690d1e7fb864bce2b68ae52cc617525db415b1b86c79233bf0fd765e9ec19841831c6db6020a49c707d481c36f3d7f0ac957cf4d54dce26c6487f5201026eaef8f066e7a779883d745482f3ab6858d2ebb0669f12e739efbcf31049bc19b469c96eedd5bcf05d80860ace3b9808af3eca1a67ba96914f26ec30296a8efe21c81244410b343573ad88535602b1d8356efff9d7e4108f9e7e302e0f8059720914ee43556d9f067e9e00a6800f6eab10e2df5fc7a2a745ecba26007b78248b72196e4b37c09d77e18ea0c648b5d58e35573b37028fb19ddf6e316f3586be5b9d789ac8be0755705812a5904dd516343599232fa8b2c3c66e626f43ff1438a8385cdc4d0b38c6fb15ba7acbdf8f708504983710197f6d9eedee97d4604bc47dcfd5549944e38671db0143d4c4257d375d068161f6f85a3f50c9d5b55279195bd003ea0fe7cbfb3a09ea4255d52b9ef968b3d2a46f104e7c94c3a0a27ab026d18d0d01ef8b46b9e68f13c188d863cc8473e24311f2cc4934b2d757e32d90c892197a1f647bc353b8aec6ea0fd9c9dc23358976ff4ba6b8da29af8ebdb8477a3a0420999e5e273d52e071476481751f9a9fcdf8b8a1be4ac970734351e44ebf2885024612e575750f5c487ea85aba7e23553cccc64f5681d5799a020ea1149eb4a908a73268cfa83c9963818de2de7e7eb898e63aa8c0f7ff14ba93a61fb81fedbfa6e6c7b452d3e7867243ddfd4f49666623de026275ba63a9e38ce3a04fad7821070cf6d7ef92c76d1f2fb55c7b2ef4f59a7b1f08703082ac19fb973d5c94cc04b229b24f3c251aa65c9759202eb360d26213bc5f92c7f452a285e3d795af25f8cf54a49c6aa68a4ab03c4ef537119bf7584e6d0b120e5c1a3e23a8eec25fe6088c2409fd52fcfdc123449fff64949082c60f9c69410111df751f5951eadc4ad22e79dde6f3103107ae0411b163afd30cefe1003d610e67429d7467ae4d8ec404593ce69e6eaea84a067e018d8c475e675f1cadcd7c06c42648789802d9a8afeb77710dd1738bf572f1fd581162ecd413a9027f26794f46aac991810e4c508783a6dc4ba847d7768d255113b57e5320c08ef6be7a6ba8b0a1bc82bf5611dacb8fc47f05c2fffdabe25ab9d5a985cdd2df6c3e0f76897d62359e8e653c0ad6bc6d906339265df098a541aa497c5380ca6527d1d2751302937d15a0867d68c6fbcdbeaf2ee5169dddaecd7e6573581ab3be2fef6e23f9f98478e2949c8ab9a4e1714bf193508193e96d5e12f7de6bf9acec99fe1b0257925db796e8971908c064a47cd5e758547b1afc21cae484e0d4350ea4d2e8fe257fb4f4a8407ed1d8353cd01edf7c46f7478d8b14165ccb7ac1f2b6477b2fb2d793617f91e9aba2561e60d876c398711134a59b10485261ef0cde295276bca49a4db59501bfb5af8b9cf104bd47509663dc2fb7f22e12f61dd6f0558c5f8df9e30147e9c087455274a6e8331691dc23ff6b05091064dd69d4352ff84c9abe6c44c57745f4595aea483a76eb769ea6df1ec616d5b71c7133ba799f4553cb0bfa2e4d154338f7c9f18c3140714bef9625490a8915b0e39dd5c6cf3d2fabb101a4af8a47b13bb11ea510c04bbabb16b75db6c156a39897e107b9aeaa7bfc6afa139104300368f540447327fe6f064c4d57376248aa4ef018c5cc7992c6c839258a1058cdbd8215a27a3406dcf453496f5394bfba7520f735b5f3742c852e7bda8e454361cbbecd051f1b60ca8eda517882afc55484c431d90036f6a126d8032cd97233042aaa799a3d3e29df0ca3305dbfc4cb4553992371294f6ea9e0f5bd74b1a4db1ecd3c59dc5084e1eb498262fdec988b5b4e67d214d1a9c30e374fb46f583ab3914d81b877b7127420a7694a7c31f83a3869335c6acdd71c5e2fede5c5201e5570d067381abd8431fd36219f7353c194ca4aa45cbd4844bd01cf67fa69f1ce09ac45986049bfa0824ef19eb18401a24b7c927b015aa472f39fa7f8ca9d40cb28f6f531fdd3fbee661c3adf2591581429a971bda27193d53d9d2630d8c15059dadf5e5ac56d719cc8375175e71e4c27fe079b2be788fa94f7b50ce3c16d594d29389d09bd71ff6ad4e57886b1cc5c123eb0bfdea69b6118c84d547cf563c024fd8cfb7d5b4ae1c09bab1dfccf5b81548d2f35e59f0e7b01733873df9c2e832f79cffd9417f5595e7c4eb8b061f46c09326632e389155712779832c4b225d57009fafd2803846ae01a9b750ad835808cd04eb185d42a56c3f0ad831e25ff067faddf4a28f8fbf65ac8211b673e8c28fc4e1d630e8a3e389474977995bf895655198e9ac1e9af21ef3ce01861442e596cc312ccaa75da1df4c07a9b9c5d1dc8c7199160ebd5eb92def9ef16469fa9ac06d20eae01a3318e657dbb6005eb2fbfa5297ce2797793fdd515aed915d70e0a6ad2e09041e8ab3430c9e7d302879bcdc66fbf334c4a8ca9cae0b270239b1f242aa3dcc134fac52b9e0550d1e370d56d60523219b52efb0e99172753a0ba4cab327da7dbeb8621075b6362634722597bda224ab14b98093271de778bcd4eefb332d9fef0e4d9cde8cd8b016d248af049bf6afe14fff8a830b7ed0672943d44c59ac49ebf2f0103bb619131738827b1a7b390fae92b10116880930d50b36bd5b3c1c501686d9a124b54f4a916c8ebf021041b1b49bcdadab32a7fce29ec839c21e1b057e67ce6bb58f4ed743fdcd09c591d0e109485122cfc921577d3d6088f06030f82c4bd4693b2bf3d19ccfc0bcfb80177b275e62c50c5c062b3ecff793ef1547f64113f26bfe8bad6e516d37fd8cc04071879008b984bb68fbb869496893e1932f22a34a6ef0fad6a88ab4ab0dbea4d11a90ecf08e6b391aa40300774d8e98719d3ffcc26c2d04c263d683c621a967611cbf29158f7bddf92c4d85a656e7169d1cd7698d492ae2a36eb5b5d3aa83cec6b76f8be56c938cdb303982ef0e71288602adccb9b59c0f8f5317367f80d79c327b00c1a69e2d4570cbf3e32d3a91634e2c6e088399b12dbb916dcecd1eef53d91b2958052f370c793bd6988cd4809536a5dfed2c231fd3ab2a292dc02591c2becad8ff9f151ab6380627f18026129395bbf9678af68f0ed3f988609c50efea3d249abcdb94cee8ad048810b8834cc062edac0f01464f54a57ec499c88df940ad30a35faee48af25aaff566b01c9359f26c3b2eeda998d1c311b57d3a25f4047aa93edf02039cdf98c70df4ae46ce2cc5bcfaaa200975c315d1a461b27347e02f3fc4d77502497f5fb0f533f3a6c756956a21deb3c8d3877c775d75fe63324d1190509c1257e5d8eecb70ef67c5ec2e0b93cabf38382673e1e84f718f45e4764ca89effbc6a9f2e81058e23da4933fe77af3ab823b714e47b96006508c5f83488f941288816c1cf15344e42bdc9521df2c82a76f5e4bb10bd900d1f47916f764517f4de78b02e9da313546c020d7f3d0baabdc80fdacb33ca503eaa6c9ba24ca3444eab68a07f993ea805bf1df88d0c3b54aa745dff491e333f7116d0ba938d71168879bdac78f751871d8cd38bab14462c9772ca6373d8c99dacc27075ad643afbb48d51bd72ba28414f15052a8625fca7f512483e2e90b13597cdb0aac6e5a7ec1a5d702c657cee53a19cf5a1888ed77153b742748df7edb11e2c307f6708c81dfa299738843c8334e0a6dd9145c57d33349a0a0252bc8078801bfd256abd489b80ba4da3724118e4e8c7be1dde56138ba4606ce96f62925788544583b1941b36d94f489e940d10c91ca7bbf0dc95505f63ce71b3f9643dcaea21ec419719d5625310e388709740f613fc2db8b9f679f2e4ad9414bfbef1bb49d3ecdaaab2b90c6b64663d203bffbd346ce4fefff078124cd1441ace3b2aac77d2de0d4b662864acb0a3950cc35909d7feeb5050c9325104b59ddc8024227ab5deb2644d69df1e2b3687e51aacdef18e2de98208431f34633f84e0cc46b4b1a1ec65f515c3499663d0a61726dc9539465051fc6b28d353fb1ca3c0800bfbb2ed6929eee136bf7bd0019bcd66e7a6e317ce49c4d95975044ce8d33009474e38b11accd295bf6fbb13369ea7e2ea848e6d2e61cb512f7a4346a0c3c3668712bd469b3a05fe0d96d7621962b669ce12878b7bfb0cda47fe3d148d181c2611846d3e1a0aed3eed26a0fb7526568be730aeb951e7d86fa2ad9f218b4809fb52809067a242122f069e17f2a118344341c37fde231d20d92161f4c58f1b7a219cd1ff233c31dc3287e9ba3ad5e806eae36f78ee349b312b3e2e52dba1945fa5c95467281f8f5bc795e127307c66cb7a233776e7b8eb32a259149de63b115218e5fd1c9bfbc88bceac886ddfccdf03790beeb971bfe4f2015017f40bc1d0f0355a1c0650160be58add3f5ccdb9c81cb7d193183fc0f4d503276256ed9b650fa52f8553a58744f72813552a919da545eb31899d4db74552f8926764ce5b75cd3793201c5b1ed927b1f91c94a1b7cc294054dab3593b3cc294d67fe98ea58ef0ad578031b3bbfb6314a264f866acc59c59a94564141cac4fb3bb215a3b067878130c60b0c9b6765196b73e2d5a6f2fba4a1437695726c02068429142785f8b8796d5994bd424a6cfb4f5573a430e2eb0883265eda6de2d0d7282e64d88ab88e16a28ae599adb75324a00a08262be2905f6e6bf676456d849514188c6d5c59126896cdf8049d49295e45c6680014d78328d17a3318980f9c77b47bed43e24e6ae3ea4b7668c4fcc305929b5c4a5af56dcb48f63f4053c675baf"}) 03:20:33 executing program 2 (fault-call:5 fault-nth:0): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1c, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:33 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 534.360738] FAULT_INJECTION: forcing a failure. [ 534.360738] name failslab, interval 1, probability 0, space 0, times 0 [ 534.416210] CPU: 0 PID: 20225 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 534.424134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.433511] Call Trace: [ 534.436127] dump_stack+0x1fc/0x2ef [ 534.439768] should_fail.cold+0xa/0xf [ 534.443574] ? setup_fault_attr+0x200/0x200 [ 534.447898] ? lock_acquire+0x170/0x3c0 [ 534.451884] __should_failslab+0x115/0x180 [ 534.457258] should_failslab+0x5/0x10 [ 534.461062] kmem_cache_alloc+0x277/0x370 [ 534.465229] getname_flags+0xce/0x590 [ 534.469037] do_symlinkat+0x86/0x2c0 [ 534.472750] ? ksys_write+0x1c8/0x2a0 [ 534.476567] ? __ia32_sys_unlink+0x50/0x50 [ 534.480804] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 534.487555] ? trace_hardirqs_off_caller+0x6e/0x210 [ 534.492573] ? do_syscall_64+0x21/0x620 [ 534.496549] do_syscall_64+0xf9/0x620 [ 534.500354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.505558] RIP: 0033:0x4665d9 [ 534.508762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.527768] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 534.535485] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 534.542762] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 534.550033] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.557298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.564565] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 03:20:34 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x280c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f00000001c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="0fc7cf998c7c3e328fda64905f58ccc3c18f7ee42c829a57db0fbcd77fcbab59fcdad06a5a7e95bda64c4bad3bf8a8f10d534533c19f3779ae9da2ae030ab5f7bc647ae162e703ce016ac0710bb368a30c8bd2c0181f5376a2353ff32e397359a59075c9a39a6b47ccb9c8d10b10f2471abb187d7487d3ccda9c4356fdc2607a02e551653fd1d02aab34c2b4efa3b9997010977e1edec1dd2c8d64b1c33001703f4f5193492c1baf3dd470d8d681ded82cdcfac57a5aa6cf85718a9f412634c55e6c3f3eee12d7ee6d80e0e887e230a64d726902ab881f0e25dbdd8a18aa3d0d6b2c03c41ca97c6d666c9065b75bff3949c83aae1e8513c8dd", 0xf9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000340)="21eb0fcf28786cfb270a6985cda0bd9dd700d817c51232e07b96fc53705dac57bdc6c948579b82af7ce334ba5c2ce84ed4b9efb5ec3e8d8114ec98fac5a1992a71b16e076dc5837969792c6426a788f042c2adb0b61fb25c7a408be39beb", 0x5e}, {&(0x7f00000003c0)="eb0663a421bb80f35be3b91cea2cacda277fcdf99356063360e3d9617e01d164ef831272499871930a1bf73591663343f113a8bd7bb0f75df4180a4c046577d29536ad6eb67998da1c455ca8283ec47f7be1ce19b720cb06081ff05b9a97640635bd2d6add29d7dcd5", 0x69}, {&(0x7f0000001500)="9edfe5f0e803980bc94b6fc14cde7998d2492d65e1b6155bbc0e779b89e2a25f571237deec103cdcd1876fd5baf47a7c2e922ab88a21af1a4ab3567e69bddcf6f24c9772e6b92aa7ced4ff32d3ea3060913b8cb51eb310ab02ac6e0b1c03907d17dfe200676c2073f1d70f3207745491cae24cc596007399d1bf2d5a90cb3d4e692435917ac8e3e09d3e10ada0b6a82938d7df1aa66d8955077d7814d5d1ce26e277debdf83cd595a5af4cc503b4cbc873a15db0f58955d994f2ef143a25a236", 0xc0}], 0x5, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001680)="1722dff06a413ade1c54fa2d1a981b6ded86abf53f9a6dbe37e46eba8b4b16ddf4ad7cd0e8e4bf57564515ca441cb7c3b5fca8519004ce134617d9708e73d796d87d8f8ca75f5267bf35f29ff68f641138eb6c0b285550480975cf5b5d16242a72a11e5bb315fb19689e304572f0501b645e98893a6ce42af6e569cc0bcc8d8aa601eaa195431355de4711f2f1203aeca1505bb15a38366f25fbf6bccd365341705cc096b7f8007f3600d2f8b1867d66683ec0ce9cfea7542074f353f7eb", 0xbe}, {&(0x7f0000001740)="6a1a21e3d01559", 0x7}, {&(0x7f0000001780)="9a5862370fa503b146b08536a6bf755e6c4a04624361f5eeb63a2a5833a9446ce2297666e4dd55cc1c2558475eae45ae4594390dc843f389dd6ec8ebb33a4f7897d87a4c8438b0173b513d617fe66cf9321cb3cf1e6d9940c0b6cad040cbfa9a68064d303ab23718142dfa6fe4b652006ac1519665696d", 0x77}, {&(0x7f0000001800)="ead46a22e2769a610c95e5498dd048ddb10a09061af8194372989473129b49e8904d97b9a4ccd1b275f9cbd2d080bb58ad75a36e4cd408e6e369c09039674303d43f5a8e10cc2fd89db3b5ac65609d07199e02d60f13431deaeddc0aa06c4deb621df50b6e", 0x65}, {&(0x7f0000001880)="d826187ed8ae738b2eb6d97b62853afdce8ad1c760b92f32ca1bc70dc740ccba5e7f795608508bccd9e51c2b1e911cf0848c8322d2d9fde262d16cd70fbeaea9189ab6ca40f8737738cc15f092", 0x4d}, {&(0x7f0000001900)="599cd8e1d648862a59bcac302225d668bd42e699a50b8b303126462813e283aefa5cd9f2a0c16981f306ff8242ac6cbf1b0869944ce5139d34b494b384c9edfca17ef2e3a863a0b5c41bd125c6d3013daf6cdd02fa3dbef2000a7b081fd3acd005cbad07297e3b89178f275d0147", 0x6e}, {&(0x7f0000001980)="e0851b1e08dae4564f857c285e571dc953ed794ea1689f1704cce8841619259ea61fbd388af848d1e8867268815ba2af338c323bf108fc59805d37c9ae09d281fb25c777ac95a23cab276bdac932de720398ba9c33628986481e77aca8f72b", 0x5f}, {&(0x7f0000001a00)="3060eaf39b17f411ad76944b9947e8257b40aae5cfdf2fc3643d10833d2a702dd37d84343618d2f768cecb8be5fc590b138bd7b06b77b70315c38a0317ecc00417a2a4e585d2aedd2123761cc258e44a50b3c6ee5c468a092aa0ad3ae6e50a01dca4e671eeb79ac674e1aef671225e695f83021f3df5685ed92066f26463855c47b0c489f8fc22c917d40c673a4a78b0d08cd7ac87deb344ca80b6ac271d89035d1e65cf78eb977693573364c5817d4d1f5cdfbea4b5971a7f179165a54d0406259263ce630ffcba1ee9eed86bbc030f8d856eefe21c3c0a69e802e36838957d1a0383cfba076287782fe2f27c6a16", 0xef}], 0x8, &(0x7f0000001b80)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c00)="940f7a2897a3edc8db7282227aa66ce94dfc958adcdeb1fe6de105d377802e6d2a067acd40ca7097530edd653d9619640b14d8e3c1ff63de215133659bfe88d1a2be8765d0d1d7b0a199bba461f0307b41d23a52a13e93c74163b627bbbc9dbe72692cd4b5a1c9d3c02471d53390570f0cd828a958f779580a0a58f02bb1d54c003c67329036efe3b5a953eb3caa74257d311156dc1708ddad24dc57ac0465a683f67ba31e87e6c37fea1ab93fc3f37fcdeb129904707df3594a4a9e48048d07243fe7ae883219937ee02281f1ea2c88d899060aca4460f0ec9745", 0xdb}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="e59ca6983e0de7492ec088c04195525cf0328e403ea5eb7475508d2a8fca45fac5b7240aa3f8a313cb133a8266da2d81b4ccb3", 0x33}], 0x3, &(0x7f0000001dc0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffbff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x78}}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x20, @private1, 0x4}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001ec0)="b78c40a1be75546917ebb4810962f1100d201c7b2ec8c20c055309d676bcc19192ca7762596ccd09c781c41cca734f68b74e7c05e7eb4ab185d3208a90769e5d455ffc68363515dd364a959c24ae725cb8236b053b69f18c80879773122b16b548f7f78d59257701886a92e276cc3ea43161c5e0e9bcf1713743bb0c68b7f87fc0c117bb240716cfaa0f8f6dffe25b828ff5671e9035184900ea4a88d90607a0cee9fd295a", 0xa5}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="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", 0xfe}, {&(0x7f0000003080)="491ad8f4f0191f79e573d3ac22859c3bfc507c1c1cdba5b88c5d14cc67d888ef611eac750c7cb454d77475491bb1ce18b71e57db17628ef7977cc895f5eeeac32bfa847de45041788c6c127156ee2f81ada44aba245236f78511449d5b82b384c40b19df9d42100792e09304980920c7d2703dfe3b2aadc1cc2151da5bd978eedc55ff5198c3c710c5a1d56d5c504a1f937cc70ff23b0e74e03a4708113deb99b34bf6991fb7efd37f5545ea5a3d79480ad45b28c14b9c", 0xb7}, {&(0x7f0000003140)="de550f7585f101e872b08d475d852a30caf1ebd17d13e960f2d852523d55b741eb6bddcd5186461b1ddf0451cfee548085a90d8ce757e2ea31ef4f85c70a43e4127c71e4d109c54479e0ca0d487dfcc1d920a441c74b60489e87e25a262a28fafbae9d05607f6dc33c8c76c2", 0x6c}], 0x5}}, {{&(0x7f0000003240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000003440)=[{&(0x7f00000032c0)="b03598bba4295638c8df4d35d8594b962d769bb3e71be555b40ac4541acb0ad13a9cfd397cc0adc5c2900841196ede04cab50a03b37ad853ca30acfe15812cb29d2d54", 0x43}, {&(0x7f0000003340)="2cced5c48197f544400e05531633b31701fd1f184f7ddac32f7f3fe370bb64d49a474756cdbbd0cba281e1871a31586a7ab6dc80352ced029f461b8c2487f352e0fdba577938193a0a733248e412734decb76a5063d630041fbb59c6983d711edc44278e3ae951e7ea668b6e9384f5d442104bf4d4556b776ec3d3819b76558d8502d0a60f1e3912357b4cffaca7699f9ee01b1d087dc97f0715f1e67f83e949e4f6634e60a54c", 0xa7}, {&(0x7f0000003400)="79bca18ed38aa3e66a95ccf8d2fbe01bac104b2c9424c819eb3f28e6f20b81d09a88308eb8af779bef12f9252ac9736a1013e9", 0x33}], 0x3, &(0x7f0000003480)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14}}, @txtime={{0x18}}], 0xc0}}, {{&(0x7f0000003540)=@xdp={0x2c, 0x3, 0x0, 0x12}, 0x80, &(0x7f0000003640)=[{&(0x7f00000035c0)="c5f5b559c0574dcb0c61e79a6d0db2897368ad35f1749a7daef0732b292c4d07e8ad76614f2b58eb97ac798ab1fed184f7e9b980cf9e36d6fdcc2ae523402e303900e046825cc7dedbd93182709eda3a0bc4d96f5011bc5855c92f7e2cc30a8748ee79cb64020bf3d18e81cfc65992007730769854701b", 0x77}], 0x1}}, {{&(0x7f0000003680)=@l2={0x1f, 0xc69, @any, 0x73, 0x2}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003700)="37e0168b3d4d80fde72181a725eff55da905089a23b184a2c6bc19ca4d964909ae5df13ee650", 0x26}, {&(0x7f0000003740)="0c249a95380ee51cfd100101fe7497cde7fad5c6e04f1d69296bc6e3fccec725d9ec49d27045a9658ee4601af2665e21377094f043f04e453c365ff6df36975f6070c2f72245a8448a60ba3b4421d86542d0510275fe717506851addd44d7b567971d76893771b280d453fcb2aad05f457dcc97a5b39b61d8d1d001c6c2fa2bdcac004249a2b9dd081cdbd4e257ba7ee15a27f11a1f565b5e0c9a31dac96a9fc25f27f62543c1d44e906ee3c8e", 0xad}, {&(0x7f0000003800)="1d72de96accfe1cbac61bd626d0aa7bcd93a8bdbe48aa4c3840cdb6c56dbadff75d82b0b04e69989cb0b3ec5b793bb646fb8", 0x32}], 0x3, &(0x7f0000003880)}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000038c0)="7f11a2ec7555e55428c0654aeb2e08d94033cfbeb4fc3865caf93eb3a94c3d0c5beecd2417b522158014bcf72f01f3734f61a3c1eae51a7392676e22a70d0fd55bb0f5a1c305f4995a1e9dd9cd2ea8d0a043d9596aa3070a1c20d1a9febdd82671", 0x61}, {&(0x7f0000003940)="61d3cb81d6e190a5b2e50df16b9685930f0cf25a19fd8704560e3c3a3e8d8904a1410bca789213c4ea54b4b1c21a2e8832d81187fe247720b4b4a5b001db72447b524b4796e5c3d1a8d6b34d8a0cbfb3a5047b1a4506564e250d2d95b07f9331", 0x60}, {&(0x7f00000039c0)="7bf3ca02720eb984839d2c01addf5e6a79c744223030f7044d550ee79459baabbe83c59e0a7461bae3d83881c1d03fa308650ce52c1be593e9199ee9162c034af23c1a8ec0820c3549b748412018385f6c9c173931afee39fcabceb49f840d8f38dcfb70d60719683112d9ea2340e9fa8dbea87fabbe4637701dbadf28128fcc3c41cf8ea603bd994c23dcaedcc344ac1a88507c47dfd6c8cc8125e59f16836e55a1662a7f06f0fbbe76cc88b26c856d60bae4c7ada2c2e60eefe02e537a0ae2b83b681af12dc1d41f370d55afdd8e8bde3abd3c7953ceb5", 0xd8}], 0x3, &(0x7f0000003b00)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3db7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}}], 0x8, 0x80) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 534.589564] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1d, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x8000000000, 0x110002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 534.756143] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:34 executing program 2 (fault-call:5 fault-nth:1): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:34 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x800, 0x141) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x103) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_xen(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000002c0)={'trans=xen,', {[{@cache_mmap}, {@debug={'debug', 0x3d, 0x5}}], [{@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-:\xdd&&.$'}}, {@euid_lt={'euid<', r2}}, {@uid_gt={'uid>', r4}}, {@appraise_type}]}}) [ 534.823248] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1e, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 534.959924] FAULT_INJECTION: forcing a failure. [ 534.959924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.971771] CPU: 1 PID: 20264 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 534.979660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.989017] Call Trace: [ 534.991620] dump_stack+0x1fc/0x2ef [ 534.995300] should_fail.cold+0xa/0xf [ 534.999118] ? setup_fault_attr+0x200/0x200 [ 535.003455] ? mark_held_locks+0xf0/0xf0 [ 535.007561] __alloc_pages_nodemask+0x239/0x2890 [ 535.012327] ? _copy_from_user+0xd2/0x130 [ 535.016492] ? __lock_acquire+0x6de/0x3ff0 [ 535.020732] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 535.025579] ? proc_fail_nth_write+0x95/0x1d0 [ 535.030080] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 535.035117] cache_grow_begin+0xa4/0x8a0 [ 535.039211] ? setup_fault_attr+0x200/0x200 [ 535.043543] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 535.048312] cache_alloc_refill+0x273/0x340 [ 535.052647] kmem_cache_alloc+0x346/0x370 [ 535.056808] getname_flags+0xce/0x590 [ 535.060619] do_symlinkat+0x86/0x2c0 [ 535.064340] ? ksys_write+0x1c8/0x2a0 [ 535.068145] ? __ia32_sys_unlink+0x50/0x50 [ 535.072395] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 535.077776] ? trace_hardirqs_off_caller+0x6e/0x210 [ 535.082802] ? do_syscall_64+0x21/0x620 [ 535.086884] do_syscall_64+0xf9/0x620 [ 535.090695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 535.095889] RIP: 0033:0x4665d9 [ 535.099087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.118174] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 535.126010] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 535.133282] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 535.140555] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.147832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.155113] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 535.175120] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 535.218657] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:37 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @name="df4d9820ef9792e33c7fb118b06480e8b02e1bfe0dc131273fbc9be3b0ed8fba86b68f24355982cb122eb9e6b99605845356fe4888255ad8c32b8825afc3504914cdc88a301098bd70488ea613dbb191acf3a6eedb199988074808b57991ecb44513405fb58911b9437ed7e0ea3aa44e5969d3a4faa7182878bd3381088c11b47f6d1d76d1b0a76bddf8334dbf6ef112371978cb36308e94c096216157556372f74511d2a9818bcc0207756bd01adb1ab251d99704d921f753256c12bb08b4c44f1a349fa2874126f77831212a4af082d9424f84d6d4e623086b795aecfb29c935609f9b76daab066c8425e13b576769d91d642b2e01c97b235b6933698fca973b6ccd7432d89cc535b45c52b60fd271bf24343f0f78c008abac618775060a9cd0a8e11ffe740d5fed3be25be4a30a625edbd66756ee91e0ca88e7838d6cfbf92378e1708f169e23004d537e241fa1eb1faa8c7188c89c92c126e7d546c5f37b4f4e3261cdee31a72ab0a4c821d4a857a2669b9f7a6430df11e77cd0c8795d82b3c34960f35e71e71efbe5c359bb808c6cb80455f052943ed529c61ad27d96aec4faa7ab98481d2d6bf771e527746547af1ec4975a965c327b583c2ee2dcee12004736e786ceb68936656b3abb77b7ee4bc152749cc450706791470907f0a1d0e1dd394de46c9882ce0c53e502fffc413bfebdef4d5a6ad4fe1baf9b43ed0c77a7ba2c2a437f5079c151ead9519d8c968367d903ea1b53eb83ba60c4bfa1729211fb09ec3697080d65b843f2d24b682751654421ec34d5105b8c8507034bcc9f7510bd3de7ffa42d4c472cc341e5e64a2bbf86df5ffea62b8af852fd6f8c188139b8ca7c091bacd911733f9839c6aea3aa6a4d4022ff167163c69354b5b18f2f0e328bd1f8fd30420ecbcd3566cdfdb0d8b10bd2864e373413a6209587a905945a344235658810048763d0d9f5840e43a16ae883c532d1247673aceb761428aa5bef7e7a216b509fb053392769872a477bd3ec318f9ef72e4669e774c6cd2c375b68372325432f2d689adf0778f803d8ea5aa86f7e72005819ef6daa3b6671f4864cd06671d8276ddb74877fb61f07bfc8805231036576a49e2e64a5e10561dcb0b8067b8b2c424a63b5db8b0eb0244cd56180e0c11cbb1079de122fedfc149d88f001bafc983a4295816dc15f6bb4a5bdda3beb3fb17ac889b67a95520c7d22b7f833b9b8fcc4dce0e64b090d42fdd8a66df8daf4c924578673fab59e43637f4c8b8a4bb52f5e04ac452177f8c013ed0ae499e1bf89ddfacbf54e5aa261c62129ba229be924713782672544b42895253fe7a6cbfe021bd22b6e39169fe9ff5e91d4cbb672f6d9fcd51a3bcec01f6ccb11f68ef8df514a61862c2301a0c70add0bc434e08f008515292c2d4030475a99ef5fbd2776b98205572fb5b1840ea6c7d3910540b89ba06c4f8ad5951fa1ad21124be42bfdcd0aa2c518a26a5ba4310807ff68d8ffb9eeac0a0a68201d99f3ac9e032ca33fdb9ca9dcaabee37baf8006290eaf644c599f891dcdc4152eea3d4f9b45df4e14676c395e441cb1ae6be25c60e9057f6b8f2a3c19738fcb32dfa2008a91fc1ed40be7479741aa0baa80d50fd3af592e72fdd7890fc965cd00076bb4e490ad777f8a40b990324c25c3c56089fdc82281e064b72941f7b9904089acf2e0af9982998f50fc30d46495d0cdaacede0963b0e6aadb2c456a0772dd4d8daac9de14eeb588683dc2696ff17f4f4e7afd9cc786f50f94592d54628acf9e78e38f1797ba2ec63599bc49c1b4ea35dcb4ce329522b087bd09692809ab3693514832bb15ca7389c016dffc764baa484c091090c505964d6dbbf6ff3f0cf185ecaddcf330f877f6e73516f17e2fed4ad14f15d52652e66f090544bbb136dc7f886a60d17e2dd74db1b8798a78007ba0dec39c6cac50273bd448ade5c4d3d0b62aaaddb21a08e4e234c96a7d1871d194bc53b9910d874b16564afc72ccb9bbcfccaa70538f1a4b2d0d516722f953c914a4f4a5e54aaa10baccd63afef3ac90786a1d6439b461335b2c40e0bc8c0c9cbdab64eb1468517e5d6c30e27bdd72d7cea5503bd6e458790a0262a04020a5b640ccd9355429c91e138c1482e4e068b2933d595f977e8710d2095f4f7baf04eb96bfa19db2b280de9ffdb700e18e75dd805b1b9b74fd9324cb59e878a23fa89435f2e31cfe7287c14d8595311acb366b16135dff9f89a457e1aff4e81900e0d3fb63f87110d3c0f9fc0c11614332ae7747e3c1afd2fc9d0b69756134f96d364583465bfc661236c878b901434e2097a129c1f10f8097a91e32de9960504f1f7702be31aa458a19c2d38f3ed3d39e360bc5405a56e6344d63e7c032f5bb5648683bd5f5b920b8dc74eab72a1e2c38283e0764403985345f117cf32a1b57b0a11772d4ca0769b820f15e9746b36f88bfeb3ebe36f5e7333c5d65a403718d8688f2acde7900950556555194122c060d20ad21f5b169e3cba9535fcd1d46cf09a42d121c3b2281185fecc7fc4b56080bef8e9888a05036344b102f9b2d8c65765f43874e3925ff25e43e00f89f537f141cf621dfbbc230ec2710298a47fea00c4a85ba9111fac7267eb3eb3bdc494aa4d07e4bdef30f08cb01862e96c85b22f81ce454fcb1f344f5ad24c872de893ea4a3c997cb7917123185bf898f98feb99acadfed32d282d4862ef68cedd498a05c41a564af9a25da3e0110aa08a53051038b80dc14552f7d381bbd6ced04eea7f133c7f0a636c7374d902926a231b5972cb3c81dcb00ace6d55b9be5c5a010df2a8158421db27d21729c02262702c4cbe05a53a89278c7036e7e53b3b0a1763e464157be574fcc90b0508463a3fc34255ad73551159a96b48ddb632035071c397c9a1c97308174d7e24cba1907dc07e314a8ad39fc73b4b888b2a97c5f7ea96ad74e2ee8d88a1009579fee406298df7325cb5dc3fb1510ecfa0a3b9d3e0d2cdf08bedec213f0a9794f3651bc4a8a57f84f8f663eec7ba5c289a9a184e696aae998d59c3f709726f0d81a787db1eb80c8e739d9bb7ae877899af3d3441fc0b3c9ef05e1f34b32710b78dd0fa581d5ee9981303d095c21abf89b37fe1cbb69e962007ad3649dc3282c1a438432cd22fd5bdd36b60e4ca39cda6d1608e227e57fd62ecedc8a0eda81448ff48d7a7e26f160ffa2831674c7f7083b34709164fad56202ec1f9402e85efc50d16613e5a55ccc86af7d2db4106f856c243a3b8ec2286d4d98de9a924f1fca139e58564b515eccdb940df16237ea2cf7d4aa525fba4c90a200e76c70f25be8f5e6174d7fd10c2ff2c9fb0c61d9201560adf082538e9eec94d2ed527465f9db954e6a08ba84dd368336d1fbfd3671c1d93bfd4d08a19263e7dd28efde3db2da0e99d83db272fb2149dc5deb7995974bd5171b701d056b95e5dd5ab9773d1964b1ab1c5d8c1d61bf1475bf720546fa97892bc94a81ca20926aff7c1bfd6c2a76fa216595e5178ce27ee4cfcf1591081ed93f0cf7105760a2ffa6ce828763b6ce602d9f987a269e19a00ebc0f5c90ae087285817b4e17c74da1a40633b199a2360a4bde7837954cd9ed83c833ea326596180d3e5318d44d4dff4ea024637c47bc15954add6d4359552016b5a99b3f35f526af831ef75c30894d34d72ba3df595cc9f9fad15523862deaf6a879e437f5ca674999c8eff50f53714a88525b2e69d066e410937f88b4f9c3ca2402ec0a1986b7f96e9f10d7be59d0a0cd017c710d540e9454052a1084a70c9517246293f63b8cb71538bc5bdcd36f77c43576899fefeac3587e09fc79906042a056ce8729136eec485b6bb8fd6a7df237d363aec049cedae814d4d9c27022d03d6897a32eb3209ba64b2b8f0025b71b243f673c82e13852bcbee3911f47dbd861496afeed51c13372be582eef8e1f82020842ce9b27e6822b02513db1487edead62545d923e6d09689ae221f74c54c1e766f7125e80da9d400c76162f2a84b65cecc80056b5d21e7872c2ec198723fda0c4831d83c4e9b4290244e9bc2f2bd14b4bf39be79491398a5fcc2b868919098aaa614334469ccd5d7f6e4bc29602ee783d63cab4d6f5a1209e56a7f50191a264b6520cd52d250f4fbaf06fa39aeede913039679e0428b8e6b3c076a026a7f3028717bd7beb21a405940ac88bcf9d6a83260e969f009cdb46ab0ca8e80e634d9414bbc862bf61d9f503e049ef80a04fed3509d4709984cc28f0b5673caa4d4abf1ca64a7d3d4cf9d958be27b0490115079dd5fe8757f854c2dac34e2604243691d98683629efcde91ffdcbaed0303dff5074e3c662553afcdaccd71d01b48fafaabce7fd38c60d29e4db16f0376312390fdf7ff3038bfe6955063d6b82ed15338e3507ecfb6e372b6f3986106ba96e00dfd543225f64a6b30781a0b365ed43104fce596d1f1e070b2c2f41804730ce23d74dcc7d94d54da217653bb99c1e4a213dbb9ab86ca6b3f7e8de2affd1517474bfff58701fcdca92d471621f8f1cfc509340f92c468fd23893bd746a48a1c4f6ce6bf0d88e335bb6cf48a1a1bfc1925bddf55786706e5ad6fc533c1a1acd88750801fd54e1ab8d07805da9ea2bf216e516aa716297e2dd9d15201390e483f656f22af9c8509f4623195b49afa20c1c64a7d2674ed721a50d2ccd63ddf8646c58c6060b097d18b443afcb8d9246bf63bb358b60e8534ff3bc4a2868fe2f3eb8663924efd32f428061ec9ddb295bb925562f73a79e0698a7ca578e1821e9407339ca3e23ecf91e955300f2188f0263d98e84fccf0590b79766d81b5cb54b53d8293595a78d43efa490a95e3eb655834f44835863b48b4ea94e6978c83e51e78408fdbdc106059e9e4b2417afc372013b80bcf1c794cebb105ab7230d35123c21a10fccff72755a2888255665dcfbd94a6face29f45324b1933ada404cb01dea916320a90a4e5ca7054cc56d28c2334e3d3ea38df503742a088a69747e39909eb29e8ad1461b5136138d91c9a15fb63c41ed87e02b88a7aefaf63c5d3f6a978b44ed5914c6748a4e61fbdf74bf4b42d4dad94828c370f8aa81471a45a75ac5bae371bd2d26a80a00272c7909c239303eaba209dccb3a7fed015fdcf08efc97d099f237f6c1d0d9bd4d5669c7088743ca980c222745ddcb707a550cc90e8bf40532a0368b3215acbb46233af386e79caf372d62d82d0434119896bc04e662967bc5f24035b773079b7fe5496e45b1b771b124df5aacc644cb9fd74ba381b7cd0120b6600142709756e17dc67d67312654c617f693a1e907c5554a766e6bd1dc9fd21bd6960341a8fed2098d96d90e94c0fe6d1dcb30d4ba9b26932f746a3eda7a9a3c332b8ef2df1d5850a18b6c6f0856a7e7ae1d95ae1875c04f64d86e2c7c05a928ad94680ebd621aef8156793b84bd482443d27bcc5937bd272fa0166b23ca255bf91e77dd28c9238622b9e8677b330b4d19d456a5d5e4d17a2db2180b7995aecd52a562d42fe11f971377ebaebd5e1b1719ace434eb298f192ca6a68fce0857f96cd3be176810aa770de6ee7a812fb98b5645116615e87fe8a9cad57ad32213c97b5f0a222d3a2f62746e9aa1f4ebddbd2cb91621fe8440f8c7cc8cd9b8ea0d54071d2a3daf9afcaff8d393a7f466e96f82515a4ee90dc3623392d21d6ea8e81f716e67dfe450d0ea2d62d3"}) 03:20:37 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) r3 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES16=r2]) symlinkat(&(0x7f00000004c0)='./file0\x00', r3, &(0x7f0000000180)='./bus\x00') 03:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x21, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:37 executing program 2 (fault-call:5 fault-nth:2): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:37 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 537.332331] FAULT_INJECTION: forcing a failure. [ 537.332331] name failslab, interval 1, probability 0, space 0, times 0 [ 537.384005] CPU: 1 PID: 20289 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 537.391943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.401298] Call Trace: [ 537.403909] dump_stack+0x1fc/0x2ef [ 537.416752] should_fail.cold+0xa/0xf [ 537.420564] ? setup_fault_attr+0x200/0x200 [ 537.424893] ? lock_acquire+0x170/0x3c0 [ 537.428880] __should_failslab+0x115/0x180 [ 537.433129] should_failslab+0x5/0x10 [ 537.436944] kmem_cache_alloc+0x277/0x370 [ 537.441107] getname_flags+0xce/0x590 [ 537.444918] do_symlinkat+0xce/0x2c0 [ 537.448643] ? __ia32_sys_unlink+0x50/0x50 [ 537.452890] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 537.458265] ? trace_hardirqs_off_caller+0x6e/0x210 [ 537.463387] ? do_syscall_64+0x21/0x620 [ 537.467375] do_syscall_64+0xf9/0x620 [ 537.471223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.476414] RIP: 0033:0x4665d9 [ 537.479610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 537.498513] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 537.506228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 537.513505] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 537.520780] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 03:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x22, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:37 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') r1 = syz_mount_image$squashfs(&(0x7f00000005c0), &(0x7f0000000600)='./bus\x00', 0x1, 0x7, &(0x7f0000000bc0)=[{&(0x7f0000000640)="040b321b5ed603ee8e793956eeb7df02232982c4dd8d99f7a3ea190a4e13a28a59fcaf3dc6cf9c96a5ecf7e083e0d5725436cf3b0e2c49be7c745d7dd413325697ea25e645", 0x45, 0x3945}, {&(0x7f00000006c0)="1307b08a403605d6e3e17cf0475a6e022ad3f03966c29c95", 0x18}, {&(0x7f0000000700)="4b2e5aa4d522dabf4b8a9b324fc220b10d9b170f732dd17eaafdcca46786b703f3d865220b36f043be3832422feb80f65fc560a8676bc01267e3e92de206e8e21da34273c4b8ea66ab9f254ee609218ca0bdf23a8216106e13fb8ba7c7fe1d5f7185c923c2dc19bce478ebdec1ff62a0cb28682bcd200f6c624bf2b83c749ae04059150c17ff15a930d8ddbfa2c2f1908a44bca680e1cf34145a1854a51188e0b59e8e41f3d1ae0d2aba74087204d85bd402793d945d98b9ee1d81db8b06388026871f1a3cb922fca343df5162553e70c4b9c589c7b20bc1c290f07890094d7c44aba4d312f4d45f", 0xe8, 0x6}, {&(0x7f0000000800)="af78fe941adb80bc8898135d3c6dc782a879cf7596c303cca3379698c093cdc7203cf6dfa7bc3fc51857eceedd260c35310200fe2e8c6dfdf6169603210d85481c105f676e7278e7ef7529e918aaa15c65f05f541284a748d2d3eb7944f2d373c20100d021011051b25f9aa5f544d0fc5ca970161142558403b084e725628ed2f375340b3cef1499dab927ed0d39b05d762cf138e95c345581d399c19f4949c32742e15122942e5b3261d0a35e029b470e844aacbbd6cbe136025afcc8f93f8d6d4e729b3fb9fbeb12cd3666d67de055ac1ecadff988e5cfe8e8a45c3201117207ad63c60446fe52e25668faf38569fe500020cc0c0e850a", 0xf8, 0x1000}, {&(0x7f0000000900)="8050ddbf31e8f7c3ee3fb5b43a0f00fad3a28059f76819b32b832c678a806a0c02767eb25d939f6249248d784373a23a7573c61bb5e8888495cc4a6bb13a3e8bc9ec25e47471967ae0d00b23def71f6030170ff2aea87dbdd357a6d96004105e90c4508e784744dd1bd9afbc1b29bbbff05ca4a544dccf9d3dfaccf5b764820af7c07f893e14d32f007c294fac1991c6cbda56", 0x93, 0x7}, {&(0x7f00000009c0)="6a1df9b9a6bd3b8c999f541d46bc64bdc7a3a5322be0ca855515da7f9406d2871f8a682328e7cb77852ed2e739f5318e01c3c7169efff317955e1bd3b8d08bb81427d6df8121d587f5ac1a98523233db5d99a69cf1b260c26fdd035ba782bb33289cb676fa8894bdc64ceeddba1e5667469896dda834310f91d190e0f6227d624827b8136ad5fd4cdf15b6902107d1ad5fb76dc30090942190bb6c7f8f43a62975f0ce82e467f43afc8dcdc1a94b148644da75feb783366dbf38d948d05cf63d1c6245d7a6985ec532ea726b3016d0309313a1e2ad8a2e055a139144ea7b73b399428ae34af8b6d00361e4", 0xeb, 0x7}, {&(0x7f0000000ac0)="01ed96850af5ef0bf73c0ae9c5049e37d4f436a1253348c98f5bcfce80fc0414bf551f971c909e1e469df019a7de01b97719f52de19ba756262c31f4a1787c645b657fd157e288c88456eae97919b463519a0a1433fe548573b4ae71f779c64dd83356ad120e7152e06f1925ccf57ba7e269c33494b2e5040b5f8e09535f912a38fd857fd341789d18d014bd79523040d7244af6a6cc4e4bcc7cf3c358e339c5080ebf899fdd4568fa86790aac2edf60c9e0caaef45b26d6b9be62e5aca01cfa59ccd2e487c0470b13d7bdf83d070c99a2f49138d4132df121d10cbe9bacf2567145d2793adf1e29528c1f5c9afd971e940bee", 0xf3, 0x47ed}], 0x101449a03e8bfd51, &(0x7f0000000c80)={[{','}], [{@euid_gt={'euid>', 0xee00}}, {@euid_lt={'euid<', 0xee00}}, {@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@audit}]}) name_to_handle_at(r1, &(0x7f0000000d40)='./bus\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="0c00000001000000ff0100009f0f53a276cc0000a268607de361d6ee8a15c765cb0cc15d6296bf077ef0923aacadc570262b7ee2939921da0e4a8eb9"], &(0x7f0000000dc0), 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x351300, 0x0) r2 = syz_mount_image$omfs(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x9, 0x3, &(0x7f0000000440)=[{&(0x7f0000000280)="364440ac7b72f7dd543ac1a8434c72b1c2a24349f32ac71a60fa3f190ec8ab3d0989347becfd3c1f014f5f86c323f1017736ffbac8250702b0d58357ea8fab337183f66c5857d6ce16e0d1cbaa624f4e816dae1b88de931ba0fe791a18e0231493bd61254d77c5f5a05b67c52aa0b5c9142bd2159ded327b55a535f0a0c41bf0fcc202fdc4745ad489e7cfd81ae9e7971783faecafbd89e1332d4b6d994a76bb6a8a23437caca940588935c1b54f3627cbe58e38aeeaa3", 0xb7, 0x10000}, {&(0x7f0000000340)="26def071fce96d84fdc51d8d7c5c2c06ad39646a75bb90ef467052f776fd9578d17303328c786912540ce8ec0e8f7a9c007491e2013ac5dee681122bf57c51933c795af0d73a4e0bcd4ac3d2c965e19b0050bace", 0x54, 0x100}, {&(0x7f00000003c0)="a33d98a16442f4bc731150f263177dfad02598eb0655691dc1650d6b8f09506db0ff326bb0e6677271e5faff8fb1dc40dd11c183965bc5f16dd91fe22cdf8d4c99c7f9ee06cff5eaf23a1ccf591e08d26df34270ec99bac6d4d615c28573cc52bdc0fc4375225aee5d14", 0x6a, 0x6}], 0x2100000, &(0x7f0000000500)={[{'/dev/autofs\x00'}, {'&,\xcb+\xf4!\xff'}, {'v7\x00'}, {'v7\x00'}, {'\\-#'}], [{@appraise}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, 'v7\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_lt}]}) mkdirat(r2, &(0x7f00000001c0)='./bus\x00', 0x90) [ 537.528054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.535548] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 537.560035] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:37 executing program 2 (fault-call:5 fault-nth:3): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 537.710431] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x23, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 537.797839] FAULT_INJECTION: forcing a failure. [ 537.797839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.809704] CPU: 1 PID: 20332 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 537.817593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.826951] Call Trace: [ 537.829550] dump_stack+0x1fc/0x2ef [ 537.833190] should_fail.cold+0xa/0xf [ 537.837031] ? setup_fault_attr+0x200/0x200 [ 537.841362] ? is_bpf_text_address+0xfc/0x1b0 [ 537.845880] ? kernel_text_address+0xbd/0xf0 [ 537.850307] __alloc_pages_nodemask+0x239/0x2890 [ 537.855088] ? __lock_acquire+0x6de/0x3ff0 [ 537.859369] ? do_symlinkat+0x86/0x2c0 [ 537.863357] ? do_syscall_64+0xf9/0x620 [ 537.867348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 537.872213] ? proc_fail_nth_write+0x95/0x1d0 [ 537.876719] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 537.881664] ? cache_alloc_refill+0x2f8/0x340 [ 537.886175] cache_grow_begin+0xa4/0x8a0 [ 537.890249] ? setup_fault_attr+0x200/0x200 [ 537.894578] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 537.899347] cache_alloc_refill+0x273/0x340 [ 537.903701] kmem_cache_alloc+0x346/0x370 [ 537.907864] getname_flags+0xce/0x590 [ 537.911677] do_symlinkat+0xce/0x2c0 [ 537.915411] ? __ia32_sys_unlink+0x50/0x50 [ 537.919684] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 537.925085] ? trace_hardirqs_off_caller+0x6e/0x210 [ 537.930132] ? do_syscall_64+0x21/0x620 [ 537.934122] do_syscall_64+0xf9/0x620 [ 537.937939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.943133] RIP: 0033:0x4665d9 [ 537.946354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 537.965297] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 537.973017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 537.980296] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 537.987571] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 03:20:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12010, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x2c002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000400000000000008000000000000200000000005bf453e1823a024b742cdf000001000100000000000800000000000000ff030000ea000000090000000000256e8eebf1e963a9e29f212f43b7c2ea58c4bdb4d8fe3465a176b87ded1c663c15f9f26c0405"]}, @subvolid=0x4a}) [ 537.994932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.002211] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 538.030135] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 538.116079] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:40 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x24, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001114200029bd7000fddbdf2508004a0000060000000000000000000008004f000200000008003e000500000008004f00040000000800ee00040000000800030003000000080003000300000008000300010000006a9b79cf08184ec659cadd0873bf9c7e7ddfcecab3ee68d26c7aeedb641c2a3de6d07bd0cd4c525df5fb2fa11c04698fc29834481f869456ee581eb35efb5b20dcf41cebd5ecd3a6f3575ccb52"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000000) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000700), 0x0, 0x0) r7 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="b8298308000000000000941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20ef00f3887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41002eec4996d16d5c8e6fd94c20202a4acac181cbf946becc7f72e5429f4343b775c851c740cafac82499fa9ab80c9ce99929babced608978acfcd94312809c51f4043a01df923496978f41e6fd663297430454ab8070133ce682e4c5e5fd5b7c64d60bc1d445812c647c00c82c722b7064fd09a81f7a70766f73073f56a55e42be6e239a9648ed8b284ca166e7c191a8dea25eb7da3a849ff58845fbdc01a6af2f632c8176440de26dac", 0xeb, 0x401}], 0x200c010, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESOCT, @ANYRESOCT=r2, @ANYRESDEC=r5, @ANYRESDEC=r6, @ANYRES64=r0, @ANYRES32=r2]) symlinkat(&(0x7f00000004c0)='./file0\x00', r7, &(0x7f0000000180)='./bus\x00') 03:20:40 executing program 2 (fault-call:5 fault-nth:4): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad0000030000800000000001000000000000000600000000000000090000000080009ff76e70480d848d38fa2f34f6f371555d000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000"]}, @subvolid=0x4a}) 03:20:40 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 540.434818] VFS: could not find a valid V7 on loop5. [ 540.444734] FAULT_INJECTION: forcing a failure. [ 540.444734] name failslab, interval 1, probability 0, space 0, times 0 [ 540.486586] CPU: 0 PID: 20364 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 540.494497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.503854] Call Trace: [ 540.506459] dump_stack+0x1fc/0x2ef [ 540.510100] should_fail.cold+0xa/0xf [ 540.513911] ? setup_fault_attr+0x200/0x200 [ 540.518242] ? lock_acquire+0x170/0x3c0 [ 540.522228] __should_failslab+0x115/0x180 [ 540.526467] should_failslab+0x5/0x10 [ 540.530273] kmem_cache_alloc+0x277/0x370 [ 540.534427] ? sysv_i_callback+0x20/0x20 [ 540.538498] sysv_alloc_inode+0x18/0x40 [ 540.542480] ? sysv_i_callback+0x20/0x20 [ 540.546551] alloc_inode+0x5d/0x180 [ 540.550186] new_inode+0x1d/0xf0 [ 540.553559] sysv_new_inode+0x10a/0x1300 [ 540.557655] ? trace_hardirqs_off+0x64/0x200 [ 540.562064] ? sysv_free_inode+0x850/0x850 [ 540.566281] ? map_id_up+0x178/0x2f0 [ 540.569983] ? in_group_p+0x103/0x2a0 [ 540.573808] ? generic_permission+0x116/0x4d0 [ 540.578290] sysv_symlink+0x93/0x180 [ 540.581992] vfs_symlink+0x453/0x6c0 [ 540.585691] do_symlinkat+0x258/0x2c0 [ 540.589495] ? __ia32_sys_unlink+0x50/0x50 [ 540.593728] ? trace_hardirqs_off_caller+0x6e/0x210 [ 540.598754] ? do_syscall_64+0x21/0x620 [ 540.602728] do_syscall_64+0xf9/0x620 [ 540.606541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.611756] RIP: 0033:0x4665d9 [ 540.614946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 540.633850] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 540.641560] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 540.648824] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 540.656099] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 540.663363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.670618] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 03:20:40 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x349, 0x8, 0x9, 0x5, 0x8, 0x0, {0xfffffff7, 0x2, 0x401, 0xb32f, 0xffff, 0x7, 0xff, 0x8, 0xc9a6, 0x1, 0x7, 0x200, 0xaef1, 0x8, "462325c973d8e97b330e222b1008fa05a373dd39fd997fd2f49416ba37933118"}}) r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x4, 0x1210c0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff030000000000000900000000004bb1a6eb6e84219384cb933ed60e55e3908b935a2b8b09"]}, @subvolid=0x4a}) 03:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x25, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:40 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x240000, &(0x7f0000000240)={[{@metacopy_off}, {@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, '}:/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'v7\x00'}}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus/file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0xffff) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./file0\x00') 03:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x26, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 540.903592] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:40 executing program 2 (fault-call:5 fault-nth:5): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 540.987134] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 541.131305] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 541.155741] FAULT_INJECTION: forcing a failure. [ 541.155741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.168138] CPU: 1 PID: 20414 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 541.176022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.185361] Call Trace: [ 541.187958] dump_stack+0x1fc/0x2ef [ 541.191614] should_fail.cold+0xa/0xf [ 541.195446] ? lock_acquire+0x170/0x3c0 [ 541.199409] ? setup_fault_attr+0x200/0x200 [ 541.203738] __alloc_pages_nodemask+0x239/0x2890 [ 541.208506] ? mark_held_locks+0xf0/0xf0 [ 541.212566] ? check_preemption_disabled+0x41/0x280 [ 541.217598] ? find_get_entry+0x4cd/0x8a0 [ 541.221753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 541.226598] ? lock_downgrade+0x720/0x720 [ 541.230774] ? find_get_entry+0x4f4/0x8a0 [ 541.234932] ? find_get_pages_range_tag+0xc50/0xc50 [ 541.239967] alloc_pages_current+0x193/0x2a0 [ 541.244470] pagecache_get_page+0x5bb/0xd50 [ 541.248798] ? block_to_path.isra.0+0x440/0x440 [ 541.253477] grab_cache_page_write_begin+0x6a/0xa0 [ 541.258426] block_write_begin+0x33/0x2e0 [ 541.262584] sysv_write_begin+0x35/0xe0 [ 541.266558] __page_symlink+0x170/0x200 [ 541.270535] ? page_get_link+0x520/0x520 [ 541.274600] ? generic_permission+0x116/0x4d0 [ 541.279094] sysv_symlink+0xcf/0x180 [ 541.282829] vfs_symlink+0x453/0x6c0 [ 541.286539] do_symlinkat+0x258/0x2c0 [ 541.290352] ? __ia32_sys_unlink+0x50/0x50 [ 541.294586] ? trace_hardirqs_off_caller+0x6e/0x210 [ 541.299616] ? do_syscall_64+0x21/0x620 [ 541.303592] do_syscall_64+0xf9/0x620 [ 541.307394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 541.312582] RIP: 0033:0x4665d9 [ 541.315771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 541.334753] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 541.342470] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 541.349736] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 541.356998] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.364275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.371547] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 541.430791] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:43 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000016c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad000003000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000800000000000800000000000020000000000000001000100000000000800060000000000ff0300"/132]}, @subvolid=0x4a}) 03:20:43 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x3607, 0xf6}) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') 03:20:43 executing program 2 (fault-call:5 fault-nth:6): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x27, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:43 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 543.508421] FAULT_INJECTION: forcing a failure. [ 543.508421] name failslab, interval 1, probability 0, space 0, times 0 [ 543.572301] CPU: 0 PID: 20436 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 543.580222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.589604] Call Trace: [ 543.592202] dump_stack+0x1fc/0x2ef [ 543.595840] should_fail.cold+0xa/0xf [ 543.599654] ? setup_fault_attr+0x200/0x200 [ 543.603987] ? mark_held_locks+0xa6/0xf0 [ 543.608057] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 543.613171] __should_failslab+0x115/0x180 [ 543.617421] should_failslab+0x5/0x10 [ 543.621229] kmem_cache_alloc+0x3f/0x370 [ 543.625297] ? mempool_alloc+0x350/0x350 [ 543.629363] mempool_alloc+0x146/0x350 [ 543.633301] ? mempool_resize+0x790/0x790 [ 543.637460] ? find_get_entries+0xaa/0xa90 [ 543.641707] ? mark_held_locks+0xf0/0xf0 [ 543.645820] bio_alloc_bioset+0x389/0x5e0 [ 543.649976] ? map_id_up+0x178/0x2f0 [ 543.653720] ? bvec_alloc+0x2f0/0x2f0 [ 543.657548] submit_bh_wbc+0x141/0x760 [ 543.661451] __sync_dirty_buffer+0x14e/0x320 [ 543.665871] __sysv_write_inode+0xe04/0x1180 03:20:43 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) umount2(&(0x7f0000000040)='./bus\x00', 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 543.670389] ? sysv_count_free_blocks+0x810/0x810 [ 543.675242] ? create_page_buffers+0x190/0x350 [ 543.679835] ? block_to_path.isra.0+0x84/0x440 [ 543.684429] sysv_truncate+0x96d/0xec0 [ 543.688338] ? lock_acquire+0x170/0x3c0 [ 543.692318] ? get_block+0x1510/0x1510 [ 543.696215] ? up_write+0x18/0x150 [ 543.699788] ? unmap_mapping_pages+0x123/0x2b0 [ 543.704385] ? do_wp_page+0x2210/0x2210 [ 543.708372] ? unlock_page+0x13d/0x230 [ 543.712279] sysv_write_begin+0xc1/0xe0 [ 543.716264] __page_symlink+0x170/0x200 03:20:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x28, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 543.720280] ? page_get_link+0x520/0x520 [ 543.724351] ? generic_permission+0x116/0x4d0 [ 543.728859] sysv_symlink+0xcf/0x180 [ 543.732579] vfs_symlink+0x453/0x6c0 [ 543.736319] do_symlinkat+0x258/0x2c0 [ 543.740129] ? __ia32_sys_unlink+0x50/0x50 [ 543.744372] ? trace_hardirqs_off_caller+0x6e/0x210 [ 543.749408] ? do_syscall_64+0x21/0x620 [ 543.753396] do_syscall_64+0xf9/0x620 [ 543.757208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.762407] RIP: 0033:0x4665d9 [ 543.765607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 543.784514] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 543.792228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 543.799500] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 543.806769] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 543.814043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:20:43 executing program 3: perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40c, 0x0, 0x0, 0x0, 0x0, 0xbe33}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001740)={0x4, 0x80, 0x20, 0x43, 0x40, 0x89, 0x0, 0xfffffffffffffffc, 0xc04, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb6, 0x4, @perf_config_ext={0x9e3b, 0x34b0}, 0x10600, 0x7, 0x4dd9800, 0x1f68a425cf08bffc, 0x3, 0x91, 0x400, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(0xffffffffffffffff) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) r6 = dup2(r4, r5) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) r7 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r6}, r8, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000900000006000000000000000900000000000000ff03000000000000ff07000000000000033a00000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 543.821315] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 543.849252] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x29, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:43 executing program 2 (fault-call:5 fault-nth:7): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4a}) [ 543.991963] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 544.077210] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 544.231634] FAULT_INJECTION: forcing a failure. [ 544.231634] name failslab, interval 1, probability 0, space 0, times 0 [ 544.257594] CPU: 1 PID: 20484 Comm: syz-executor.2 Not tainted 4.19.190-syzkaller #0 [ 544.265507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.274875] Call Trace: [ 544.277485] dump_stack+0x1fc/0x2ef [ 544.281128] should_fail.cold+0xa/0xf [ 544.284944] ? setup_fault_attr+0x200/0x200 [ 544.289278] ? _raw_spin_unlock_irq+0x5a/0x80 [ 544.293787] ? finish_task_switch+0x146/0x760 [ 544.298297] ? finish_task_switch+0x118/0x760 [ 544.302809] __should_failslab+0x115/0x180 [ 544.307059] should_failslab+0x5/0x10 [ 544.310870] kmem_cache_alloc+0x3f/0x370 [ 544.314981] ? mempool_alloc+0x350/0x350 [ 544.319079] mempool_alloc+0x146/0x350 [ 544.322977] ? mempool_resize+0x790/0x790 [ 544.327133] ? schedule+0x97/0x1b0 [ 544.330946] ? mark_held_locks+0xf0/0xf0 [ 544.335079] ? __wait_on_bit+0xbd/0x150 [ 544.339052] ? generic_make_request+0xdf0/0xdf0 [ 544.343704] bio_alloc_bioset+0x389/0x5e0 [ 544.347858] ? map_id_up+0x178/0x2f0 [ 544.351557] ? bvec_alloc+0x2f0/0x2f0 [ 544.355349] ? __unlock_page_memcg+0x4f/0x100 [ 544.359862] ? check_preemption_disabled+0x41/0x280 [ 544.364906] submit_bh_wbc+0x141/0x760 [ 544.368780] __sync_dirty_buffer+0x14e/0x320 [ 544.373230] __sysv_write_inode+0xe04/0x1180 [ 544.377632] ? sysv_count_free_blocks+0x810/0x810 [ 544.382477] ? mark_held_locks+0xf0/0xf0 [ 544.386521] ? block_to_path.isra.0+0x84/0x440 [ 544.391088] sysv_truncate+0x96d/0xec0 [ 544.394975] ? get_block+0x1510/0x1510 [ 544.398850] ? get_block+0x1510/0x1510 [ 544.402739] ? __inode_wait_for_writeback+0x184/0x1f0 [ 544.407922] ? evict+0x2b7/0x760 [ 544.411294] ? lock_downgrade+0x720/0x720 [ 544.415429] sysv_evict_inode+0xcb/0x110 [ 544.419482] ? sysv_put_super+0x220/0x220 [ 544.423647] evict+0x2ed/0x760 [ 544.426824] iput+0x4f1/0x860 [ 544.429918] sysv_symlink+0x130/0x180 [ 544.433723] vfs_symlink+0x453/0x6c0 [ 544.437434] do_symlinkat+0x258/0x2c0 [ 544.441231] ? __ia32_sys_unlink+0x50/0x50 [ 544.445453] ? trace_hardirqs_off_caller+0x6e/0x210 [ 544.450468] ? do_syscall_64+0x21/0x620 [ 544.454428] do_syscall_64+0xf9/0x620 [ 544.458214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.463409] RIP: 0033:0x4665d9 [ 544.468246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.487129] RSP: 002b:00007f909b8a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 544.494850] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 544.502215] RDX: 0000000020000380 RSI: 0000000000000005 RDI: 0000000020000340 [ 544.509473] RBP: 00007f909b8a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 544.516779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.524040] R13: 00007ffec48abe1f R14: 00007f909b8a5300 R15: 0000000000022000 [ 544.557699] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2a, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:46 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000540)='./file1\x00', r0, &(0x7f0000000b00)='./file0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) r2 = dup(r1) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x1402, 0x2, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x41) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18, 0x9, &(0x7f00000008c0)=[{&(0x7f0000000340)="e74a5b01a0b882255af699142662ff83b8eb855b6e9d5eb46d655a4cc205d3080f1ef2c0e373b99dd44a18712d144f9bf08b6908a5d03435b812de43ae45059eafb52135827c2b2be724467c715e87d2adf105630c463fd64ab7c2911e19758c8b86d6c119fc81f6fb7688aeed0d82c8492dd567899ea370e23bcac0c3d482f6f7f233b3b55a51df64bd6e2f67010b538ed3954e0b2207c75ea49248e2bcad2559", 0xa1, 0x8}, {&(0x7f0000000400)="31c6862660884d74ed65c16839b350ab711935d1bb9641cc9fa17376743728300fd14997a5331c494e4ee31cba14bffa751469410d0c972d1d9294d02eaebd222abfdea7ce47b330fbd0195b4603e81236ba6de31718ba0aa4b990f5dda39ef069529eb61760da58208c7055668fb23f8605121fa8ef1bf91dfaf5fde95455cd032c14b2f47d09c6b8cd1c", 0x8b, 0xaf32}, {&(0x7f0000000500)="bf2b", 0x2, 0x10001}, {&(0x7f0000000540), 0x0, 0x8}, {&(0x7f0000000580)="3cf75039c7b8b61ce5560f92be41a3873add0968834b09461d8ea3cb4d10e2ec989bbcd566318b47766f9aeb0ae0b6eb88042f5643abcb20e2e5d89a66aaeec9b23193fda306e5ebdd354bab48dbffde883ba3249c36b0e29349ba86b44611d274afb848c7e5", 0x66, 0xbe}, {&(0x7f0000000600)="099b45890becff7959793a9442ef87e9bd894b5065a9deaddf914c026130d5b90f804951dac2ccd0888691639b1b2bc7546369dc044ecd7e617904874e959685fd37bad9", 0x44, 0x2}, {&(0x7f0000000680)="de9bc7c38595d356181f57c940e48dd99165c653be52f9fdc80f4ac0f17784f7e9104eebc6b64f41ff7e358711750ed336ff84b67ac1c52b25ae7f202642d6c483490155665735caa82e9f2d9b43c2637ebfcf67f7f9b197f8f1f14add11137e6b36f5bdc45c73bf397806e2ff77ac78db65d02118f10b8a5b9f4920cf5f918fe0c7005a7ca676f10cd42678e18432c02987e06c489e7ed3661679cf31cd1024b2bd0ad0aeacd08d9fb06bdc0cfb9a56dad99f2ad39d584a71d24448dbfdf3ad118efe898b8e3671ad12aa8f6f5c9443fa5717717de1afbcfe05bffbbd119cff7b69633c2948e316975cfcca942e2d19", 0xf0, 0x7fffffff}, {&(0x7f0000000780)="f01e9059af28002ae7d7e20b7263f822135e3e6c111fbbc29a310890253747cd8d5680fa4fb5d7703698e39d0ca1dc1a822409bb668cee39f71ce619e449e3112d2df3a93c35ec7b054638e67592de876bb168325cfc44a79b61bc5f0a10c5bf86d23d1e0496611a961faac0178522ed5e80a4896416259e132510b7e25768bd23cd5baf03a3c02ad0e3dae7d1bf271883d21fd4f8d16080d6c9c085a7d967960d75b0f40f5a5393efdcf2d38495ce0c2dce2feb172320b671feae57e88adaf623fb75222a893d2128e982176b381420d703cf8f526c8d991c6fb474139265c8f0be75af", 0xe4, 0x10001}, {&(0x7f0000000880)="1242b9a10ca4e69b47e8abc444631bb283863b3492acad2877e89f8e8c699bc5d1bbc9acd5200d7d12c9f232aa1ceba7", 0x30, 0x4}], 0x10000, &(0x7f00000009c0)={[{}, {@bs={'bs', 0x3d, 0xfffffffffffffff7}}], [{@hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@obj_user={'obj_user', 0x3d, '$'}}, {@fsmagic={'fsmagic', 0x3d, 0x184}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x39, 0x65, 0x33, 0x37, 0x63, 0x31, 0x39], 0x2d, [0x66, 0x63, 0x66, 0x57], 0x2d, [0x66, 0x64, 0x37, 0x56], 0x2d, [0x35, 0x34, 0x32, 0x62], 0x2d, [0x65, 0x66, 0x62, 0x61, 0x63, 0x63, 0x39, 0x62]}}}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_gt={'euid>', r3}}, {@seclabel}]}) renameat2(r1, &(0x7f0000000280)='./bus\x00', r4, &(0x7f0000000ac0)='./file0\x00', 0x5) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x20c) 03:20:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee6513e40c74aec2b5545a79348075aa7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff070000000000000300000000000000080000000000000000008000000000000200000000000000010001000000f778ba548dfd80ad0b85d14c87c000000800000000000000"]}, @subvolid=0x4a}) 03:20:46 executing program 2 (fault-call:5 fault-nth:8): r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:46 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:46 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:46 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x100000000, 0xffffffffffffffa6) r1 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') [ 546.657306] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:46 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xae, 0x7}, 0x0, 0xfffffffffffff7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x244e00, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2b, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 546.707006] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:46 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 546.889028] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:46 executing program 3: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8854) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RGETLOCK(r2, &(0x7f00000003c0)=ANY=[], 0x27) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) r6 = dup2(r4, r5) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000080)) write$nbd(r2, 0x0, 0x0) r7 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r6}, r8, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2c, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 547.055703] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 547.161186] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:49 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:49 executing program 5: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000200)=""/30}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c0080, 0x0) r1 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000240)={0x8, 'veth0_vlan\x00', {'veth0_to_bridge\x00'}, 0x401}) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') 03:20:49 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 03:20:49 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) umount2(&(0x7f0000000040)='./bus\x00', 0x6) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x4000, 0x144) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2d, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000f0000020da9c39e19db3757cb2048ea0a32f6580ae3ec18699196049051a8379c713883780d069ae0b0b249d55f0192aeba9e682723b62c9eef78b9cbf908d18e944dee022cfb2f4b47db5dd0f50c0513ddfe8173e0eabeec96fe4a10913c23b9e2bac17ee68d44b408bea3e68204d3b91e50e71744b2cd34ca48d01b51e24f5e097a965cb18b6358d14d459ae09afe6ab"]}, @subvolid=0x4a}) 03:20:49 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0xfffffffffffffd69, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:49 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) readlinkat(r0, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f00000001c0)=""/69, 0x45) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) symlinkat(&(0x7f0000000380)='./bus\x00', r1, &(0x7f0000000340)='./bus\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x4a842, 0x0) mknodat$loop(r2, &(0x7f0000000280)='./bus\x00', 0x200, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r2, &(0x7f0000000300)='./file0\x00') [ 549.717718] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 549.733522] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:49 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x3008084, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000004,allow_other,default_permissions,max_read=0x0000000000000000,allow_other,blksize=0x0000000000001600,blksize=0x0000000000000400,pcr=00000000000000000024,smackfsdef=v7\x00,uid<', @ANYRESDEC=r2, @ANYBLOB="2c6f626a5f747365723d27bb5c5b2a2c2c00"]) r3 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) statfs(&(0x7f0000000040)='./bus\x00', &(0x7f0000000500)=""/4096) symlinkat(&(0x7f00000004c0)='./file0\x00', r3, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') 03:20:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2e, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 550.051935] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:52 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:52 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 03:20:52 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:52 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = getegid() r2 = getuid() r3 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, r2, r3}, 0xc) setresgid(r1, 0x0, r3) syz_mount_image$hfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x5, 0x2, &(0x7f00000025c0)=[{&(0x7f00000026c0)="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", 0x192, 0x534d}, {&(0x7f0000002540)="721ab494ffc48fae16d6562cf8a352611b7161989334db33c0f288", 0x1b, 0x7}], 0x80000, &(0x7f0000002600)={[{@gid={'gid', 0x3d, r1}}, {@dir_umask={'dir_umask', 0x3d, 0xdc}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@part={'part', 0x3d, 0x1}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}) getdents64(r0, &(0x7f00000001c0)=""/87, 0x57) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) read$FUSE(r4, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x900800, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'v7\x00'}}]}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r4, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:20:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5aa36e777cb37d62, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x2f, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:52 executing program 4: gettid() clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:20:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x200480c1) r3 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100000, 0x2) symlinkat(&(0x7f00000004c0)='./file0\x00', r3, &(0x7f0000000180)='./bus\x00') 03:20:52 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000040)='./file0\x00') 03:20:52 executing program 4: gettid() clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 552.874489] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 552.899722] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 552.902343] ptrace attach of "/root/syz-executor.4"[20669] was attempted by "/root/syz-executor.4"[20670] 03:20:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x30, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff49, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0xf5bc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 553.016817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 553.079537] ptrace attach of "/root/syz-executor.4"[20684] was attempted by "/root/syz-executor.4"[20686] [ 553.090968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 553.173395] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 553.195193] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:55 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:55 executing program 4: gettid() clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:20:55 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000180)='./bus\x00') 03:20:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8001, 0xc9b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0xffffffdb, 0xd94bda63, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x31, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:55 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)=""/38) 03:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 555.738026] ptrace attach of "/root/syz-executor.4"[20722] was attempted by "/root/syz-executor.4"[20723] [ 555.772807] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 555.892940] ptrace attach of "/root/syz-executor.4"[20733] was attempted by "/root/syz-executor.4"[20735] 03:20:55 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x27) 03:20:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x32, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x100000000}) 03:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 555.942347] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 556.122687] ptrace attach of "/root/syz-executor.4"[20749] was attempted by "/root/syz-executor.4"[20752] 03:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 556.279682] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 556.311477] ptrace attach of "/root/syz-executor.4"[20764] was attempted by "/root/syz-executor.4"[20765] 03:20:58 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:58 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x4, 0x4, &(0x7f0000000500)=[{&(0x7f0000000200)="0bc5d20a45abbeae8c8997ad048144c78a100db64b86d209ddcdf994d1c596ac422028307212c696f8ebaebabde5d2c7a4b3f763e5ea5dc86e1584c2966239e16e7728a3", 0x44, 0x8}, {&(0x7f0000000280)="822b84c2a6ae3ac59273ede0adde0a1ba21f83de86740f49c2cc0858df717fe77eb88707fccc1d5fbc2a4b11774ed9ec4f41b452c4d04788330d9fc8580d7a4a6df8836db813da3bdc09d212d872970f3c1558067ed36aa0fec6d4b80607c797639097c8c10f0e93", 0x68, 0x1f}, {&(0x7f0000000300)="d005c39e6d35fc6379dadbefb8d7dc84e92a7c0de94502d454b1369ecd8a36a1fc7a19499d5c7d6025e763d84c044dec733cfcc32d25f719ff50f3ab7f3fccfb7934d1b915f130901b0a44e3205bc6860c21da49c40e161a5f2b0c5f667319f638865ed51096aaeadae19173db8ce3c0f91cfbbc2afa65c8c357ad7ebd685fb0fdc42eb259e0aa7ece2f4327ec82c6d18418fc812cc558f24eb3d99fb38d39b14cb60e9aaf8fca0d1ba26883a1f3b6f7e11b1eddb2ccbbaeaf44f9027b522b203c7eac4982511b33e4bae92ccd43324b52f292", 0xd3, 0x3}, {&(0x7f0000000400)="8243beec4de10b433aafe42221bb73c433e350c9223429f54c1f8ad08e2c9c83d9e940b3564f83e203b393ad84e0217da50e38bbb749dfee8033ad6e09b461dff4c7e6e4a8c93596527cc73ba83274d18da9c1d966a5834bb5fcbcc6122062844a5f3b41a096a9f39dde6a113ce51cfab09f7b2291f575fd7801d3b3b16ca0dfa580255fc44e9d0b09217a25b828ca5d984a18e4c5945d45f751dfac680475c56e0eeca16ab0f5bdad8b695804a9ea43a05dc2051ec1e5c3db28", 0xba, 0x6}], 0x10008, &(0x7f0000000640)={[{@treelog}, {@fragment_all}, {@noflushoncommit}, {@compress_force}], [{@euid_gt={'euid>', 0xee00}}, {@euid_gt={'euid>', r2}}, {@fowner_gt={'fowner>', 0xee00}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, '.$\\\\!\'\x8c-$){)!'}}]}) 03:20:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x33, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(0xffffffffffffffff) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) r7 = dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) r8 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:58 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:20:58 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x10e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 558.876265] ptrace attach of "/root/syz-executor.4"[20788] was attempted by "/root/syz-executor.4"[20790] [ 558.902783] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:20:58 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:20:58 executing program 5: syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) symlinkat(&(0x7f0000001780)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x3, 0x8, &(0x7f0000001640)=[{&(0x7f0000000200)="a5e6fdec97544fd0352fe96d11333577f17cb892ad23590f06ec4686d5aa925f4a3c6ba9ab88a912da32dadaa5bdf0c43fc069964f5546432dd722d774c06a17bce63e201e428530bf6f43295a494e44284a5b", 0x53}, {&(0x7f0000000280)="42c6c681f37a0ebe99f3aff0df46305aab10de9467948a637570cd19d7ff3ad1c8b380399972985ed6c1c2ea9227a8ce7c0677801ea45419e2105f942aaa6b63e46e7076b3bb270bd48f105df3008fd0d5c749ca751e12ccf417538b395d5fc6ee08ee4a563fa994d3a35ab44f0c1b00b81f3cdbc62c1d819ceef61bbdd753dfdf31b28c402a7e9f90c895c5321ee7301a9639b5af014823c999dbf54b69", 0x9e, 0x7f}, {&(0x7f0000000340)="a0729d07960ab385866045e454efff49e6159ef127fdaef6fb073f25d6a96aaa8f97d1aa6ffb1c80a84d0d6f1ac7ed5659dd9621780d627934a112fc5a40d716ff5b71f8238bc289c4fde0dfe53db50e3fd2ba575c79f854d43bd08b2848956bd2bccdec961d888a56b23992d628c48f57e02544d7893449715bd5980b80481ea57b83cbae022964d8cdee305b99", 0x8e, 0x100}, {&(0x7f0000000500)="c6baec9f5445822430039e1c34a3f2e3306d37d88483403b834515762ab2d2c3ce7cde0cabf1fb10ab4b6ec0aea59afe70c7f9098098f022fbdc4a1e837772fa750cd25f929c3112d59d59c69d2f2f9133bdd8162a3ee282fdea618f92b1b0143216bcfd4b4ffa14b11e1221e1f17a9c42cdddff7c6b88fbb784ef5bded83c71936185779026b3ad337985de437015de7b633d8f38021af0bd2d1b310080a62b5c26bfcd72e9118524ff4f27f2fd5bf24e574f6623eb933b3ffc86d80e837a92063046950fef38e29c0b2c6a0ea72daf273d414c03c0a03a12236569f046", 0xde, 0x205}, {&(0x7f0000000400)="00fb008caeeeea6366234c009289d0bf08883bcad811f2300187b042af9b735673977525ae448ad64d0ae346e9a389aa6f8b9d8c5ead3135817233fd5978fe4ffa1c38c56709f9021d7a8dbda11285857320bc3cd985a5d5d0387a7a43190b8980d29e0c09159e1bc8f11349dfb040852cb7", 0x72, 0x81}, {&(0x7f0000000480)="498ddef9098ed17971ed85b240e508de06c8c16e0ce1a63665ac1b4fda6231d5cb49d3ab328f8a2749102d", 0x2b, 0x30}, {&(0x7f0000000600)="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", 0x1000, 0xffffffff80000001}, {&(0x7f0000001600)="07bc7d0bb1b42721beab57d12b048696eda00cdf687bb46497b79ac8", 0x1c, 0x10001}], 0x805496, &(0x7f0000001700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x30, 0x6b, 0x35, 0xd, 0x78, 0x70, 0x35]}}], [{@audit}, {@uid_lt={'uid<', 0xee01}}, {@audit}, {@hash}, {@hash}]}) 03:20:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x34, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 559.027386] ptrace attach of "/root/syz-executor.4"[20800] was attempted by "/root/syz-executor.4"[20801] 03:20:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:58 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 559.212112] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 559.241112] ptrace attach of "/root/syz-executor.4"[20815] was attempted by "/root/syz-executor.4"[20818] 03:20:59 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x35, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:20:59 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:20:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x36, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:20:59 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) r2 = accept4$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2711}, 0x10, 0x80000) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) fremovexattr(r3, &(0x7f0000000700)=@known='trusted.overlay.impure\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xfffffeb1, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000e5d4daf71ba63194cc6c8e6c0917983e4a4d9d16e0fe4088a62420a838b2cb459520a57cbfb2f1dbef91ba031fa3000000bde9a0d577566b3c355059377e7c878a91da1fd96f58fbe0", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf25180000000a001a0008021100000000000a00060008021100000000000a001a0008021100000100000a001a000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c190) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f00000003c0)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000", @ANYRES16=r0, @ANYBLOB="02002cbd7000fbdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000850) syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0xfe57, 0x401}], 0x208c010, &(0x7f0000000180)=ANY=[]) 03:21:01 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x10e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x37, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @unused=[0xffff, 0x1, 0x0, 0x7e88], @devid}) 03:21:01 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x208c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:21:01 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16]}, @devid}) syz_genetlink_get_family_id$team(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000044480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000044680)={{0x0, 0x80000001, 0xfffffffffffffff8, 0xee6, 0xa, 0x6, 0x6, 0x0, 0x5, 0xd5, 0x26a7e9e6, 0x3, 0x100, 0x81, 0xff}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000012c0)=ANY=[@ANYRES64=r9, @ANYBLOB="0e23710823fe1634b123d9eec55630dfa3891828b26679229b5393beed349464aa8bf3ba77ed2449257777863ce0a7b5c757b34d049c1104578d6bfa1ac8dc2b86027067bfb3bc86c4280e0000aac00e6872c3eaa6f0fd92428eb723926b07a42457ebabec7c5170baec909bffe27687d7c3e2985534c3904fbfeefe12164fce0ef7d3e2163afae7b4119460ccf25ca7f03b455cfdd6eaa5b6591687efa5cb9b10422efd6fae8698dd0dc0113254ae286396f42b1045d83c9ab9f7bab15e37f84725712db265fdebbbe28b36dfddfd83015d944c10fbc8f667e36767e56f49e4d04ac8913909a7ff1db083a7cba7e586acea976576639d7309f821950b2f0a8909a2a7202b91e71fc0aed1ef2a056620017074f7c73c53d822269d8c389833bbcb7ae143328f69460d662c1bc4c5f83dbd18106765e316d4730b2ada96ee3ab222bef88202f7f1640bcd55baa1ad442b46f4cca9ba59b797d4146058bac3e46b4ecc2ad3cc7823de15d1b8b0809b6d846057e44345516ab3ab6ee91b1c2a01257e1e03f133aa559c2be3af947cca9341fab44084df8a323339d0c9d6dca5c8c8fc2b1e2e53302cf407955ada57f9baa640dc4a665f085ed48266960e6b59f982593a5dfe5e4e76931dd0ecfc5ba484e8c59cd80b1c16adf65cde75ad507a79adea6ec1f17c96003a0b2f517d0a548b5d035cf1b5aa782c12253a614243b5af005009db044980c6864f227f511b6d2a932951c39eca7773bc47677e8f0fe53c37191c5d3a9f83b175518efc52d2ea4868bc78851a1bd65df0438900abb12ad7342e2180138146dfbea373e3522db919a53eca28fb8a7938561dda81e3cbc9fcbf02ec9ba93f316926ce626a013845b23fd2285c009a5723d21f4e27ddb1f63a7768843bf2c7fc231741f5c74ac4f61d65a8a4b8354cac457c25c3b582bdc1e8d168219b28c962d11c193da5ffd3579135c9590a2dd9f28ca3c4a57df40d5b790b9621d713d305c2178bd86ddc6d31ef5a3e413315f14d1ad379c7a708d5ae1db90b3124179476952dd7ec7b220bf9fb3d6badc2cb7137457c060000000000000000bb46005fba55125860d38d633661ecaef2b313f6b8cddc914dab56de92bf5cb2c9a7f78f65f8906350d00001a5274f2e5c1e54628b80981cb9dbfce5099c59917d982feb362b1de05daba64441949d94ce6179793bf15301ab5cd36c8a5b2692303d4156ab86d33adbd74fa44690145ffa5dce294204e421927e2249913734830d10a6584d8adef19623f8520c070312ec9d6ffa1383ff6c57"]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r9}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044740)={0x100000001, [{}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6}, {r9}], 0x9, "e8f36b694c24af"}) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') [ 561.941743] device lo entered promiscuous mode 03:21:01 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x10e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000016c0)={0x200, 0x4}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:21:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:01 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x517d, 0x84400) r1 = syz_mount_image$pvfs2(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x616, 0x5, &(0x7f0000000580)=[{&(0x7f0000000240)="d5e15c245e51c180e969db14061a4d3a2e591379d040fb597f32fdf9d6299c4d5e9b55d5f194280fa8a723dc7957eaab98a191f343d85f363f6dd1690f55e550c19dcdac7f9111676f54b4f9189097d747", 0x51, 0xc79}, {&(0x7f00000002c0), 0x0, 0x9}, {&(0x7f0000000300)="d70faf4bfa237287192345290294ec63b6084b8d5fd1e619aa53707a8ae81a5e6f6c4cab0da13ec67e4339e3d39f236128e8409766895faa20842563248e1e0283f995f60fb79b0379b55b5ab6b9975a2cfc202e34decb2cf654c1591bcbc7ed69b36d0166eaffeeec9e37209332c30203430e1b7b139f6a12504b3524e8bec3dc02031cc4d048c82def60ee9a06338dc814d8e5324c04ae7cd11356bc3d", 0x9e, 0x3}, {&(0x7f00000003c0)="bb0f1e77d85cb1feb1a6d552f0acb559d9b645d827a3d891f0e298b4a4eea3d78372342f08596fffc3604df0e3b5b9018d7baf7b81b5002b4e7bfdb0651425bf693640ae33b1c3dcb974ff1ccdcc07dd3a24259c582c6499ef9cb649be59e352d2219d4ace5e5851b4b644918fd26e03d901f612735fa337bbf8a8d3078ec0bba02697de307572aa4814dc0f41f6aa89870edc01b3b1cd18e816d110794ddda1b912e2729528332ba8c0b48424df0fefb56d242113b7ebf8427d7f9e8787795eff16acdf27812eacd9a07cdec99e799f632f", 0xd2, 0x40}, {&(0x7f0000000500)="bfbe943922eeeacbf7d73e527140a86112fab38fed2643602b97452e9f7afb7b345ca510d94c162436415aa056fd9ab0bc74de950c6809dcf01081cdb8bbdfff4e99a76088f479e15999f6ee918d8bef5e3a5ed086fe07e643e6b928c3d0a22464689acc0ba14cabd658557ac4d9e72072bfdbde54facc3b4ae94e", 0x7b, 0x6}], 0x10, &(0x7f0000000600)={[{'+!^%'}, {'v7\x00'}, {}, {'v7\x00'}, {'v7\x00'}], [{@smackfsdef={'smackfsdef', 0x3d, ':o%'}}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0x31}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000680)={0x6, 0x1, 0x4, 0x0, 0x0, [{{}, 0x8}, {{r1}, 0x5}, {{}, 0xc0}, {{}, 0xaa8}]}) r2 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r1, 0x9, 0x1, 0x2}) write$UHID_INPUT(r3, &(0x7f0000000740)={0x8, {"4418c0ff50a20c16c73810e92b74ab1bde2aad911d84dc98e47100630056fbc382980a4f1d3a62e08f422b5ba8f1c247882abd1586f1fce736d52777548ad9eea5790c79f89b756c1deb03632a76457f0c56f57a273115ff7cbee3435cb42374285e8c31a5ce1ad6505068f2615722a1cfc734d5a4d5542ef75d6a383c4ecd18104fc87ce9ae12b70324d9e7a188ae9a63184314a79a4cb43f9267890a23e826a78def61cf8f3857758bb7ba752d9135d5b90023cde26a6f1839f96eeadfb86f925a785f256a895ab6d6fd5101d1262e366920c358f8f17fa947328e28a831973e04d86020f5e578b25b58c2add113414fd3b7e29ae38fe74f7cd92797a273b334584ffaa70a7476788d793b15aad08771dbf7f075c34c542ba34852dfd5fe3329ba2b6042eb9cc5aeb5817ab1ddf8b5d6640a9f7851660aa144c7503ab7e177b5ac4cd0cd71ea3f65b573aeffcde8d904515833fa26484f0c9ac9cd02a315a9ae593b96841ff224d8f77ea2d896d7115ef356646ff73f5a7eb26362a5f14449e530f2cc1bd274ce297292c7de4d271a2e35860ad68a051051b3e14dc6379416a33f095495745308943ee101316bacdc9f88e68857bd20c5e365eaf11945b4903dbcfce6ddf5a63a113c9e6209b7eb5abc3d30d1b49f2f6342d649bc2ddf2521fa72b40a115b91af9441a4a01d759978ae77308f078789d87bc8e2e37c5f34981169462b4d469a7bf1dab2fedf78b81eaf12c7b959b2454dc3637925a3dbaafafa01822b063bf8946aecffeaa53cefdd6f31afbcaccc0041d4b2096f3b200b2e23e9a095deabea9f523a09fbc014eb43b43cf4b30d88f2cfe4983d5dc3e7182cf1c451a9d5073d0f881d84f442aebef3d35bea591b61b7d695d85b7ef8d35959aa6943749fd1d8cf9daa0d0b546838cc73a24678be18b9aba351eae651b73bcc943bae7ea54cf723fb55170bc40bb6a06c99ba3085ab74cfc677823eb554dfd53b2cba8b57729470164b574b493be784577191a0bc31249d987c75dab0d7d0fca984b91a7fc75632881bbeeb44db79893a3e865ba55e0fd042fccbafc3069b40059dd8001e3fdffe64338357110d950a51118c140db7b5b2b5eb499ddd98e84b782772ec23e30cfc24c1b57bf7c90ae0631ac4da23f8bba1dc9c7a2793d6d42de14892cfb29145b39c2d74b7404e625b02dbcc3a786d933a1c2b62a09d33c71f9b04379bbd81fe6a5d5ed45307946f8908e8b5c66c225b68b2d16f63ca40e1e8aefebc2d44b726668c17530c5cf0892fbeb509bbc505dc7a1464fb48c335dfed79c07314eaa8571f611700eab43a90401eec6ea9a5ed9c04bdc52219afd9b565faa8303e5078d04dc644195bd48d663ec892902a8397cd122279aefc3d8d84ccb4493dad7230004e102a435328d8f2ff31308f90a585d7a7e669688422d9f11dc943921cd0f866a40f23fdfc1a6fe23bc9ec2630be3e05c2644e259c9dc59ed2c64df86a09b4f2c7ee534d5354c8f2a488a9f8268c53464fd36d7de25a1deb04521825d636b5a74fe3813c989c2c4f83a511d799573b6ac07b7f10f11774e674c44906198012e98415ce2941195652773262bd904e03cec1ced783772eb28e698a8b14bc0264b7c554b2bb14a0b91d51195dbb69fa45f8fb1895868e2d671fac195e4ae766b0a52eb41e60bb5cae78942a6e73819cdc783cb89e75c3d1cc6782056f9644b0e2fc242141ba64c76dcd88c1e5014b9f084e662622c2122f2ee611a70c062ffc5b676abd30850265765af86ffac1fbc62cdba49ffb11950a63a4863adfaf34dd9ca8d2fcfe752d90d97a5eb6837418c745c82d1c9261b351f9441e6784787da252af1c0dbb9a6ed88449f54458eeb49b2e528a44642efe2b25c49c2942c478ede285ce6a9158c2bdd4a62543d874ca354685ea4cae30009e386d55207d11f6d9363acef4ffd721ffac7f3785515d14d136c59e705f6c07da01a1cb9ea44fe1735b00f38283527b413892f2844f6538b5bd059462cfda4eeb74e6ff9aab2d6efa3ff895288d4dc6dd8fc22187e598c355f9eac25a16bffdef24ce1499610931039a47d59a8cf17d5841566f6bba3602670b4aaff690a584a5a9567b877e134602c66fda7e792e1f03b85da4c6b0c7cb35d9d57ccfb87848384564d4b8e30eaca41e4b3dbc9fe5c5cf9ba3c273a989542279a066981f172406453e7406e6c2c59098928e7135ed3540b7370db0f7aefb146f65d295bbb8d7fc5d51fe3e820660e59c7c62b487b756d61d24f6cdb8d369fec58a6c37d3167a9baef17069d6f445c39cea940d49ab4a708173374146adcf34dff89e1d199c74e79d7f45857ebb67c8c3feb4f1bdb2c0d0cca5297497cbdc34b9aad3600065ad982d3de50ba9269ced5d0de8159e68777b3af88b10724584a965007415397f643bc303876a8eff19d63f7e00908458d854419b017656f15834d25b15ac1e04202fe7aae1fb7f7738671fd19f62b1a5453dc3fb6fd943e70d8bfbc1887004085b862265770211982e7cda08899a3073d5f7b1d98e422b65aa881c5a03db3163b792371ea83209ee3a371f9ec1a85283df92d4cd005a073162cddfffb8b134481c6427c8df19b627ab567bda22021abe1d4e5655c0f9007ecd8dc1401c5dc51dc2ba7ba35ed67cedb006a697876aad00a653160ca8f3ddeebc8a8bc906266efdfc44b49fdabbb9c45022e4fb065ab78775f93092c49e733357951a4e42181fbcdee59569ce6c3910b9beba871465b9c322813f5280bd7f745be273475997459f06afe98f180922681ebbe433f474ec5a7e11bbfb89d9c8a2d04f9cdeee5ffd8b32daf50d3aa6c63864b335c5de98ff994658c1d92e3161b82cf66db3336e3c0090ba24c2961b06b1e24c8491ea16bdcbe5eb4944ed5c9bd4ee28669c62a05a2d63fac6c572ef4c5d6845d0f2f590cdaebcf8e8a78963680b564681cf95524dd62989e84f557e6d4e34283db97d31df534bd5c2cb8f90e1825c842cf7aada7b63f762b22b0da408ac22ebd9fefcbb438bec5e5d3e17085fd10f2aa70d30a682d107eb928a138eb6a27f541c1a3b3c14a43db47cc250d26ab4d8bf87b690c1128f84d24a2fd046a4d418f3127d03c9d07692fb0a8b36873fa30e7e4927bfe77b335fd173afbb56b2c437f8cc0754a342900f882221d15fb7f29dfdb482510d1061411b90018107952f6a944d50d0ac12bd5cff801f82d171a26c1d5d0825dffeac317396a7e4d857fda5890456c9d2d6b37ccbb2b0d308608a5a474df9a623952107a8eed1af7b5bb4ab2da6672de6f83382a595c73cc9e0a4923aa1e59f1395eddea3a2caa209dba1737517203146f79314ec85582898667ada30eac52981393bda6e3b39cea0290ffe378cb692da4e515ba83c406d3909b2353f46ddd92d1ffa1d247c067020f699082ec969b5822a6164dbb992e51bc018705e53d5cb6f843109657d5bdc07f9150b549aa9b8ab8030ddda270b28d0c57162da332edbc9e692300e9f6861b374efa9b516d0916ce8218775dd1ba399456e4fc3c1d22ec3a13fd5c428fcdc8b23071481f8badc0895865b72ae559ff43becc585e28f69f068f0a3f1684f8bbbe22b6127a5726ddea3202d70c61664644cb3df18d15eed0e71dd63655acbb9f5717f463f7b416d937d1332c2a477aa771d2c03470c95c62a722a0d78b2cf6d02014557c7ff7f7e9eacdb469f7cd1fb03c10898e0294b8f6e47874d38af1b742f4949c75ec1d5dbe74d1f2624b328966975173765d4ee56ec08b14b216eaf2fba9671f805323b6ea7dcdbf206cb056ad92c4ce08afe5ebb035853eb4c2b0e115269f441ad18d007abc3cf07cb300cebbd8a559a384c4484340f77938f0635b0307de85d3cd82fea1e54d3f08e4cb670c185831a50c34677143eef0d1a00f0aa593cc5c36cddfc0e4368dff3518678ce4740fcc79c37897cef981958a6a17f9c44c954e0d703e5593966fbecae7c9fd6ca5ef0a9ab4e6559e81202f1a120826d172984acab202502309f816585862c2a71e80e7cfac1cc4f7ef5bf2fc3c3257f3fa787c05197dc41d9e8ce298e9734a1dfa56e63b5cf245f7c4ade4fdc4661aa530066929c36f21d6621c35200e88224d4baa490145868f8700854c814f562a3f21d2045decd02d44e1f8a57e0e9aa79105e28ac99ead14e0394ba7e95d06e0f467a9fc2f7ab2fa5b2966c4070a554a778cd43242b73415241e69e3e4204ffad14cc888d26eede1fd3856a20cfd0746ebae3b227a319b25d091972f86c95bdd7675b8db2e3b978c8a176a2cac6ade50b6a72ac231741a96c9374714471ac6380c75d4c506246f034fc1f76f47fb2ca4f61b62b2e1305deaf40cb960a8b16de534aba07a6c07bdfd2420a9977cfbdc31bb28678476d7e4fe9a36f74458d8163b74e79fc9074b49ed5e5045032dd18631aba2c6c0da3e101ccaaca8cbf92dd23ef830a079608273d03029d784f16f3abc5f707e07f63fa24018f438529adcba278955300e30c56c5fb76843b176c8ca0dac01e21675174932d47782d0209b056ad7b55b6f0ab18696ffbdfda5afb67cb71d04e1280eb423a9dec3ae4a5ef8c1983f0c194a1e6014f299f600dc2f16a9b68232c04ee611544cb2785d08c8e7fff2e052bdbb759de87593ae50c78c372009604b33b17b041757c21f461eff5d5be37755fb35a3be8485430637b3c757e98200a1df7849ca7ca244474b206fab562facd4913670643effd0414bb255742879fd8ced4586907f3f4103117b477c0671c587749e4256a8d92518363c6cc0650abf84a4099c8fe318e6efe5cf6d45cb5a7e30e0c4310893b3a32a6b63a3c32b4ee4e74b4b2e46e812616058f196f9860c2ee7cb38ca088fc54a111a80aafdaf61360a4d0faa5d8a544f136b3fedb920ce08248df72ff2db66d1515a2bb9a3e523553e9b86bbfd078e5b9d92fb7a15c121f7237e0aeb6dd60a0bfb08de48d71b0ee3d9452a9fa4ef9c031f42822b8540d8d854371e3bb63ea92ebb2dcb17538f8108c2ed774a22a2d8bedf464a14931814610a47532c2e0e627128d35d2944a7c3705b884dfce7d3b893bcea1bd41742baded93aa1e727bc69eaaaf9482d66e231cde7f71b681b8a1f916760c28ba141aeffa6681b812e2cf946ab2fbde615cccd28f049b6125ced72007c2c7d4732f861808449aa3dfb9332dade4f3dca89eac165e0f3c2049ef387b05c9b042511a85ffa9551a742ec440c330b07d5ed632b4134966c3200aef72a0c31556368c1391448c5d3545af43ae8a48416891173eacc60cee56825300fa6137a2d43599bd2ed5405a7fc193fdd47b83322845aa4d22092653b643a9dbdff0e344d93ab030ea46423e785fffbf4a70446c0b95af582fceaca6abc2584f90310b18b4e661cce67365421e838d0b9a286bc84f5f0914a3529423246175fd7dd362f732245eaecd6df99a5a6ae01da6daea49919328dcdc4fd9f2810c33b647ee237a3b2201d69d2948b936cb950911dbde22efd09bbaaa1fa3367d31f9885ef189cba1f1b420944132425fd7496e23078382ff3c520b50903500c8374aaade77a260eaee910b9979607177436438ec3c90c1ef0785d9ba5ecd7dae847b21b850f44764f51f3e4f0c8b924be98b9882c32326dc233ddcbe898ecdf6fd43e0d11c89a5383ceecce690d51932660c8e3b2d07eddd10674dac7c4af40c64301423ea81124c97de0a0f1185d9df57cca62f80018c4f8914a6434aeb12381d37a5043ba6f86be627bb39b1", 0x1000}}, 0x1006) symlinkat(&(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000180)='./bus\x00') 03:21:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x38, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:02 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x220bc0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x39, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3a, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 562.615384] Y­4`Ò˜: renamed from lo 03:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3b, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 562.869116] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 563.014506] orangefs_mount: mount request failed with -4 [ 563.930561] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.936167] ieee802154 phy1 wpan1: encryption failed: -22 03:21:04 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xba}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:04 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x2548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x81, 0x105000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x82e, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0xd, 0x604001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x4ec3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x5bb4c1, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @unused=[0x5, 0x5, 0xf75c0, 0x1], @name="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"}) 03:21:04 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/79, 0x4f}], 0x2, 0x8, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x9, 0x0, 0x0, 0x2804426, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x460c82, 0x2) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) fchown(r3, r5, 0xffffffffffffffff) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000280)={@default, @bcast, @default, 0x9, 0x0, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 03:21:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3c, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:04 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:21:04 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') truncate(&(0x7f0000000280)='./file1\x00', 0xfffffffffffffff7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000340)='./bus\x00', 0x98f4, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="6ff4481be36d0c53894193dde041db278174862adf2a3ddf255a6940b87bb61ec681825d298cf08055de497aab4314034a2245dba81aa2160316093e0d2d8d004f544b54e68d7c416e4c6c76a3bbe390eaffc81fa2cd4da56f95dee87ade3e8fb41268b1e3fce4099e50345321024bfc5fe2a768b8681d8dcd922fa5ec52f1fafe6b036258e497fadf6f312f9dbc020ee11125a26d8664c6bf6ceb42802f49c53c3feda5e1dae5e62d432070fe3ddfdb6a3c0c85274e5ba3542bc79660ba8094eeb0dfeb6b14ec741444b516569db442819b03e5bfb508e54c1ad380e9e45be1c1cd9bfef39061199fa9", 0xea, 0x1}, {&(0x7f0000000480)="6a19", 0x2, 0x1}], 0x80, &(0x7f0000000540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x25]}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@hash}]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8c400, 0x0) mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x100, 0x103) renameat2(r0, &(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000240)='./bus\x00', 0x6) [ 565.150038] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 565.168712] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:04 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000680)='./file0\x00') r2 = syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x2812008, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffff}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0xec7}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x21}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@euid_lt={'euid<', 0xee00}}, {@smackfstransmute}, {@uid_gt={'uid>', 0xee01}}, {@appraise}, {@uid_lt={'uid<', 0xee01}}]}}) symlinkat(&(0x7f0000000700)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x8, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') r3 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800, 0x3, &(0x7f0000000580)=[{&(0x7f0000000240)="32b48ce66c362ba4a1ef89cdb7f842af9da70232247d2338b792c2766ea25f4c711616305a564da8f8792b4afcb5d62b35fa0a7e6254ab4bccbefe246aa1dce6815d6f64c9c8c465ad72bf8ef9f151202f595dea88e1fe769297e4c6724925360c6aa9891c16b695b9bed283ff4388f17fb863d2fe6cb16109e603e8691e1cae0911072aa8efedd406e8dc9a297f33bee7ce69e79f1348c96af43d99adac9137c33b1e15c6397c215425913cdcef43ab059f2cb5f91c694f507b58135b2dad14d4456e2dc7ce2f598a", 0xc9, 0x4}, {&(0x7f00000003c0)="a50cd48fe70a4835424851268fb335c41604482962212f54d99b5ea5399f17777e883c50625cbeb68725b1402a915ac798dc87be1735af2a3275415fe3cee2ccaaf945223b798ba8757cd8607f17a7a2786de25e2f7404bc47bbed61474e30b7d0eaee60de1f7f74cfb846fd3d3f8e0d707c6725f0774e553ea5dae540be4c1e5d2c08b9cbb2feadd1a30bf71ff05f", 0x8f, 0x80000000}, {&(0x7f0000000500)="d894182c763c69b948a0731d20649ed8e3683e804f071db20338db923f7b3799732b8245f48c5b464238678abb76da296341cb55464c09394b4671129e3725472747bdb244a79103b387350edc3cd70922e937a51dbbc8fc8e72770b118288a07bd18ef681782abf6cf76b7094e19a47f3e8a4a0c118a6ee5a958c909e6c", 0x7e, 0x8af}], 0x88000a, &(0x7f0000000600)=ANY=[@ANYBLOB="687567653d6e657665722c687567b2a86164766973652c73697a653d36303633382c6d61736b3d5e4d41595f57524954452c646566636f6e746578743d73746166665f752c636f6e746578743d73746166665f752c00"]) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') unlinkat(r3, &(0x7f00000009c0)='./file0\x00', 0x0) [ 565.324481] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 565.349303] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:05 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x3}, 0x2305, 0x7, 0x200, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x720840, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x3, 0x1, 0x0, 0x45975bca, 'syz1\x00', 0x3}, 0x5, 0x400, 0x4, 0x0, 0x5, 0x8, 'syz0\x00', &(0x7f00000001c0)=['@@-\x00', '/dev/nvram\x00', '\x00', '/dev/nvram\x00', '\x00'], 0x1c, '\x00', [0x4, 0x2, 0x200, 0x5]}) r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x529604) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(r0) write$P9_RGETLOCK(r3, &(0x7f00000003c0)=ANY=[], 0x27) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r5, r6) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) write$nbd(r3, 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r1}, r7, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0110000000000800000000000000ee7a58978bad00000300008000000000019a55000000000006000000000004000900000000000010ff03000a00000000ff070000000b000003000000007fcd08a000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff0300"]}, @devid}) 03:21:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3d, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:05 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f00000001c0)=ANY=[@ANYBLOB="fe110387d2c2be354df0ab3348978521e69ec80ed1e63e3334cb40f08298e3e9183ef01bb0c2cfd5dbc71aa122eafe3c4aa7960220a30b417e7acb6a1a54f7c1d5e4ed9a48105fe981bbf80ab0c4b9b5dccd37014572"]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:21:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbcc25130000000c000600010000000100000008000300"/42, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="0c0006000300000003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40041) r4 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r5 = openat(0xffffffffffffffff, &(0x7f0000000480)='./bus/file0\x00', 0x2002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000040)=""/33, 0x21}, &(0x7f00000001c0), 0x40}, 0x20) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r4, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') [ 565.599066] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 565.633817] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:07 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xba}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x41c1, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x464080, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978b0000000000000000000008fc180d6db4dabf00010000000000000006000000000000000900000000000000ff03000000000000ff0700000000000003000000000000000800000000000000000080000000000002000000000000000100010000ee43000800000000000000ff03000000b539bbb4c5d6c2f926b026139699476e6dc300d48508adbee05893fb40239c792b4e3a"]}, @subvolid=0x4a}) 03:21:07 executing program 5: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x7f, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="2d9e6c2f13b3de7d2437905f07937f960db154eada6fa3648282855483920ff936bbfe8bdc1d0a3c8026f9429e54c2d73a41614cc6d8cd14e178", 0x3a, 0x101}], 0x1001000, &(0x7f0000000280)={[{@nodots}, {@nodots}, {@fat=@uid={'uid', 0x3d, r2}}, {@fat=@dos1xfloppy}, {@nodots}], [{@dont_hash}]}) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:21:07 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b04000000000000003cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x3e, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80010001}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb4000000}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fb2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}]}}]}, 0xd4}}, 0x20040001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000400)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000500)="fe7781901d376901f73311d0733a4e7f3e0ba33c254f37a4a3ed0c94de75215283de1c0fb7893b86260f8053e081601315e52c49d76fd33695e8775eaf07455e676d0da94e1487248f4003ef1a2bbfe2a0f0bd42d1019680f3c0348b9f493d1831bd68a2b872c227cc037df3d6002823cd525555f2121fa4c5b905cbde7fefdd7f82e00f0057a769dd48573d8619ed761d4159168e5c55b73475f6dcf3092e2a8c4b7a8d9ff42269846f0e9504a6b65a5721f3051322d324a5e026b954b8194a68ae29936118f9ad644addc8c2546f7e48f6e19ad62561508e4f4e5a7421de3419", 0xe1}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000440)="0b1d835f5b841cd740429dc391051dbcf8c4ed66888558a3402a5cfd6297cf6f08969357f6f3d4a1abe29396dd13ae65f7195c98ef3dbd68b0dfa31239f151387d07877625d4e155796da10d01179992dfe04d36a8c46a571b51f191eb776ff77fbcccb3402d11", 0x67}, {&(0x7f0000000700)="1d7e920338db9ffd02c66421c581985460566ae95a28032427b2a1181696292c59245a4d885002dcfb6deba3743f54e38ce3effb6a260c2a0ba299db4f4879037abfdabf8451598709b65405003a108749b7238d6063da106dca1dfbd3b8ae5aa165a961b7713e269178679ecaee1b30f530cb0bbd0ff03aa003783e64287962fe37c77ae9766f3827a623110c55f064c5c14b0391b794efc631704671df12cb26d759eeb364bcc351", 0xa9}, {&(0x7f00000007c0)="7825066bcee93e1fa511df62495c751e8aff5a9b817df167aaf2432c3c737daf478dbaf64a41c07074c75ea57ea776b80012d82e2899f3", 0x37}, {&(0x7f0000000800)="99cd95d7c47f480234ad8671b500b11f0b83099055b7ef981e1531dd232ecda284cfb40fef7ba232c9d01baf92f1f5282f1e376e61902e6889867b6fead170f799dd7c3e8e2ccdbc64ab9cd565ac9229fd48e45ff5a04486680219753614ce93762731a102c58c7c39da3595140c60dd95b38af62bdd", 0x76}, {&(0x7f0000000880)="ee70a1f414268393599fb56d7ad580d3c711b2c7aa2deec9bd059f0e30d15bf71f03e1e469dd61f4835327723f57548d531075e4a9003aea3c15cef856db34373a7ba9d39a567c951e09d1ebfd35e9e087b745bdc9955a0275f76523fa1490e979ce38eedb4cb8e5df5d94ea9c70c830400da77455b73e54304a82a152b0ced3f9613dd31f5efab147be87923dde561b6e2effbffc3bd3941d2df05be1", 0x9d}, {&(0x7f0000000940)="d2711877d2bdaae4f8e99215ae5a30c37a139374f39ed5391826ab02c41c4d145d67f8c24157ec418cb727ac1ff9de482c99b4613b0aedfe2154a2126f82472905b99dec", 0x44}, {&(0x7f00000009c0)="0a4b7e8c2460f760d75a9304eca50c4d4f42da71ce135a36255659c7994ce8ffda977aef18f15e37c7fd45da8b4e3c29a8ba0b41cd8311feac2deb6c0050fb30cac52af043826f263f8302f2dd4f90e98cff25ed02c187d0580813eb3569fa5ac2f3f269d4f990ecbc80f29f3633fd308d", 0x71}], 0x9, &(0x7f0000000b00)}, 0x80) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000340)='-\x00', 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000380), &(0x7f00000003c0)=0x10) r1 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') 03:21:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) [ 568.178634] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 568.322357] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 568.366815] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:08 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x41, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:08 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) faccessat(r2, &(0x7f00000002c0)='./bus\x00', 0x102) statx(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x100, &(0x7f00000001c0)) r3 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x0, 0x0, 0x0, r3}) r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/stat\x00') r5 = signalfd(r4, &(0x7f00000003c0)={[0x5]}, 0x8) symlinkat(&(0x7f00000004c0)='./file0\x00', r5, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:21:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r7}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:21:08 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfd, {0xb, 0x5, './bus/file0', './bus'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x20040880) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x4) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') [ 568.643633] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 568.667632] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:10 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xba}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:10 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3ebc, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000240)="e4f13145f74d36c723a97927469586db89f714287e4a9ea4bd9da4ee153d4c945b1da670f85fd54adc4eb08e0a8de9ae9a5ea4f823888b0f74ecf1cc30e4e350884d8b032b9600419e3dc002aa636e46126acbbeaf35d37ce0f2b7ba", 0x5c, 0x9a44}, {&(0x7f00000002c0)="efd707c47d1aaeed01472dab745a2670e0b6193310f5aac1566f1f3f125a692d4713413784b6e8ab4cf558741d5c1e8f064cb29e698cf50b0dc352a23ac95aec994f9e87eadb42b113cf6e99e3b1c085", 0x50, 0x1}, {&(0x7f00000003c0)="f04cdd10ec874a0c461ca88ee3d6cc9dffaccad851ded9e33e8c4baee7537da3e87087edb7577b85ab35802fa8c3acc3c5eeee0cf5695a5961a553a5cc0df7d5f3c8daf06f81aa4666374b1e033613aa9cf4acb0ea4f2a93baed350735ab65b5a436061979d26591ce5fb9969c6318ad0addb727e59c9d1750f2f77e4ee0ef1bb19e8c68ca01fe3071ea4eed55229ab1d11a3ce8599c664f0bcfe37983d1a572b0fea7b57caee1ba9d7e8b458f7b8391d09a7438694c4dc99320ddfe4f5c057c7b37eb2f4943ab164e325926103897f4328e1cbf7334e31bffa47c6b00f6d0632b8a36b8a785dd7222b2d7", 0xeb, 0x9}, {&(0x7f0000000500)="25efeecfb17d42a17b1d1bbbe0c975b0f16d3e796c705a71e26a467e57199ebf9b94390ffce112aa6bfbcc0ee8266fadbea128ec563bf9208cef6b6c845ea95e7af29357a405f4e2fc54a69bb89c972274803463986d979ea4694b094adf904db71ad5b271e32b665476e32ec286babe5ff65c7e4cbd09f2564cd22b6ea3a894efc7e6fd158e6523ec8e835161932371ef998d7431128047a14c6889de68ecf227ad973a963284dc2a971b294afd0eb60b6d2d50ea9c162e795ca1c9672b", 0xbe, 0x8}, {&(0x7f00000005c0)="805e5b1c2f33a5b9d0252bb71ba961ab22136f6f8d8c59eaee2a16958f286dcc3625c21e4af3401d7b45badba8c39fcbe45d9ee13d6dab5a3ea93df4017757bbb0ef02a58ff1a44a456cadd075798f63026c19a9409a3569cecbbcde9de2989fdd50108a167a3b28196f0ddedba793782a2926eba37f83f79372640632be840be54246d32b59f7628f6c6db11c2c5cb2919e4480843f82de6aaf66900d63e5241dccf26818c92ef43a2b6e5da3a21fbeb7ffd3f5384cb0ccc2328597b0d535628a4954a03d9f50ce56143082a61f6282c0c3e653945230152781127ee502e8cd93b8d4ed6e595f5ed130c6e3962f4181fc69cffb2dcd2ed4", 0xf8, 0x9}], 0x2, &(0x7f0000000740)={[{'v7\x00'}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'v7\x00'}}]}) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x103) mmap(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x1800003, 0x1010, r0, 0x95ce4000) mmap(&(0x7f00005c1000/0x2000)=nil, 0x2000, 0x1000006, 0x10, 0xffffffffffffffff, 0xb09a8000) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') renameat2(r1, &(0x7f0000000780)='./file0\x00', r2, &(0x7f00000007c0)='./bus\x00', 0x6) symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') 03:21:10 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200e098, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') 03:21:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x500, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000040000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:21:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x8, 0x100000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffa009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x8, @inherit={0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="0100000000e2070044e71bb94f40af21fb000000000000ee7a58978bad00000300008001000000010000000000000006000000000000000900000400000000ff03000000000000ff0700000000f900000000000000000004000000000000000000800000000000020000000000000001000100000000f7dfbcdf1a41bff793ff13000800000000000000ff0300"]}, @subvolid=0x4a}) 03:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x26bbc, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 571.343322] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:11 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x112}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:11 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x1a0) r4 = signalfd4(r2, &(0x7f0000000240)={[0x80000001]}, 0x8, 0x800) r5 = socket$inet(0x2, 0x0, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x40, 0x8, 0x4, 0x7, 0x1, 0x2, 0x1ff, 0x9}, &(0x7f00000001c0)=0x20) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) 03:21:11 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) 03:21:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c5, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp, 0x40850, 0x4000000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) r8 = dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r9 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r8}, r10, 0x10, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000800000000000000ee7a58978bad00000300008000000000010000000000000006000000000000000900000000000000ff03000000000000ff07000000000000030000000000000008000000000000000000800000000000020000000000000001000100000000000800000000000000ff03000000000000090000000000"]}, @subvolid=0x4a}) 03:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x34000, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 571.683214] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 571.824525] sysv_free_inode: inode 0,1,2 or nonexistent inode 03:21:14 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\r'}, @restrict, @int, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x10e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:21:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x200, 0x2, 0x1}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = dup(r0) write$P9_RGETLOCK(r4, &(0x7f00000003c0)=ANY=[], 0x27) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000080)) write$nbd(r4, 0x0, 0x0) r8 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4112, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{}, r9, 0x8, @inherit={0x88, &(0x7f0000000200)=ANY=[]}, @devid}) 03:21:14 executing program 5: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) r1 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x200c010, &(0x7f0000000200)=ANY=[@ANYBLOB="c99ad6937d3af6cd12c574e7a220264e8b37741d916c00cf02b12fd1f0dc2f3d41e3b5de98e884085ac3593214415ec29aca57dc06e1064785e7a99ca0a84ff1dbab3f0cd8a3fe75496dfb6e3904aaf3b18fdc151579829214d2ca9730759f8f235439e514d6c5a8080d45a4515f3b25b55f1224c67bef26fef485760daee6ec6b2a82f9c9a77f807d63ffe0accfa03428f89cba70e14771b967742adf42d4cc28217e90a3899f3b70fa61d70c3cd142fc7cdf4e71e58d0d919162319b1427cd0a6f93aa55516aecc459d78d0b27a882d35d3d447a64e82c840119749948588d7ccbc388580ff1b18d9528243420eddaf0334ca415346c1574", @ANYRES16=r0]) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="0acc4236b062c63659c4a0c70ec6d25d3dc3cdcd8f2fda29b482308caa9dc8413f8d9107f9e0fe4011e9d7ae220a628e006a4f4dbc28d6caf0d4f30303b34b9d52b8228500a33be6cddc09b938029a67ba223759c252b6ac36711b6d5b18cce05fda35e5fe456c201929f6c8d4deeac943006ae65b532ad19508eb1127ed8aeca8884e12f6309f3f7b394731979f02db5e03a9d97a8771a1d5684f88a76f9226bbb1ab65cb5730905f1750a90d6ec82b92f9d08e2e0e5461c89abe26a800c3e71f491d757914ec10b8290d475753d1cddbb9817672", 0xd5}, {&(0x7f0000000400)="b88f41b15a382a6d90173b95c6f15063ee1e81c4d0efa887e36529b83003c37095e374b768ce80e60edf4dc2da6c43d4de04c2dc2fdc524aa0a74759b0dfdd9d6e5cb0988b881999d61f8a22e87b69469a61dad53a6e092be1a84d1ea80bc8", 0x5f}], 0x2) symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000180)='./bus\x00') 03:21:14 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2004094, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') symlinkat(&(0x7f0000000340)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./bus\x00') 03:21:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x20fa4000, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 574.291260] VFS: could not find a valid V7 on loop5. [ 574.296692] VFS: could not find a valid V7 on loop2. 03:21:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0xffffff80, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 03:21:14 executing program 5: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff20efb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x200c010, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00') mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x102) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000200)='./bus\x00', 0x29) [ 574.435123] VFS: could not find a valid V7 on loop2. [ 574.495036] ------------[ cut here ]------------