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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r9}, {r8, r10}, {}, {}, {r9, r10}, {r9}, {r9}, {}, {0x0, r10}, {r8}, {}, {}, {}, {r9}, {}, {r9}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {}, {}, {r8, r10}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {r9, r10}, {}, {r8, r10}, {}, {r8, r10}, {}, {0x0, r10}, {r8}, {}, {}, {}, {r8, r10}, {}, {r9}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r8}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {r9}, {}, {}, {0x0, r10}, {}, {}, {}, {r8}, {}, {}, {}, {r9}, {}, {}, {r8}, {}, {r9}, {}, {0x0, r10}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {}, {r9}, {}, {0x0, r10}, {r9}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {}, {}, {r8}, {}, {}, {}, {}, {r9}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {}, {r8, r10}, {}, {}, {r9}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {r9, r10}, {}, {0x0, r10}, {r9}, {r8}, {r8}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {r8}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052580)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5}, {0x0, r10}], 0x5, "3222a22ae592ed"}) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r11, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r11, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:51:59 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x40000000, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:51:59 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:51:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e24, 0x2, @remote}}, {{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000400)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r6}], 0x6, "6034e538a11326"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001400)={0x0, r11, "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", "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"}) preadv(r4, &(0x7f0000000280), 0x2b, 0xda1, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e36a, 0x0) 10:51:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0x3f, 0x5a, 0xd5, 0x0, 0x4, 0x10a02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x8, 0x2, 0x7, 0x3, 0x7, 0x8, 0x0, 0x20, 0x0, 0xffffffffffffffff}, r2, 0x6, r3, 0xc) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2137.105231][ C1] sd 0:0:1:0: [sg0] tag#2783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2137.116031][ C1] sd 0:0:1:0: [sg0] tag#2783 CDB: opcode=0xe5 (vendor) [ 2137.122906][ C1] sd 0:0:1:0: [sg0] tag#2783 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2137.132896][ C1] sd 0:0:1:0: [sg0] tag#2783 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2137.142461][ C1] sd 0:0:1:0: [sg0] tag#2783 CDB[20]: ba 10:51:59 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0xfdfdffff, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:51:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x400, 0xa8, 0x9}, 0x18) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00') splice(r1, &(0x7f0000000040)=0x400, r3, &(0x7f00000000c0)=0x8b, 0xb1d, 0x8) 10:51:59 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 10:51:59 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2137.151783][T13705] netlink: 1288 bytes leftover after parsing attributes in process `syz-executor.1'. 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {0x0}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:51:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x550, &(0x7f00000003c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r1, 0x10000000) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0x6e, &(0x7f0000002480)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4091, 0xffb}, {&(0x7f0000002240)=""/159, 0x9f}, {&(0x7f0000002680)=""/75, 0x4b}, {&(0x7f0000002380)=""/206, 0xce}], 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008001c00000000a0e639eec0884b65000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}, 0x20) syz_io_uring_submit(0x0, r3, &(0x7f0000002640)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x96, &(0x7f0000002600)=[r1, r1, r0, r4], 0x4, 0x0, 0x1}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x284082, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) mmap(&(0x7f00004c5000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r5, 0xabbda000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {0x0}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:51:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x8, 0x2, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000080) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/111, 0x6f}], 0x5, 0x2, 0x5) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x7c) 10:51:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {0x0}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, 0xd9f, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/166, 0xa6}, {&(0x7f0000000140)}, {&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/179, 0xb3}], 0x4, 0x1, 0xe415) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r1, &(0x7f0000000400)="3d5f0cf8ad10e0f68f2c99453203098716957e11143de3277ff9fc9f51d07b8b31ce5e0028413f875787d66095b0f89ea2620da24a4479449a8e61e84e29fc9b37a49b5f5bf945f2142687f6927d0ea45e2697ba297ee01157bf9413952dc3ddcd060258842357fd72f9a6b6694d028c27116ca683ffa4055cea05aceb35745dbcc4a7618f47af5c61890098aa3bd9de264abd1bb5d49c822150558e405f17465c8577a9490203d056c4b1829f183c6ac2b1cc7ffd261e33f8220ba079d5c07ce9cfbb5bf721c69c1f8aa75a379afa437f245737b9f6c54724fe8741", 0xdc) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:00 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 10:52:00 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:00 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0xfffffdfd, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e24, 0x2, @remote}}, {{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000400)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r6}], 0x6, "6034e538a11326"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001400)={0x0, r11, "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", "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"}) preadv(r4, &(0x7f0000000280), 0x2b, 0xda1, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e36a, 0x0) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/125, 0x7d}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/100, 0x64}], 0x8, 0x4, 0x9, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000240)=""/183, 0xb7}], 0x3, 0x5, 0xfffffffd) mmap(&(0x7f00005b6000/0x8000)=nil, 0x8000, 0x1000002, 0x13, r0, 0x87db8000) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {0x0}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) [ 2138.013516][T13770] netlink: 1288 bytes leftover after parsing attributes in process `syz-executor.1'. 10:52:00 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {0x0}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:00 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0x5, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x10041, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000240)={{r3}, "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"}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x248100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000001240)={'sit0\x00', 0x0, 0x4, 0xe0, 0xfe, 0x840000, 0x2d230a8e9de4c9cc, @mcast1, @empty, 0x80, 0x40, 0x7ff, 0xaf94}}) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:52:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {0x0}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:00 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) readahead(r1, 0x413, 0x9) mmap(&(0x7f000008e000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r0, 0x580f3000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = getegid() fchownat(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r4, 0x800) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) preadv(r5, &(0x7f0000000080), 0x0, 0xd9f, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:01 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 10:52:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e24, 0x2, @remote}}, {{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000400)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r6}], 0x6, "6034e538a11326"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001400)={0x0, r11, "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", "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"}) preadv(r4, &(0x7f0000000280), 0x2b, 0xda1, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e36a, 0x0) 10:52:01 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:01 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000200)=0x3) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5e) r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000380), 0x2, 0x0) kcmp(r1, r2, 0x0, r3, r4) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x5bb, 0x5) preadv(r0, &(0x7f0000000280), 0x0, 0xd9b, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) r6 = gettid() sched_setattr(r6, &(0x7f00000003c0)={0x38, 0x2, 0x4, 0x0, 0x80000000, 0x40, 0x16, 0x4, 0x80000001, 0x7}, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000040)}, {&(0x7f0000000080)=""/84, 0x54}], 0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x7c) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000400)={0x3, 0x8, 0xfffd, 0x1d, 0x2, "cbf3c238a2de53c7"}) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f00000001c0)={0x7, 0x8001, 0x400}) 10:52:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x4, 0x2) 10:52:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001a80), 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r3 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x10402, 0x70) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0xc9ab) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401c5820, &(0x7f0000000000)=0xc9ab) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x2c) r10 = fsopen(&(0x7f0000000980)='coda\x00', 0x0) io_submit(0x0, 0xa, &(0x7f0000001a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="63bb0dbe54d6bcda8f75819c7c3eddab2169df13b4b45309d49fc5f82b3caf4705d332619a2a82f83eeb3fc0230af74ec6a9755d5006f811938b32fcefe3453e6fcf5dea14d48cb6ca5f25d9cca75100a0f26a4569feeff57ce3a37cea9a336cf1cfd1d9877a1b122761de06ee9df4d1dd2691634c57f6eae123ef91a766bbf621ff34a8640f930d97cc27e25fb26934633c05b313aa7a1774eba08175d9490ebf97ea66922d4ca9322813daa45849aa39fd55824467e8347036f1ac9b8d2946dc2dc5", 0xc3, 0x4, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7f, r2, &(0x7f0000000140)="2fdfd28a", 0x4, 0xfffffffffffffff9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x7ff, r3, &(0x7f0000000340)="cf895dfea9a8b6b019f83b1f369da0037ffbf3ec7c4ffc", 0x17, 0x100000001, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x200, r4, &(0x7f0000000400)="86d873c7b49eca5951cca97efc6b73d7f112c946f0461f4dc9ded3f57b9da47dbcbe456851f65e2ce5eab9215872c6710bc23c2a085bbb86507d34", 0x3b, 0xad6, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xbd, r1, &(0x7f0000000480)="129fe8774f6584a9ba091f37bc3fc703ba0bc21d9173f8ec65f95366043efdfcb3e40b2038959966979ea58a2e804b86147379800e2d281e1b2236", 0x3b, 0x5d, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000500)="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", 0xfe, 0x7f, 0x0, 0x2, r5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x1, r6, &(0x7f0000000640)="126c3df0ad3bbdf8f79072051b79a08240332a4f312f2c850b0d806aad2f406ed6b5c42e62a5b0a6bd7bbe66d05d33bd1371fa1af31249f9c144afb9cfc61435d6cc7175cacb90e7023dd845a3ece85942519faa22ebcbf036132332384109399504b92521bb931857562066bbae80622cc1cbac1091ac943b72b985919df68c5718dda00bbba2067cd8f84d51cff75235ed029295d50f9c92542f949e602ab62215b155bfa8d4cab5f709402e35b8026c536db3452dcb93ed243290d64a66c3fe434a60b3b0ffb1507bba5f92df3fd35851", 0xd2, 0x80, 0x0, 0x2, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x4, r8, &(0x7f0000000780)="2607ac0b4cb6a8fa21beb9d798780ca33fa41e57436669639c38f33bb7b28a48a91dae1a82aada353943aeda7a37996c4003a5e9048674b1527cc3250843d9b2080fc3c5447ddee829eadd96b4cd0e58f58e5c76f10712d7440435a0f00a2e888bd5a79c9a97ba1a562c76681e7d8b88b265dd520d1d46b6ae662e827ef66f22880390e653ef55e350843c1a86003e458d5cfa6c6d25b4d6ce94a9aa861afbf9b82ffb08050e5a4dccb1ac94742b6deb541a8b0982b1831851e4808fff189d11be9dbef40e700b030dcaf2628d00be3a0155739c6dcce762a574dc0774430eb726861da799470ac7c8734073f634ff69920d59bcd5de965c6dd93944", 0xfc, 0x400, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000008c0)="771cbdae9fdccc12b420e41f0f300e3ee8825cc7a98271a552300d8e79f9b6e541433d900d5e0de3e3ad572bdb02c74fb77398a78c3a68ec2f3de0f9f81b23693b754c80e04183322adbbd70c63bebf4516189781a70c796d8f47ebf141a0e5f3ef56c7e", 0x64, 0x80000000}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x3, 0x4, r10, &(0x7f00000009c0)="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", 0x1000, 0x0, 0x0, 0x2}]) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2138.893892][T13833] netlink: 1288 bytes leftover after parsing attributes in process `syz-executor.1'. 10:52:01 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 10:52:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:01 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {0x0}], 0x4, 0x4, 0x2) 10:52:02 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x33, 0x6, 0x7, 0x5, 0x3ff}) 10:52:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:02 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 10:52:02 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x2) 10:52:02 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="64aa0690a6c696064d320d7d99eeff5fd26dd7876e2926aca399aaa1a58192", 0x1f}, {&(0x7f0000000440)="e20071a446cb5b03271820f8cce8c4ea6c74ac0dcb4e904810171fe04930315ec71361c97078e31589f974f6eff82a97b06b0639def7bc8ec4c164a6168069fec731ecc3ba3ab3068f3c8dd99eadb00f00e926dad041d3c73706aee34f686b3ab03aaea4cd3fbf3bda8dadc7119dced6f57e5842eb5048ac681ccaa1cfd45db868626b303efc4af2a2e048e788974b48f4f10440aee617471a0a52643041a26945fb89d4dc6be895673607a10c96fb79c5f8e3a9c8927d6099e1ff6c83f2ba5d99bbfe6b09c58abe6f9a07eca303197932e0ed20c6fd3939089b97", 0xdb}, {&(0x7f0000000180)="92597c7ce670158f37766efda018ec418f7c3298316a2c70e59304d944c28519b36adcc1a5a2051cfd7e1f65278474337de3954c2e058da74825c5c7e531255503a0e0ce6fc3f45c39ab5a5435381268b2bceed8a4cdc85c48a0462a0544e301de7a9c3be3afb29d3e249e71ce479a6867ec", 0x72}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="a2e1348e671cdcdf2a852392491a1f87675f9b84d6ffef6fc62672c49e007dd24e", 0x21}, {&(0x7f0000001580)="4fb69954753c16ce97ecf0e1a1025bc2fe3a6bd15a68cf374f122b4990c9cd70f43049a5da72e2af197c8726b6b80e2d4ceacf90f164fd7ddb17159f432c08b0abd536ef8c4845b808ecfdc2e5e9746d439e7233e69dc9d3b967fe89842c881b45ce1b5f10c94ee64e51ba14fc501ddbf1951ea032", 0x75}], 0x6, 0x3) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10810200000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001680)={0x0, 0x8, 0x81}) openat(r0, &(0x7f0000000080)='./file1\x00', 0x111082, 0xc9) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x208a00, 0x20) 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/188, 0xbc}], 0x4, 0xd9f, 0x1ffffff) read$eventfd(r0, &(0x7f0000000040), 0x8) 10:52:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x2) 10:52:02 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) [ 2139.787369][T13885] loop1: detected capacity change from 0 to 1024 [ 2139.826099][T13885] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0xc9ab) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsmount(r0, 0x0, 0x2) r4 = creat(&(0x7f0000001800)='./file0\x00', 0x100) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = dup(r1) io_submit(0x0, 0xa, &(0x7f00000019c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x200, 0xffffffffffffffff, &(0x7f0000000040)="cef56b051e708752eca2cfd51b47534c2708cbfc18295418b7501bed4cc2dc1a0e256d4886d876289710557018af1de943ff0f77a09bf0bdc8b536d99d87296a10dccbc673be7635712222d84e0f62b647a5ffe66ef619e37f8f6a3caed2b6201057ab5d7e06a66d13f0cf1bf33595b5276b4b7ed791ef8d2a692b7d", 0x7c, 0xffffffff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, &(0x7f0000000240)="39b04804dffed0c812a6d0dc1c8397ff54edb43cadc7b086da3965428d7ba4bc0cd9c348fa8b792022d5437d45a058e870eb593a4c4bd9299f8ab70c759eb0cfafc057ab44417ea1a84d8969b121b34a1dd09e2af0794c06ce2cf0a7ff3a6d05fa1625efacedaa21ac611fd89d8844e0bdbc411b5664607678ef08d62526c04a453dee891f68d0bbdb8539186987ff1bd6abf6107ddac03bcbdebc4ab14ca386bd892b62d558b9e29fdb529b58251a94c56f80dcc4095a101d8617f41bb22f2267eae4855f9592ef4ab75089f7c5aba19d57498f6b6881614b6249", 0xdb, 0xaa41, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340)="5068d8b5f56ad7473d774c89ea484660158ca96ebf404fa73e7d8703dd23481ab4c07b28755e4bfc984d174f395e92b297fa0af3d09f524e7cd63183bd0884d1c12ae28b285064dd5ce7c881ab820fe8134867e10d57f1a24b9026c265120412c4d8e0df546dbeaab1f46cb0a095beae37715d3bb8a778fec73ac919e239b1526111cd1bfbd660263a01bfc2c314c40214b46993626698a4a062159b4b478db7808c1fcd94f6d2e592f65eed810dfa572c6e88a4e8f6aed494ed254ae2d038b5966d6533624c0babeaf3fdff3083ac136d8662954dd40cad341555df26f897bd846bb4069564cd4e9f05d7bcc3a505638c", 0xf1, 0x1, 0x0, 0x3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000004c0)="d959cccd747747ec2c6f90f0f1ffe26ce76a6e3e703547c30dd4879496676200ace13be5994abe29dfc52fccfee16245a5def857d6493f4c69545254849c614781f3ab80e5d1c26b012c7d12b5232992d1381385a34281c4695ed7af7eebab97b8d17e423e646c614d6bc6d61dde803736ce91dc61a219747d5f80c68cd38f0df8d43fe3090f2e6f1a2fc9f6cc84a6b3efefeb5286c05abf408bbc93257da889fa35095bcdbb0c09e52bd60e62b1237f02beb1f0161af2d7540736b8578d53eef8b0745d909e638058fee558fb3c3154cb1ea4c2888a14dc9b0cc661cac438c03a1f6897421395ff268a524191109e16e64b44f6a4b14256987c9a82a98a68b9938774145141817701304b891ac7e45447aa56bc7d8b7b03ccac1d2b329271802319b72796b90b381375ad3c8a003eaa3e232dc4d0e1901f3f6c6e9e8b3f3009832365fc35fa915a002ad07ac9e2e75ddfcf0afaba44637503fc3671e25476770ea86a9642acc65285934063d8ce4f89f39f9a00eec073547496d2a7e475d02282c6f5534174a62b38553f5f1bfa913abfec40ef849fcddca78b8c04af73fda47b2ab90434c072ac215159d88ffcdecec4fbf5cb1fe1800e1e9a946a71c949c82065d34d3b5ea7aa58e027034d4e603881ee0e62df9d99baadc6868941f2eb05e9b943efa459c3c9730971fac417d0e3aa2d1d67c8c6bfa86cadede78f651c4b4afba1231d9d4900da0430a0180e57b659995e31d8f646e4043411f4f5ff12253500d9d0b2d31093ae7c47bffb08e90b8925c8dc71de8f0c938f5b1b3d499dfa83cc467cbcc33031013a13e2004bcdc730cbe88499af331eacf1156c2d941cc1b7ab9d7f7102308fe593ec2870c5c15de27de7dacc896fd4270c28d6cb3bcffb6a2f85334aade9531aa462d18846ba75017b1ecb9d81c010808aa9c4fc7c41132d6a6c26c1460acf08249d4228d806cfdd8eaf5d47b684dc0bf800d7c33b9396a0433e33308b42cd7ae470b249f2008097b24135ef55d22409d8a7b3d6dd5b580dc0d118710d0cb3e976bd530ee7a6dbf5d50bc9b0ff1803552f9c97786ca1ca18b489ea23d4cfa5d443bc4f98b3e51f0afbecb73d0f749d0710bd882d6bfd4f67cdf6efd03b779fe2e98d0d302653dd43d9c3615bc7afaca075dd118433c8232bf1bc0aef07ddb697e6d1ed2cdb5f8345c8c3ea2eff1ac9ae9bbdbc6d6904614ea4df39c51a27344ff77b2f3412e8646c0d681a0bed05fd3c02be1fbbe245e4769aa47e93d7c28349d549b2d70ae50d1f98f45515dbcc28bf8942ee11b9503e99677753c52fdcc13a500573a6e3da21e23865266a24bc0dcb3e9580979e5015774725f2090e09096f4c5bd9a613c487363b432cf4a4e0b7644d8c5427191482478c0582aa96810b7a4838c3ae67171a444eb055b73fe9b43f767b6cc70b8c2205aed9408923ab3a55ae082c94563a65c60d7fa9cca3e2ed4069ae2d18e27b0684dd492716e5bacc7e2e140ad68da47e3e7530d58d69f624666973ce001c2c3d9787c967bb1f9022b51270a12954167351485984d1afaf496484cd60534827a97fe6ebe18777fff5cddf3cd5cbc41f5dfaadd6b8300cff2b6860ec702f46371d6545de1bed1b81b37983c2ba27a4eece0a3f76165c23e45612a5f086fb750469da6515b019450dce63d26c4339de80800982eb1003f84d88b250bd3307c3a491cd80b8d7289bb4a1a1b867064559fc32925e22f17c79e2301697232614750f2fb6bc6f8edadef7fb5bc71e149be18f15fe6658a3046aa60196240d343fef7a4585b175719cc20ef2d8ddb8a345cdda69b1b50c21f60effb7335686cc6727eddba90441b0350f715cd1b01bf720186212b8c512387de90ac3a526e2eae732e6b23f0f8ea2e2991de09a23bc82b5a7f72112a2517a67d423e65251a9e90dca1e2f27db327c59a055838d20d36613386831a56b9e29f1fc1506058a676941c814872bf19ca6f4a7ace215f56e1c9783247bf728a739e29dc72229579546edf0c819bfc74a651d39da7b3ce3921d615bf849319e5043af340ebc69218fd9ac3e40cf25e9bcb12b2a2d9c802e80f245f028119e359ac3c42d99f0a460d722e88b3e73cc37ddb6c93ffc2c055f4afa30fa832ec7ab128469a707b6859eb530ceeb1f287d75ba1dd2e02ce1529b97b3181a115d7debd7df9659d0d9316d5d504295e252b1d6a8152fff176f038e2f2ddf2caf2417ec31355416c6d5a95d054211349baa9fbe48bccffef5840cdde99052ff4d2a00f06545e1cc4e5c561590838d42c9fdd0ece3db9e120e78955b7d3d404830e43da784ff1f3b8d95ec3b4eec488f3fec0eee93b50eabc893341a953ef7e54652fc5bc62910eacc134b88c46f39c3c0bb02c190625873c07c3499f9be9b04631961194c1b15cd833e000a44e565880478301d7fd8baae29dc9ba5f65a9dcc9c3b7dfca1ecbe2a5696fd6c9faf387c0e8d567c5088de46e11374671afec6d75948b2424e39d9ad950fd1f6e5466f35645e94dc5b2cc977756b89f1e2ee0f4f6c29ab6886bd161f69df3110ce9f77bdabdedd36c2007b4afb71929874a3a93ec875b1d3c8248e12302e0726b544a2ef5b66e0867a0b144b11229cc872a024a04a9910f7614d2775008ba819122980cd44d2dc75610207efbf26390fb9d55068ab7bb2dc0ddae99eca41ce1c27e5652d24d9e97f57ba0e90985f4608336e05aba2f7b22127119e186e6db917047c70dd9786628bfea9c32dcb6737070a7a1731e5d35e543cf7367b5913cede820689ba338bf49495a5bb6a51115ed470581ecebaaae4ce4670d4d0b42e67030f3822b253c72c1aa396946b0c6b8c6c8936325df806b6feb63226a6680a6a09ae08ee8ef0190ffda86b73b329d2f3641447a1687e95fce5200a60d833df8c18ca8e2d4f1e9212671ab2e844bbea0db20213909fce4a1378f9872e153b9fd269ba5c2ee7b295ac8e8991638b3e368d5221e63f261d2211f20ae4b21b0296c152f9408b43c9c70fca14332d5457522640cd2a43912ac2bdb355f85bd7c9f094965ffb6b33bb5d515bf23dd9010dcdd0fe49061114513bc61ab4acd0d56642bd4b4a44a3a05541b5fbdef60f939d7b4ba2a7577cbd089876c8d0df76118a217dc78a98bce12eb5bf422fda0a45f4ee6e4b1cc24fba9e71337993b5e149003e4cadc0b8e75dbbc8987883541c9d63e948fc41071e69045023f343b381607e58f350dbc2faf319fbc747600fa5e6229da463c8490c52a852335b18be39f7f229dc374a79d0a6e1aeb37cbddbb989b5ce848273685bc98b9c8eb453d9dc3edab956ac613b909e2d25c76300d8cd0f28af07ec678134883064d8fac8633ff99a102d7398911ba384b2ff6c1ed45b27868b87a3400890f86c743095882b5397338962f4e045e7ee6f08f880b4d04256495b89083a083a34a86c30197f81500a2f14f38643ecf66c7a32c14126c9f7e2f7030b2fec6ee5ee3a66381648066c0f1f46945dcb2824c090e40dd8cad8cf3538c330369ddb01675ce192cd1c1979d486c30a953182f0739488f08b33a24579a946467f1bc56489546eeac089226d8a0b1c004d79b1e5b5ef67db229c07e14cc7b55ffecaf2f4dfc6784f043f978bfffaf07b276a510340de9de7c800d4298b0851fe4c8f69488a50c57df9ed92ab6eb81cd194ba951aae91b7b6314ae844e9a96625e0e3949888a4e4237d96267e361a92b8b5f4560f25a23f6180663b1769cb8d7441bb3af99a3981971f777fac8e0612a452326e58af8a7fdc4b4770700f81413b650870e4b6388281f207e2e57ef61bc5436568f0ecc955fbbaabe30c8e40bc67146c8212148e8b25cb25d8e4fa78b955047077b2afb549304d4a765ac462458662880eb94f834e9862d026b09825cc5a9032090fbcc4ad3c850bf51a86a257c2549c429642af5aa2a5370477acbc669291c4bf66baca0a69c8b798b60a0556bfa8a4f56fee4e662fac0112196b6d447dea9786d3229586ba7edf4adc7fee683c98eaba0ca2b111167b7de11e29c955febe0577c60353e93d014e09300e580118129bd8ff1fffb5abfae5cb48c3419cb700a3de87b2836c2b838c3c0da1d3bff680ff01a9b777d59b7a3ea0330993a8c5bebb8be1da49ecfd55fa3108625c8b9517ba8d37e34b18332f2424ae4ac8d8ee9da0980e12dbffe681cad5f20e2dfd082dc499f12051a150c31deadda79e6e30ffa5882597c68df8449f81006a85005c960c00701f23e6dfb8789d0e8d4dc53a66a770fd29587cce4d33137df9f4afd595996d3db729f5c7bc065b00499b95dd054092af1174709cc96e2fe66fafc7967effa9ada0200221b2ce23a8d5509ab48bd0c9b5ffd35b3efa84d047522f9e7b1ac698ee30042853d698581e6343f9fe6e1ada2da02aa29d4a1dc35bc77010d51a8369001b713daac623bc933b2b584e91c4818eee86dbd74702c6171078a19b81f397bd4e2ad2706b1b183b08924fe660d2024187545f9d9c4e672b3c5b91f45527031531a0c7e6eae8a59fc07e2e2050add43cc89b014a7e17690e57b1edb8d1323821b3f6fe7d7da8490c0ca0e6b3fd83d4be9360b322b6ff3554a83513afeb3a9f235f195ead70c34c0f077c2a528e0464affa9eff312728e9ac8fce882a42d78c2636acd96ed53019917415b9f23bfd8959060d24b072a013ea410602aa4a8753a63e9d9a3cc1a252295f2805cc06f6b25863ea504f6b2829e70b1bd7fc3d9a8918394d6cbe0e2135696d1f8a2eae24d555b3dd41ad5fccb2dec1ba054d9bb0b01dddfbcd48d54f956f172d02a199d9ea23cb26da06615fdac69992eb01f386346fdd55b687d85a1b328555f58b3208c7ba53d4e4514fb5f7972a70cfe7d11adfa5f3996bda1b7e6c91f491594ffaccee06691bddc835f419b3f7c19741bb29acf43b7e46fb2f49602c4ff468ee5bafbaeba51f22820ab9b6ebdfcc9667b2fe2c8b3669fc2d6057323fe751fad26b761b7a6d4b17b4a7a1cbae6c9311420d1c3c48fb13d22f564bd6347468bc26cadbe69e0236925a39ab2227be711de6b7d4efaaaba85de7cd5d7dba88af360250d3adeb6dcb96dedb42a3bdaf5f849bd80766d17c49c909c80836b635d0553ea4ad98b370b51bb9f1219e2e5d1cf420c71b618d7fa9a5fdb4bbccfb7a56980a8e2d5fc2924d9797b60535041fdfc381a042878a44cd478cd58507b017344776d1bd3c33423893b10ca9a16e6224d01052cbf6f7be7c28bbe9a7d45bdb236f3d01ab487fd09637b6f8ded93301056674d364cd0a78a7c5a4ecf18855df501029063db79b7b16558efef56171a4f18feae1f36d081578908e9d22f5be7d2fb2f73ab540b4e09506987cc8826e9a784550fa6e8c4d1a3432029c4c408c2d9bb362efe25804e3fc5d5047bf592ee562208e5803fc999500b30f0383b72fc8a5241b6a8c93820b5eca14e703b126f09c5f223deff60c04cb7906a12852aa39d9b213a03db7616f7c7bf032b1b5c685befb981530d4ce5f4a24f1e90bb31243160f2f1d5175689aa359189dc7a50d017d01e292e2d49e602c895939092e942d25abca77529bea74951db2b5fe6d12cbee3184105bd67581aef7a1d241120f8ded527f342720aad5ff2a87879c869515e0710aeeb2c9257b9ede0c058e4ef16104a6ff4ebd88983052ae2703c6b822e7ca5104b03aac95f0329e2de81928e7c69a7cc1f2a9adc1ddfac9df4395ba1f2f4c178311195a344d4b702216e95a7700f4c8401ce875f669f8fc", 0x1000, 0x8001, 0x0, 0x2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0xf000, r0, &(0x7f0000001500)="0cd7199618caeb088c2b6b19429977eb6ecb99586a64581b8020a76cd7be3e4b1bbf2fdc85b27441acd13c09e52a2e42e4c573fbcfd604f1a45d9c0c32718461fdc7040dfc2010f78b26761b822ebd388051b540cd426af60b659bdcc6dd", 0x5e, 0x5, 0x0, 0x2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001600)="d26009840d085e9c2f7b", 0xa, 0x1, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000001680)="0e7ff2801aaf13b8bdf8e28e528265b0dc4a2ebd9f2cabe863895639089a46508b7e25ed09a25697044423eac06d425d5e6592c0f14ddabbbd1f98d204a43798ad2beb777a9ccf5a07110a935b169caf36467fd007b16463fe6ef1d5ec79cfea3ad38f57fcf7398c2a1820a1736b2ec16f958fab95294f", 0x77, 0x1f, 0x0, 0x3, r3}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000001740)="a241f5d711a30d1c25e1812b2ae9bdd64edd32948f92803bca5c0c99212ccaabb898288e0d59bc385068623fac9b10037b8ce1148742fadcdc2271a3d0948d210b2d61f7a6bbc2446c53b65ef28acb8edba7b6dea3da425a1968e332fee578821721e8346a347b1f3a159c1b8f92c16c953dd9bd69d8adeef61eee9602546d4bdc309135b751663cab9b77a78daf9498cf1e1bc849eb52b3895b78a3e1d9903489b353", 0xa3, 0x8, 0x0, 0x1, r4}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000001880)="8d17a83d4900582e8ea3980deabecdf3770e4964db06b301d09b9db7527b7d11e0427df4bf72a2b7b4a8a7b0c28521f45ee10c0cf95ab1501d080247ddb5a14846225ee80a33ac7892817b167ec6c6097b06f205cfa2255bd6a3531170461c4596d8bc35d7dcca5d4382ff5a7dbd42", 0x6f, 0x0, 0x0, 0x1, r5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x3, r6, &(0x7f0000001940)="0bc848f8d642768121f6c60cbd8963fe01695cd87758b59186cf27fe6904", 0x1e, 0x1ff, 0x0, 0x1, r7}]) 10:52:02 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:02 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2139.902629][T13885] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2139.921018][T13885] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1140: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 0 free clusters 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x400080, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2139.967055][T13885] EXT4-fs error (device loop1): ext4_free_inode:282: comm syz-executor.1: reserved or nonexistent inode 3 [ 2139.978486][T13885] EXT4-fs warning (device loop1): ext4_enable_quotas:6478: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 2139.992405][T13885] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 2139.999106][T13885] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2140.037342][T13923] FAULT_INJECTION: forcing a failure. [ 2140.037342][T13923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.050444][T13923] CPU: 1 PID: 13923 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2140.060568][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.070601][T13923] Call Trace: [ 2140.073913][T13923] dump_stack_lvl+0xb7/0x103 [ 2140.078485][T13923] dump_stack+0x11/0x1a [ 2140.082624][T13923] should_fail+0x23c/0x250 [ 2140.087084][T13923] should_fail_usercopy+0x16/0x20 [ 2140.092147][T13923] _copy_from_user+0x1c/0xd0 [ 2140.096716][T13923] iovec_from_user+0xc4/0x2d0 [ 2140.101370][T13923] __import_iovec+0x57/0x2c0 [ 2140.106020][T13923] ? fsnotify_perm+0x59/0x2e0 [ 2140.110728][T13923] ? __fsnotify_parent+0x32f/0x430 [ 2140.115818][T13923] import_iovec+0x69/0x80 [ 2140.120200][T13923] do_preadv+0x109/0x230 [ 2140.124420][T13923] ? __fget_light+0x21b/0x260 [ 2140.129070][T13923] ? __cond_resched+0x11/0x40 [ 2140.133721][T13923] ? fput+0x2d/0x130 [ 2140.137603][T13923] ? ksys_write+0x157/0x180 [ 2140.142090][T13923] __x64_sys_preadv+0x54/0x60 [ 2140.146823][T13923] do_syscall_64+0x3d/0x90 [ 2140.151224][T13923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2140.157111][T13923] RIP: 0033:0x4665e9 [ 2140.160982][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = io_uring_setup(0x2876, &(0x7f0000000040)={0x0, 0x4d3d, 0x8, 0x3, 0x4e, 0x0, r1}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x57b, 0x9064}) preadv(r1, &(0x7f0000000080), 0x1000000000000086, 0x4007, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:02 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2140.181073][T13923] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2140.189476][T13923] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2140.197544][T13923] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2140.205491][T13923] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.213445][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.221452][T13923] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 10:52:02 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 10:52:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x400080, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) socket(0x2b, 0x800, 0xb6) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) r3 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000001640)=[{&(0x7f0000000240)="4c96413423da3a9e89edf58f5351cf9a8d21286db63f920dab5e225cd471394d477d50bbee59842fb92bb76a39e0a702dd13f52df2c833363ebc9c449bb97ac9e30dc26c48c0c529b69885f7dc3cda39fcfa4719fd44bb17246a68cc99ec3bec528091c31b41c7c781c340051c4d299448a3a781c324ffbeff8f2d8eed7058c06ae20fe45e5834590c05086883eff6221985f29a18f121b3b5ed5061094f5c6ccbd057e90f667d85bb4f416b654780458d7e0662e4ce7fdb2ba512d8e0222550f493e79e62b01d56", 0xc8, 0x8}, {&(0x7f0000000140)="d63b22b4d4b07f7be681eefc3b08c2f4b46a5824e510ac0c81cff6d2adc86e5bc58581a23e47c63f9575ce538d0f2e9dfc161e699db0fbb84e4c7f424ea1c1e586d7e2c569e772", 0x47, 0x391}, {&(0x7f00000001c0)="d874f04728acf01024d6a75214077469b7d522373a83b6cbcba9d5a6f4d1afa238478681520ab599791f342fe4a7deecb2c2052da6", 0x35, 0x93}, {&(0x7f0000000340)="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", 0xfb, 0xfffffffffffffff8}, {&(0x7f0000000440)="e6e5e06744959f80a3fa12103088839b3fba927b5efd2848eb0718f42587a862d2d86372d3932478470fe7c753ae", 0x2e, 0x7}, {&(0x7f0000000480)="285d4080a40337c99679c01d646ee5a5340fe83ca06077e3775259e9e77ed32f8ef40b4db125f04c103cdb8c6a094917daf2b34dd84745ce5fd8a895f650d3239bdfb09c50147cd40e7c936ec4a663b5709906ae638eb5cc172edcb6e5414f6516da8fb7265be6510667fffe0309e06c861763f2eb1cb6b6f9ae41799b966148875e1f9a18ff07e939f75dff199173b78c6ceb184be5e19bd4d93d4d3153f778beaae4946214deb2256ecae95d00f95e189fc97dd94eacf36b0c3cc2f1767cdf17acc65fd56791bc910efd269a61b93f475539f8b1c9d31783d53a98ce5874bd98b3eb249580b0dd6561f88b86e23f6c6e21feef3d1b", 0xf6, 0x3}, {&(0x7f0000000580)="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", 0x1000, 0x142a}, {&(0x7f0000001580)="da2db4fee5a79447727258a8eff8a71f3f0a9278d8b1b3973bd19de914dee0e55f422c04a0be2d1c9416e0c9a2ca787e7ab49da5d552184c4d2aafba9e26bd90392b132791cceb03733541f2e59c5993d2aec56309cda8d2da8402dbe9fdc6fc9da5b79e70ac8e99bd746916bc0953ed8e7a3c94cb5e2c682cdf298d759a83018ff57993bda9a6fd477b47d8e1c0f53a6112ef42f556", 0x96, 0x3}], 0x4000, &(0x7f0000001700)={[{@nocompress}, {@cruft}, {@unhide}], [{@smackfsdef={'smackfsdef', 0x3d, 'q#!{@'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/asound/seq/clients\x00'}}, {@pcr={'pcr', 0x3d, 0x24}}, {@hash}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@hash}, {@uid_gt}, {@appraise_type}]}) kcmp(0x0, 0x0, 0x2, r2, r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000001240)=""/184, 0xb8}, {&(0x7f0000001300)=""/190, 0xbe}], 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:02 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:02 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 10:52:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0xfffffffffffffef0, 0x0, 0x44, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x400, 0xfffffffffffffff8}, 0x2002, 0x0, 0x8, 0x0, 0x1ff, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/4096) r3 = syz_open_dev$vcsn(&(0x7f00000017c0), 0xfffffffffffff801, 0x2) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000001800)={'filter\x00', 0x0, [0x800, 0x7fff, 0x9, 0x9, 0x3]}, &(0x7f0000001880)=0x54) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0xc9ab) preadv(r4, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001380)=""/173, 0xad}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/207, 0xcf}, {&(0x7f00000015c0)=""/252, 0xfc}], 0x7, 0xffff, 0x7) ioctl$KDFONTOP_SET(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:52:03 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x20500, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x296242, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fdatasync(r1) 10:52:03 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:03 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:03 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 2140.759350][T13997] FAULT_INJECTION: forcing a failure. [ 2140.759350][T13997] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.772065][T13997] CPU: 1 PID: 13997 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2140.782444][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.792662][T13997] Call Trace: [ 2140.796029][T13997] dump_stack_lvl+0xb7/0x103 [ 2140.800625][T13997] dump_stack+0x11/0x1a [ 2140.804756][T13997] should_fail+0x23c/0x250 [ 2140.809306][T13997] __should_failslab+0x81/0x90 [ 2140.814073][T13997] should_failslab+0x5/0x20 [ 2140.818555][T13997] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2140.824270][T13997] ? mntput_no_expire+0x64/0x730 [ 2140.829219][T13997] ? __kmalloc_node+0x30/0x40 [ 2140.833888][T13997] __kmalloc_node+0x30/0x40 [ 2140.838487][T13997] kvmalloc_node+0x81/0xf0 [ 2140.842880][T13997] seq_read_iter+0x145/0x930 [ 2140.847454][T13997] seq_read+0x221/0x260 [ 2140.851630][T13997] ? set_blocksize+0x1d0/0x270 [ 2140.856502][T13997] ? seq_open+0xf0/0xf0 [ 2140.860660][T13997] proc_reg_read+0xe1/0x1b0 [ 2140.865151][T13997] do_iter_read+0x2be/0x4b0 [ 2140.869670][T13997] do_preadv+0x13b/0x230 [ 2140.873901][T13997] ? fput+0x2d/0x130 [ 2140.877824][T13997] ? ksys_write+0x157/0x180 [ 2140.882308][T13997] __x64_sys_preadv+0x54/0x60 [ 2140.886972][T13997] do_syscall_64+0x3d/0x90 [ 2140.891368][T13997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2140.897266][T13997] RIP: 0033:0x4665e9 [ 2140.901136][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.920720][T13997] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2140.929170][T13997] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2140.937141][T13997] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2140.945103][T13997] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 10:52:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) syz_io_uring_setup(0x2957, &(0x7f0000000040)={0x0, 0x2743, 0x8, 0x0, 0xaa, 0x0, r1}, &(0x7f00001e9000/0x1000)=nil, &(0x7f00002b2000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x1, 0x5, &(0x7f0000000180)="2cc8c28bcb299a06c619c5ca52e604b7135eab698ae3e4ea", 0x18, 0x0, 0x1, {0x0, r3}}, 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001a40)={0xa, &(0x7f0000001900)=[{0x34fa, 0xc, &(0x7f0000000240)="1939121ed44c13a32f6f37cd"}, {0x7, 0xed, &(0x7f0000000280)="822eee8d1dc766888fe56bae808dd33d1c5466d5390f0c348243347c9a779525ff20c49f8d17240c88cc7ae8852d869fc134a77bccdc1daba4e76d372791fcf0ca86c09ab02e626bb4980bf1514a7b29af67b836526eee30b4a2ed49badadd8818a5905b77956c8cee5d2f702df0346ae6532b4c4a47d3676d9b11ff3f1502975ed3765595a5fb92fec79c3219d141997801a78dcfce64f372cd5fe4b54a18d84a924e2d09be08892c5984dee9001933d132b8cdd0ad21591bccbfb80ffdc1f3561225eeebd191f6ef11689b620f726bf6da99aac10f97fd9a94678369ab4b9f17dabcf487f7239ea709b945c1", 0x0, 0x1}, {0xff, 0xe5, &(0x7f0000000380)="869bbd7591f014a3e1bcfff6c78c5fee23cc50a33d2d04a5260ceaf84e3dba545feb41c5b0164f03237c140c9acf5a3de5580aacef59ec1812cd7eaa69d6a77a69c4fa1b45babe8b8ebc46797f42870e43947b270cad8bbfef7c670537c701a471aea4fbafb50648e025f2cd609db6b9b3f1421640fb8216d30d800d48505b65cf592c0954d119b005a6897fd57d408bb8c0ef606d6de5c53b7314f3c11daff5362b52f5e057b2c5690c8f89431cc6da8d4bd8923e7b9e4c57e28a9054258f685326605527936ca2dfac2e329186a83b18f37370048dccf3f8df58588867300ec41e023f29"}, {0x8, 0x1000, &(0x7f0000000480)="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", 0x1}, {0x7ff, 0xf3, &(0x7f0000001480)="70b46e002f627ab9fe4ceb69db409bc1f727db05499a0db5375f268b90b3f20cd7083c71a031b9a8fad27ab1ab78271442b6455402b344318374b5503c2c011dede341b240fc237b99b2bede69e9a6c083df4f73b37e81e9e7c028e8e489c198988feb67b99aa8f55bab193f6952aa976acbb0f65fe82cbd20a3480b03e31fdff019c9e302574baa3fb8e7147679417ae1c21c6cfae0279e071bfe261c8cdc7a2139d733d07b395d334a462f592a7b3facba8286e55c10821c9e531304f67e3e9b181618dbf99fe84ace9ebd4bfb6f50abd9892aa3e3ed5f032b3a9d32e237eb406df75235c1265dcb3961f52569bfdefd5639", 0x1, 0x1}, {0x80000000, 0x23, &(0x7f0000001580)="4f2af95a5dbf411106af2ffb9d94d6a28e78dc1ca44e17c4387cbcd57b717f112ea9ff", 0x1, 0x1}, {0x7ff, 0xe2, &(0x7f00000015c0)="cffa2dbbb6c0572adf74b1011c7de1bbe7708034f8c270589f63255eada63fc1a8f2c9d09396f3da6673653b9a662cdbf62f41462fc25453013adf737bbc4ed1cda58f4f2b290975c6a05e2c9bffd79a61216697ab67577676bd6788fe5191076c738d9cc688749a808221593d3dfe06dcdc2ef77403535dad210aae1bbc3fa407712c6c4ee5c79fd976071f64700b3742e48a7df2bd54d4180c50414c1324956e26605e715ccdb836193c569a8622a7fd9efa92c7ac04abd01ecd470b6a140c313ca4eb0eb498d1bf022562b0f4844855b776e898efba74f9eeccbf14eb589bed23", 0x0, 0x1}, {0xffffffff, 0x41, &(0x7f00000016c0)="6fafcd9cc4cb68d7a8717034a6794e1048ee92a2a11e5c38f55ea726551a3d9be827049d2552587995ca9b2ea5618c0e0bdc22b5e00c0e6454c028603e0d945ba4"}, {0xfffffffc, 0xd2, &(0x7f0000001740)="fa21cf2b5b3eab80a4346449a347563ac7523e4c2b0cf560e0df315a0f1672a3c4ac844459b870a78422cd2bb92b51f6856c49f77acff5d5d7bf27e6c705c41380359beced9988c448c4b19a5020b195bff87c326b8a6d6608912e2bdb8aef8e61129d44eee2ef539998bd644e553bd7d8b2d6ae7b52853737c22429c2fbc4161fa42625e4a8519ec245c74757776cfe1689f3448c41890bbfc177a1e7a8cb7ade172d568d1007a7b9b3d3a36a8be1aa90da0cc7775622fb8feb8e0202f6027451e6b9dc32c2ba0c6a98ce00dfdb4335b1ad"}, {0x4, 0x84, &(0x7f0000001840)="ea70dba9667bc8bfc4f68c64a39e14bb0c1d5275e3b1f2cd9d44048c25589420cd03d35c8153a658d521548a117075e4fab740ebd69356602d173343d1030dfb1f7d1dc0dc0e11ddc19b18cb904b6b66340523a87e161e4ec4e4751d83fbe58c7947af6bdf0b903c039a1e15084bf4d5d5889d26cc0d048097967f3fdf70dcbfc86d43d2"}]}) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:03 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:03 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2140.953071][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.961025][T13997] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 10:52:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "ca348ed225139b6b0e94142bf2962143a891c9"}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0xffff, 0x20, 0x5, 0x101, 0x11, "eb8014757b74ae8cdf607cc98c5266a18c7c7f"}) 10:52:03 executing program 4 (fault-call:4 fault-nth:2): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2141.080050][T14023] serio: Serial port pts0 [ 2141.126411][T14032] FAULT_INJECTION: forcing a failure. [ 2141.126411][T14032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.139591][T14032] CPU: 1 PID: 14032 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2141.149845][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.159898][T14032] Call Trace: [ 2141.163174][T14032] dump_stack_lvl+0xb7/0x103 [ 2141.167765][T14032] dump_stack+0x11/0x1a [ 2141.171994][T14032] should_fail+0x23c/0x250 [ 2141.176435][T14032] should_fail_usercopy+0x16/0x20 [ 2141.181670][T14032] _copy_to_iter+0x131/0xbc0 [ 2141.186266][T14032] ? check_stack_object+0x61/0x70 [ 2141.191300][T14032] ? __virt_addr_valid+0x15a/0x1a0 [ 2141.196411][T14032] ? __check_object_size+0x253/0x310 [ 2141.201701][T14032] seq_read_iter+0x7f2/0x930 [ 2141.206288][T14032] seq_read+0x221/0x260 [ 2141.210444][T14032] ? set_blocksize+0x1d0/0x270 [ 2141.215214][T14032] ? seq_open+0xf0/0xf0 [ 2141.219369][T14032] proc_reg_read+0xe1/0x1b0 [ 2141.223930][T14032] do_iter_read+0x2be/0x4b0 [ 2141.228472][T14032] do_preadv+0x13b/0x230 [ 2141.232740][T14032] ? fput+0x2d/0x130 [ 2141.236663][T14032] ? ksys_write+0x157/0x180 [ 2141.241172][T14032] __x64_sys_preadv+0x54/0x60 [ 2141.245992][T14032] do_syscall_64+0x3d/0x90 [ 2141.250478][T14032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2141.256401][T14032] RIP: 0033:0x4665e9 [ 2141.260309][T14032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.279991][T14032] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2141.288454][T14032] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2141.296602][T14032] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2141.304628][T14032] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.312648][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:52:03 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 10:52:03 executing program 4 (fault-call:4 fault-nth:3): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2141.320633][T14032] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 [ 2141.355226][T14046] FAULT_INJECTION: forcing a failure. [ 2141.355226][T14046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.368402][T14046] CPU: 1 PID: 14046 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2141.378668][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.388831][T14046] Call Trace: [ 2141.392104][T14046] dump_stack_lvl+0xb7/0x103 [ 2141.396702][T14046] dump_stack+0x11/0x1a [ 2141.400903][T14046] should_fail+0x23c/0x250 [ 2141.405323][T14046] should_fail_usercopy+0x16/0x20 [ 2141.410410][T14046] _copy_to_iter+0x131/0xbc0 [ 2141.415004][T14046] ? check_stack_object+0x61/0x70 [ 2141.420030][T14046] ? __virt_addr_valid+0x15a/0x1a0 [ 2141.425143][T14046] ? __check_object_size+0x253/0x310 [ 2141.430432][T14046] seq_read_iter+0x1dc/0x930 [ 2141.435052][T14046] seq_read+0x221/0x260 [ 2141.439299][T14046] ? seq_open+0xf0/0xf0 [ 2141.443526][T14046] proc_reg_read+0xe1/0x1b0 [ 2141.448040][T14046] do_iter_read+0x3b1/0x4b0 [ 2141.452623][T14046] do_preadv+0x13b/0x230 [ 2141.456867][T14046] ? fput+0x2d/0x130 [ 2141.460763][T14046] ? ksys_write+0x157/0x180 [ 2141.465265][T14046] __x64_sys_preadv+0x54/0x60 [ 2141.469942][T14046] do_syscall_64+0x3d/0x90 [ 2141.474455][T14046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2141.480349][T14046] RIP: 0033:0x4665e9 [ 2141.484249][T14046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:03 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:03 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:04 executing program 4 (fault-call:4 fault-nth:4): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2141.503874][T14046] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2141.512376][T14046] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2141.520436][T14046] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2141.528470][T14046] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.536436][T14046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2141.544487][T14046] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 [ 2141.579850][T14053] FAULT_INJECTION: forcing a failure. [ 2141.579850][T14053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.592921][T14053] CPU: 1 PID: 14053 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2141.603075][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.613122][T14053] Call Trace: [ 2141.616398][T14053] dump_stack_lvl+0xb7/0x103 [ 2141.621077][T14053] dump_stack+0x11/0x1a [ 2141.625258][T14053] should_fail+0x23c/0x250 [ 2141.629706][T14053] should_fail_usercopy+0x16/0x20 [ 2141.634752][T14053] _copy_to_iter+0x131/0xbc0 [ 2141.639366][T14053] ? check_stack_object+0x61/0x70 [ 2141.644393][T14053] ? __virt_addr_valid+0x15a/0x1a0 [ 2141.649511][T14053] ? __check_object_size+0x253/0x310 [ 2141.654802][T14053] seq_read_iter+0x7f2/0x930 [ 2141.659396][T14053] seq_read+0x221/0x260 [ 2141.663722][T14053] ? seq_open+0xf0/0xf0 [ 2141.667916][T14053] proc_reg_read+0xe1/0x1b0 [ 2141.672414][T14053] do_iter_read+0x3b1/0x4b0 [ 2141.677090][T14053] do_preadv+0x13b/0x230 [ 2141.681339][T14053] ? fput+0x2d/0x130 [ 2141.685235][T14053] ? ksys_write+0x157/0x180 [ 2141.689733][T14053] __x64_sys_preadv+0x54/0x60 [ 2141.694411][T14053] do_syscall_64+0x3d/0x90 [ 2141.698915][T14053] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2141.704898][T14053] RIP: 0033:0x4665e9 [ 2141.708785][T14053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:04 executing program 4 (fault-call:4 fault-nth:5): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:04 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2141.728395][T14053] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2141.736807][T14053] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2141.744776][T14053] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2141.752743][T14053] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.760711][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2141.768674][T14053] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 [ 2141.821390][T14066] FAULT_INJECTION: forcing a failure. [ 2141.821390][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.834504][T14066] CPU: 1 PID: 14066 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2141.844745][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.854884][T14066] Call Trace: [ 2141.858161][T14066] dump_stack_lvl+0xb7/0x103 [ 2141.862817][T14066] dump_stack+0x11/0x1a [ 2141.866971][T14066] should_fail+0x23c/0x250 [ 2141.871424][T14066] should_fail_usercopy+0x16/0x20 [ 2141.876446][T14066] _copy_to_iter+0x131/0xbc0 [ 2141.881047][T14066] ? check_stack_object+0x61/0x70 [ 2141.886154][T14066] ? __virt_addr_valid+0x15a/0x1a0 [ 2141.891265][T14066] ? __check_object_size+0x253/0x310 [ 2141.896562][T14066] seq_read_iter+0x1dc/0x930 [ 2141.901180][T14066] seq_read+0x221/0x260 [ 2141.905422][T14066] ? seq_open+0xf0/0xf0 [ 2141.909578][T14066] proc_reg_read+0xe1/0x1b0 [ 2141.914083][T14066] do_iter_read+0x3b1/0x4b0 [ 2141.918584][T14066] do_preadv+0x13b/0x230 [ 2141.922944][T14066] ? fput+0x2d/0x130 [ 2141.926841][T14066] ? ksys_write+0x157/0x180 [ 2141.931369][T14066] __x64_sys_preadv+0x54/0x60 [ 2141.936171][T14066] do_syscall_64+0x3d/0x90 [ 2141.940586][T14066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2141.946585][T14066] RIP: 0033:0x4665e9 [ 2141.950529][T14066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:04 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2141.970128][T14066] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2141.978533][T14066] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2141.986508][T14066] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2141.994554][T14066] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.002605][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.010699][T14066] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 10:52:04 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:04 executing program 4 (fault-call:4 fault-nth:6): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:04 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2142.105410][T14084] FAULT_INJECTION: forcing a failure. [ 2142.105410][T14084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2142.118908][T14084] CPU: 1 PID: 14084 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2142.129128][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.139179][T14084] Call Trace: [ 2142.142453][T14084] dump_stack_lvl+0xb7/0x103 [ 2142.147041][T14084] dump_stack+0x11/0x1a [ 2142.151220][T14084] should_fail+0x23c/0x250 [ 2142.155634][T14084] should_fail_usercopy+0x16/0x20 [ 2142.160724][T14084] _copy_to_iter+0x131/0xbc0 [ 2142.165369][T14084] ? check_stack_object+0x61/0x70 [ 2142.170477][T14084] ? __virt_addr_valid+0x15a/0x1a0 [ 2142.175690][T14084] ? __check_object_size+0x253/0x310 [ 2142.180985][T14084] seq_read_iter+0x7f2/0x930 [ 2142.185586][T14084] seq_read+0x221/0x260 [ 2142.189762][T14084] ? seq_open+0xf0/0xf0 [ 2142.193915][T14084] proc_reg_read+0xe1/0x1b0 [ 2142.198479][T14084] do_iter_read+0x3b1/0x4b0 [ 2142.203033][T14084] do_preadv+0x13b/0x230 [ 2142.207331][T14084] ? fput+0x2d/0x130 [ 2142.211293][T14084] ? ksys_write+0x157/0x180 [ 2142.215794][T14084] __x64_sys_preadv+0x54/0x60 [ 2142.220500][T14084] do_syscall_64+0x3d/0x90 [ 2142.224933][T14084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2142.230885][T14084] RIP: 0033:0x4665e9 [ 2142.234858][T14084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:04 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 2142.254488][T14084] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2142.262884][T14084] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2142.270855][T14084] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2142.278836][T14084] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.286849][T14084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.294807][T14084] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 10:52:04 executing program 4 (fault-call:4 fault-nth:7): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2142.348647][T14096] FAULT_INJECTION: forcing a failure. [ 2142.348647][T14096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2142.361858][T14096] CPU: 1 PID: 14096 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2142.372037][T14096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.382146][T14096] Call Trace: [ 2142.385444][T14096] dump_stack_lvl+0xb7/0x103 [ 2142.390034][T14096] dump_stack+0x11/0x1a [ 2142.394185][T14096] should_fail+0x23c/0x250 [ 2142.398661][T14096] should_fail_usercopy+0x16/0x20 [ 2142.403685][T14096] _copy_to_iter+0x131/0xbc0 [ 2142.408274][T14096] ? check_stack_object+0x61/0x70 [ 2142.413353][T14096] ? __virt_addr_valid+0x15a/0x1a0 [ 2142.418492][T14096] ? __check_object_size+0x253/0x310 [ 2142.423849][T14096] seq_read_iter+0x1dc/0x930 [ 2142.428515][T14096] seq_read+0x221/0x260 [ 2142.432672][T14096] ? seq_open+0xf0/0xf0 [ 2142.437010][T14096] proc_reg_read+0xe1/0x1b0 [ 2142.441679][T14096] do_iter_read+0x3b1/0x4b0 [ 2142.446368][T14096] do_preadv+0x13b/0x230 [ 2142.450609][T14096] ? fput+0x2d/0x130 [ 2142.454584][T14096] ? ksys_write+0x157/0x180 [ 2142.459163][T14096] __x64_sys_preadv+0x54/0x60 [ 2142.463841][T14096] do_syscall_64+0x3d/0x90 [ 2142.468260][T14096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2142.474154][T14096] RIP: 0033:0x4665e9 [ 2142.478040][T14096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:04 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:04 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = getpid() sched_setattr(r4, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004c40)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000004d40)=0xe8) recvmmsg$unix(r0, &(0x7f0000009a40)=[{{&(0x7f0000004d80)=@abs, 0x6e, &(0x7f0000006480)=[{&(0x7f0000004e00)=""/100, 0x64}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/124, 0x7c}, {&(0x7f0000005000)=""/71, 0x47}, {&(0x7f0000005080)=""/156, 0x9c}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/153, 0x99}, {&(0x7f0000006200)=""/65, 0x41}, {&(0x7f0000006280)=""/221, 0xdd}, {&(0x7f0000006380)=""/208, 0xd0}], 0xa, &(0x7f0000006540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f00000066c0), 0x6e, &(0x7f0000006a80)=[{&(0x7f0000006740)}, {&(0x7f0000006780)=""/88, 0x58}, {&(0x7f0000006800)=""/198, 0xc6}, {&(0x7f0000006900)=""/35, 0x23}, {&(0x7f0000006940)=""/129, 0x81}, {&(0x7f0000006a00)=""/42, 0x2a}, {&(0x7f0000006a40)=""/8, 0x8}], 0x7}}, {{&(0x7f0000006b00)=@abs, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006b80)=""/81, 0x51}, {&(0x7f0000006c00)=""/174, 0xae}], 0x2, &(0x7f0000006d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000006d40)=@abs, 0x6e, &(0x7f00000070c0)=[{&(0x7f0000006dc0)=""/246, 0xf6}, {&(0x7f0000006ec0)=""/58, 0x3a}, {&(0x7f0000006f00)=""/204, 0xcc}, {&(0x7f0000007000)=""/132, 0x84}], 0x4, &(0x7f0000007100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000007200), 0x6e, &(0x7f00000073c0)=[{&(0x7f0000007280)=""/149, 0x95}, {&(0x7f0000007340)=""/121, 0x79}], 0x2}}, {{&(0x7f0000007400), 0x6e, &(0x7f0000007600)=[{&(0x7f0000007480)=""/148, 0x94}, {&(0x7f0000007540)=""/160, 0xa0}], 0x2, &(0x7f0000007640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f00000076c0)=@abs, 0x6e, &(0x7f0000008740)=[{&(0x7f0000007740)=""/4096, 0x1000}], 0x1, &(0x7f0000008780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000008880)=@abs, 0x6e, &(0x7f00000099c0), 0x0, &(0x7f0000009a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x40002000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d00)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000300)="bcff758e5dc177c87ae4fd11410492fbf22a2b299189407faf7adf32168054a1eebbbaeddaf1ced8a1056805bb16c6877063d1720fe79052869d80da3a1113293ade375afa26fe0fce243e464cdbcd4ea047a9591ff2c790ebdb291ea76266824553ba63b6a00a1c78eacd21d61679189fbe425057af42b549e7948be85d484afc1aaa217ea493f6fb74e39ab0e6c7980491b9c20aaba5a3d5986a89bf6791a7550d8a5ce02661f6adafaae44f3e07f85b7152508a42cd31ce57fbd77b5d8e3a29d19bdac1562c6b3674b1d671e96c2587d32fab2d985fde2a1148fe6ba0b62c02d4702a8f0bdb0ffe98cf39690bf82246d485cfc577efe67365a73e0efd10865e4b345c34e13d2d333fb4be9a9c8f99e18c7088868b2f542b05f4fb4fb10645999974cbe64c847c89f0a710e1fa5cc077be2ea5fc2fff7563c5ac67acf8af6d1caa36f875f1630568deb7c0d60ec50c3b6c57019e78cd6d92eb4504603381b27bf125c18626aa4cbbc2054391298b5ec991f5b805ca6a7ccc5b81c9853f1e6a84f2534a0d06be4215da61f13f6af8bae6acded0401765fc7584511037ee1747f692b307907253e4263f303fa9a2b42b9968137d59dcc80a83bf7cc7450856e06f8635f058d051c63e828fcb726c773b2ea2d631155fce0ab677150505b0ec6a2990ebe2f161f890beb9f925989c66cb1e6c865c27006b88419542c4022824626433e567cb0a8570aee9f0db4d50065f635aa05ba548ac3f1294d9f5da194c055a870762180b593b4a6544d84bc2b480b46fb4010879b06d14f01d8a59ddfd31e5d7019bc98eb72244c8905e44326a792b10a36613eb26f5efd06a2083052f810bb0fbb4c3164047528ffc8709f22e74dda61bb64ac7a559c69af51cc3e5cb7919837ecfaad3a30b8134613ddf4cc68fce566462329e5945e095b59b02529432981e06d8f63f263421b3cb9dec043db78e9fecd2f957033fbf505dd7a10f25f97f53ccc91d64f840f451e152debf20f59fb1d78ca09b869baed30e7728bab67455d8c454d6a956c97f9a12c6ebcd48f1fbe252f68d9705cd292942b88c2a43bcd8a8c9668288f71837eb7a91020a2180d3b68370a9983c54c7aac16c38dc8a3030ff3461b1d2b4e2b3c46a4adf463ed4d9893235fb78ea834c9364b07901eeb7552499430de389af06e32a869651ff44066ba7c613b9742b88ec079e5b55b8c9c45f6cd84850195a34a38f05bc139e100e7c388240f36a6c4d468b4c381037c80d52710202ce442e4a6dabd61720a5423747297afeaa4806d12e9c0d368fb9e339044eda5495a3c22397568caac85fcf9fef1fa551c4adb81f66b82bd16db7b8a9b36173f8a3a4bf01c493ef002d6eee8a740cd19388e0c49b761a6692fd29a5e7f2fce5935fde9b750fc44de220759d2033a8056c3ca5cb4ed1aa49b402143e84afe9e269e17b2c0d5968ec5a4155dd25ec2623434b927ad8b4b3c09958eb900608a6dc40fb5f7ad6577533d8b017b9d3073049c180dd6a5ac9c970fbccb16764c56c2497f309a93d45b9fc4ddfcd0d23dc81c044796cca4548a72cafbbb36377ecd273d19929231478c754ee62b41c2365bb1221f48f2cee0e98691e0919f99816de518e992eb5d1921ed60eed91ec37c2537a7cb33c581f68f804b414518b1a39e3f209b6cd8ccf618ce13fa008e4f3dc6a61c57a8a93928eb7da91d94a6b809aa4e3bc920bff481cedc21d00e2955ec56aab3a9dfd6a5af7e157d5cca787720944b7a5369362f9fcb4fab2588cf8fb4c552f83eca4be312aabc7a076530dbb270c9f449271c67f196f974ef2baa3de7081e33a6d203a7c6a3009fc803bd530f1b543873c8b87ccba07927fba4d8a42de954777c6960e4ee4ce9eee8e246d91975b07f217495d056c8fb53e43bdad4ab7bbf9bb9cc032d280fe4626909ba5b5ec4304493c92a4b6bfd9aa37d03b871afb5c7c0b0dedf1cdd6e500317992e51b57c66de5d5d743f0595978b05cddf283ca4bdac9781c7a48364298d8fda4e711d105615d0562433b49ef8f56b35858f6c2fff6ab7ee15578d600e837f869cd4460b4b2b2dfd5bf36229374ed30ea58e7b91de5d626fe5945d46826d355c8efe7d0c76c7a7ecc48d806cef8777b0edfcf9b834361ed3d6591960aea896c3bc5fc4a26aac427aec85587b6558fff46f3fddbcc5d63f14b902d3844400505aa64563fe37a87de2c22ff105a31376a6ec64a3dc349cb680027fde621998fa95f357d3ec328a656620c1d1232b0bf642c44a13a9cc84398e3982eb0b644b75282415c349a25db36c8cd8c3a6c59887c6ec192db0f864fdbb76a586a7f730222614290c1d89d776b88c348430abdb0483266ec4ca188edc340310dbaca544461c442b8efeee3cdd3225ac002338f77a50ac7c392924adacacfa78be2769f4a0a17d044c935d18fd4a1f6ce402bef4aeb158c32ff73d5a7420bc3cecf8bb17d0729826fc60aab7e04dcd0eb64aa7713644200b13b4a431fb7d6ecb1d10a820cc9062918b38d8cf92e7a0dc61d784a8a91502fa267acec254fba41560d61482fd96bc68ea2be88f06ff193ad1bfa6241e79a0929c1eb1e1885498719e1672ffddef2e1cf8ef468805fcafa24b1e0d4f21ba15b81d36e47154b149337c9d9d2271372e86baddae05ab45f62b19e47043672f661b2de17d592fb714538bd4469d9c3529fb2471f97c2da63832560fcff2e50aca320260850630e7ad6a817e1f84cd4b6c4fd4854949f3721459e9d6f0898010f0efa74e9a97f8e05f4dabf485a20134bbfb40696db866d6e8667658dad70869131cca14541de7dc66fccb3405c68ddd131e4f96c58aa7e86fb1d27473c0e5bfaac4cbba0d4239b7f25062dfc8374b74b53d2b79ca84882fa1236a16061366521fdec18aa380ada84f3e3c706af43f45f958f57195ecbfa0ff163e9824f791932527fab8794afeec936671641ceb809d782d9f12d669de5ce228de8d9deaa0cbdc27d53d15556bdc55c912e9c6a402ee19da5a87d326fc3136a1aed1f69d26e0670c3380b3ed2a5458d9bf6df4c0ae1d74da195589fb4bf1d715592ef7cd4488a9cdc7690ebffc301606946fa8ba88e862ae2e44eafa6c51a97e9dac7a05d781957fe9910972d83cf4ff554e2275a1a436c439599c4e0475b922f4718d0d78ed4dd9bc48de5b73ed7c7f0e6d98fd0d1c922f2a53ebdad66410eb2d670f1a59b43bd7e85815a1ceaaf93b6e77b8c9dd29eb29c3a9e6da745f540273abd74297e7f0fe664027772182986f5ac40ab6b4e3666c621e93a0dacd052330fb6509b58819194032cc0a0d7bdddc1ef9a0056a39ba1198a5606998cbeb49b128e5532fa0989bd24344d1e73d17ff3976ae6a7b036d6750adfca84d0cb8b7a097926fb915d83045195a282290569787c364e423d34941282c1fbaec339f3a896582034a5ea000e8cb47024fd463752bcc2ec5ac629592ad1df104bcabd26124a1aeca649e908fd502c63faba585161c3adefb3cf608505d97a6a4c8ce580ee3d59199a517cf54b5b6a2cbf518c944f73b1f194292e8725ba5b4fc01ac1fd28ece607e07c75e948fbf5a2cb273de92693cfbdc65b604005d21a21913d304e3025ef138dade1992685e41dfcad3ad0ff7094dd88743e33157c4088e4e19f90ec825ab032fd7f03080b63c8b7d41b9c06746b1f2d6c89658a015bd73f27d3db04092ba85c514fe85cba5e7aa118b1c5e29795020c7e4ddb405acd7dcf1986072054f8a14cc9ae22ee1f43eaa509c3ae5380b8bc1b5b26edda1eb0609c911b6952facbaf677590b4409a1770ea77faa009ea6411290b27c4f13cf35155f21fd31f2c9b6cf91888a6acfc2735ce10264e54aeb45a1a87e78eb07a839b270d25733f802c805dba3f24bd11174d1091198076cd8a63fa719e1d8ba3fa1eebddc3e2273ef0853a1ec60afeb5a55b13c27b2b4322778e9567a757ce97aa9b67e6bf27c4ed342c35dfb35eda156947a4608d26a3134d4a2ed119242fc04ac465573f691717406b6c5d52d9f8a262f8c6bca88f77c5122a81fb1f72a846c9102ef8e3ce73776511bb702907eb0c5b78c2eeba89c28095c97bfb03ec23fa2806bf9658d8ff9f0bbf818b8d334043d24096f99f7bb4610064ef82307444d8595197755bf7be0ad054149cecbbf007df50385a6fdc59edfa22520217a93f96a0b0fca82b95b3973f960b3395e4e8268911c52772136b8912431d30eefeb18cc7ab06999ca058cdd5b0eb770bebe0461c05c52d779def76ce6fbd924f52a67e0dc5104984c217cfedbe08e471acaa3f141f1c3214169ee92b4a4b6478f1dcddc6f025d0e88d755d0e1ed77e6fa4a8fafba456c03820ea72dde8fb9565b9375580b6d38ae17b63fc2ce79baac6647f9aed0a16f2ec8fddc809d4959ae4779454f2221388b9d07c5dccf2a7f7e5686d9de894386ce2096242342b6d1bb12ed9052decb5f33debafb19323775c952a71071824b3fa665748937d9434bfbfa2b081ccb721358a8cfd0e1132616e863880a7a01126b212626b2a29fdc09e0277bc4cdf1e770b3574e585965673a2eb73639d1041c9ae6d0e2c499a4c14590fd63fb6a3592b4b2e9367642a5e0ccb52dd1df5776cb4ca48ef20108af00b1265e60a90a6b997e097c998bb2635e54d478fedbdeff73c0bea8ead7be016ca30a963e89d906a123c0534423a562563d40b25ed031394004b1f3c3c2ab828a6bf0d201e2b9523b27b3478a017f23aa23bba22ca4fa29047ed0b5748ee60265839c752087ab9d8e7d9d413cdcd4d43f35ba5e22d3aaf05e48fb3fdf2f4ec615a4e4fb3001839507bf793a6f7976f690b217a8b44434cd24d4319e0fefcfbc1f49181c4ebbbcb7d7bf3637e6f89ffeaf18699b84512799373cac401510f39932e81e12e7f49b8cf09098185d9d03be56eeaa5ee8318c4a10d3294f7f47a4e1152778e0e6e8ca3d0d821866cad38081bd8a18d4f1911f63953cac6e3f468c81ae13d4097b677470ee110c106f9f0659e8df8cd55ede9e1df1306bcf0b792dd7938fcf786258d6eec9f67a09e25ed11eb4a5f15928a72af5691844f70be547d735552d2bcb1b4af192e9dec770a11dba4a0b2aaed663b315a50291923ee6f87b0ccf18d60a1d714b3daccaf222736ac690bcae671911d99d50afcef73fdf91899a76b4c81c0f32bd5d6cc1d295a0112c3e0c9f2f7aefbbc8f11b3187e19d47f6aff70dab2e1c4f9205c2ebf7cdd2ae4966cbaf6005ed8c6e26f68824046785e9485d5fe2e0c38358d1b2d9b415f1d02e08a13ea4fcc68def03ceb12e3c70dfca8001f197ff3b1047a944a1d44a9879dc66ee7a1001587b057ca3f79cf002bcc3cdb98443dd0e5c8176edd56c3f2059b29886775c03e56886dc1f3732c3123ee253d906f89a2cd0759ea497ba2754de9511b23705b2336cf379a0d76cde7bf392645593554482dccdaa1c017b7d5e9b38a3fa82ff0b2292064e3768c0c889502e6b60598b57d0df5c93be7f3b1de15a46cfe14817a1e90cf50bec45a5d9d074d7799b42ecf0f2287ab11103031ad531e7b6eb2903984d3882c20f60959541329b982ede91123441e6f0b452cb8960b0f22a5b993a5018455410d6886086a3d513dd0330dfe7a17b0adbc447b500e94bb51ef2ab82b68bb3e191ccf2a8e354b7f5c2fd9c7ea6705b959e8cf920a7a367708ca7aab5dc3408451beae2a1c41a4499257efab8cbce1042c4a2ebde859ff16bec375508a504a783ce233dfa8d32b99c9ab6a96f4", 0x1000}, {&(0x7f0000001300)="927642794cfd6c085c0fe27ef3a1666f158b7e416f1dc45f3bc8aa31dee7c706a85921792305", 0x26}, {&(0x7f0000001340)="c8d2a94f653e6720a567a30b1f9d0394c77f", 0x12}, {&(0x7f0000001380)="f9370275a47d85fded3490de835b869f5eec08d0f8d8aa44bc8edd69f59aa7088c7c6eb85f63804aaff397d7ae47b842bf7819306181ee862ac773cd406f42ee34edb6c90d6d146b2fb7ca6b2dda504d559f6f9825691b281dbbdc14331a347c15372f0ebd8aad3e", 0x68}], 0x4, &(0x7f0000001500)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x28, 0x200000a0}}, {{&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000015c0)="ddcc86cedbb4a87882f1ce155ae3af141ca5bb319bdebb03569796aa8760f94c5a00fdad8a7afc353088ee761d49eca1f5ad40a53a1cd86efea5fa3156fa6f285311590584d6135b99651cd87695da0aa095a690545317c27edfb2681b642c6c1e872ba8ac2816e9be9e9623fd9398209811785e545dd36446f3d5ee14c8e581cbda2b53480d3e23f5a36325cb3f6038b660c9bf0d5877d308c8d249c05bc23d0c77122e7aa11665a8c8277767f82641ad64737b15cb518c9720c7c398dbdcb7e7668043a8053bafa69373a963872c428c9f6d28e04ae1", 0xd7}, {&(0x7f00000016c0)="09bc4ea671fed58c78f0cb46c7bacce146f7397d049159e71a15d8ae6f", 0x1d}, {&(0x7f0000001700)="99b63d7bcd6c48e86fdbaea14fa1ae08e99b420676b0ec9354aa70e8bb870e0229798009853730412a5d8604995ef10b3ac876f86e03908ab613d7956130475e5da92e6f39263f0ef41f69aa0ce8d65124128700d271783e227f7be29b9535f215084a733ae15fca8fb4734ea36312f32cd4146f4cd7bd9eae676ad25f4a10b07777f62a334dda7ec598a64116c460132bf119f410f3e5dbd40073994451c1192a21b0ff721dd6bfcf72dc6bc5615e3ac6bf517e179b55d7b57a1d17936c460508cc7d3a7e4b881d58726eee17fd1c5298cfb92bd094205d25aff2ba28017036a1bf48d837a1cdbf", 0xe8}], 0x3, &(0x7f0000001840)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x81}}, {{&(0x7f0000001880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001900)="52bace4135e9ce18504a32bbd8948cad7d53b4ad04e9b1873f409bfacc0eaf3780866a39564cc18bc25e42b61e09b5e5b6525d174ac896dc6ce6231aa73f90527032d7d5dafeada890f67a65bd91da19f66720e580c82693d7b03dff0cfd34245a1e8704086febfa8857871bfb2b932f51fafba99eb4340dbba6d7ba4b38e1670790d3ff", 0x84}, {&(0x7f00000019c0)="e3cc29fb1a2300b57eaf146a5b4481ec881c63053ee058d786f5ddb6def2a1b78a0a12b37d4f24c5f32e444111a2e2237dea3623817f62a23301510bdd290560165b165c017badd041525df0f140ac989fac9c6f4bb16ebc30dd1ea4d45b6dffa810ed02967f10d724db5dc790037b657354903fbd3be9e73bb06b3df3f55e86a0c3c21e7aa9a5334e10eada9604cec5abd038b0b2fe8199c75d23e627576871dec9cce00822ac5991294fa374f6a4f2338998ebbaa7e94f7d9f8334a40f8446", 0xc0}, {&(0x7f0000001a80)="ce3e307feeffc18a1a718b17797b15d9dfe9406b3229bba5700980c2ce9c43c44491a97ce5efab6920b17e89797131b999b278822f2c8e4205367114aca3114c318ece23ce42984fee31a85404fa0a0b37ef3a8dabc16786668e6ecc82bff995a127be5b3b731c2bd0cce63d15f26c6adc4331c372685741376ee6b7516f55a8d4d1e8ea35027e11028354203094633694229a22eee606b3711be359a0a8929177444c240700819f38cff50c6d71c6e7add2095c7c9c8639978e4f54fa7d0faa67f53858007a", 0xc6}, {&(0x7f0000001b80)="45c0729904eb4cdf77ec17934a4b2c3c7265befa9540f095d661f03bc2c8cd5a88e69f40a880978ce387cfb4ad90e7095f7fa7bb76fb34a45a01cb3412f26b002a3189065b5374f35da62d0440b990cb505a5a30c9c64794b87ecc19b07d6f5274f332490edddfbe10a059b4667616a376", 0x71}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4040000}}, {{&(0x7f0000001c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d00)="a7a228886be6579460596f3794ad25f37f9691a42f", 0x15}, {&(0x7f0000001d40)="379d4af385d86ec4f3c36352ead5221bc40d162c63200ac9523d92521028181503fcbd5e50b8224fa19dfb700eb59dd0e2bc0b98d0579c24abfdde387d2a71ad9777837a64fcf6cf50aae0c74b3a7072d2e4b4322be758db8b02ccb3d49b4a2089f41a484d5b24bc59e6a83c1e7d1ffe5ea631af3b46441d2119e06da2b5f6e6475096822d0cf35ef4900b57780ddae51b0f063bf2e043e806e57e2f5ef689b82ac91e72ee9c03d97b142a9427d01e2006000276fa9239179376d46397a9dc641113dabde7e1bcf9eadeb61a8a991bef73", 0xd1}, {&(0x7f0000001e40)="2e17a10aab0769b39069d545a15edf57749758bc5e37c88fe1b0e0a9d1136dd16eb15fb33f62479891eca82531a41eb4c93e2a0ae32bffb155ad62b4436857e4a5fd5a9ef1810668885ceacfbed65947bb3144d80cea8c8183b97d1c100d08f44d8b46cd10082361ff7c821f90dc51adbf8fb3d897c828af046467869f03e260bd96c06838a7ec183631f1c1e2278c890413d28dde0a14cf3629bb7bb4ec2baf6ae77d12a35f99195702d7bfa6f138a9f3886b4c1ea3b9193d98c2", 0xbb}], 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32], 0x60, 0x2}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002200)=[{&(0x7f00000020c0)="b9d4f8fec72f707d40411a9cf55a7eba33704b1b32f499f394d8d612d0fd7099d3ac34e812fbe959b4ccad9b28c3bd0b09dc081bb76c816716a5983c8d3680a9fbc4f231c5c54ad35da5916c6b0a43f2afc15bf2642c139e6f9ed97fd571258b83afe28de09124d72a726cb8b8e7145d2a8de21234ab305affeea44c01e14fd9cd2002c970138db712d9e4f092f11f02ca2251ca475f591dc645f851b6969f6f1c41dd1c76ac", 0xa6}, {&(0x7f0000002180)="56d95c2221005f94056be9bd2cdfa9076fb6a2bb645a934deb0f0afe0162b1563b056e2c14c2b41acf48863232ad222fc0ec4ea0319bc990f96a8d9bef9c891460c5c800b0cd973ea6", 0x49}], 0x2, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0, 0xc000}}, {{&(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000002f80)="ae16af4a46fcd81ba66d108ed819efd6f820ec00d721d21e78fef4e28c5ea96dff53ca5d2dfa0f49cb8d89952d59bbb7c1b98de5794b9e6d507476581e67f0bb4b2f095bbe64f881a9cb79def80e997c3f1d721effe9bf507f2c4783cba05b97e8311a34120c647345d63ffe7529e03ad02b312b0a945650ad0d0c275a124dae402154b21a296428098c51742f7fa85078047424b226d13d8caf5ea1bb84e3bceef1405d886db760e0ceff7b709cde19eeaac54fb001ae2bf5ebce", 0xbb}, {&(0x7f0000003040)="4b386f4ea55963ba0ac80429a76196dcc668d166fb9c01787ec6d24e9a844548ca1f492a6f5fc06739c68a0712c1f57b31a35b4958b32d048bec0c31d1e6e6c5e67f8d1ccd8657d354ebe6deef8566d239042a4f97", 0x55}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000040c0)="00ac48facee4a44207d1c96f177144bcfe3d07225eadb4cd3edc085f641de9862356", 0x22}, {&(0x7f0000004100)="d612d864f95f28642a44da7bb50097952975f0508b52e65939db", 0x1a}], 0x5, &(0x7f00000042c0)=[@rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x108}}, {{&(0x7f0000004400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004480)="eeda4dda85ad8058b6f2b8ec21cf77c3026434a11f171508f41e90a449500d7815b865148db717d8f4d2f7e7122b5b06c2ef9b8ab33772e54fdf7cfdf68fb1a50ea05980dad6f9e08c", 0x49}], 0x1, &(0x7f0000004700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf0, 0x8810}}, {{&(0x7f0000004800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004880)="ddd6b1b56823274868c82a9630c02e51b86a50661479b7025ba3284b559f575fef6b9ae67e536c6deb4adb8cdffb9760e15e012324fcdf0ef452b24bbdd133ee0833c5981f45df3b154d1ad2404b40d514649dc1047fd20ca2ac06bd51f83b9ed67b96c63f8797d661709cd93595b3b4", 0x70}, {&(0x7f0000004900)="93eaee49c7db91fb1b4b749a9fa8d33188439331b7e6fa2a902ad97c3e209880c7d1fc5b150b3e55d31ea52da96497cad28c3bc2846d61b447c2df532e2d4f0a4e3255b9e494b7995644ef724e7ae17810a0d66996fe0b", 0x57}, {&(0x7f0000004980)="f31459de0a05", 0x6}, {&(0x7f00000049c0)="36cebfe2106cae47ceccc98f94b07c0983e20a8ae81f5f0e8bff82faede9a17ef608ec593967e8df2675986cc19a8314a3a51ea3ebec0a27c4225ac9d69d4acedd11a4c0ac3bd012ff9bb805f5ea145c85a94a9146b5521449fbfd3a7cb679cfbd723ac4508cb678c0d36f3f8564920c4346d3084faecb6006ad017ad664f03b1a684d68a2be0f37d9d908cf86acff02e8b61bc82e453d8b336ef8155a4f87f577322ef8311a048472e5a1ca3ea20da042419e5825d659dc", 0xb8}, {&(0x7f0000004a80)="5bfc5a243ab2673138f216955f863e8d6e57d80ea287a1a3d7adc5557976a9e9e5ee74c78bf862f863e4be27c3357f36cbbb1e217dec1b3e0faf995e0c11caa605a656e85e1f07068f7f0050b4289da8a061cd01ca18b43b468be9793e1c39c24329f6000423cd9f71e520243965a5dcbde3c81a058d012283286339f975b8ebe438db9e8a540875735fb8ce4ecf0a688803ce272de1ed31df93df27da1608cc0f0b60364abe0bd2df1129212f50d977288303a4a32838a8cf28a08ad7c37c50536d727bf2b8ec4cfc0fd7e92dd0e484b32f3e881783833178ffd27f3e89924459", 0xe1}, {&(0x7f0000004b80)="b6054459441483e495ea23da93fcd9a3f362627c098411169ce45444a3ed629fecae379351a4", 0x26}], 0x6, &(0x7f0000009c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee00}}}], 0xa0, 0x8040}}], 0x8, 0x40) set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x3, 0x0, 0x5}, {0x6}, {0x5, 0x0, 0x7f, 0x9}]}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f0000000140)=[{0x80, 0x5, 0x9, 0xf6}, {0x6, 0x2, 0x0, 0xffff}, {0x7ff, 0xef, 0x20}, {0x200, 0x6, 0x6, 0x2}, {0x911, 0x9, 0x4, 0x80}, {0x20, 0x2, 0x0, 0x80}, {0x8000, 0x40, 0xff, 0x6}, {0x800, 0x1f, 0xff, 0x200}, {0x200, 0x0, 0xa2, 0x7fffffff}]}, 0x10) 10:52:05 executing program 4 (fault-call:4 fault-nth:8): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2142.497646][T14096] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2142.506056][T14096] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2142.514021][T14096] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2142.521986][T14096] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.529984][T14096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.537986][T14096] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 [ 2142.581810][T14110] FAULT_INJECTION: forcing a failure. [ 2142.581810][T14110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2142.594907][T14110] CPU: 1 PID: 14110 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2142.605059][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.615285][T14110] Call Trace: [ 2142.618562][T14110] dump_stack_lvl+0xb7/0x103 [ 2142.623152][T14110] dump_stack+0x11/0x1a [ 2142.627302][T14110] should_fail+0x23c/0x250 [ 2142.631716][T14110] should_fail_usercopy+0x16/0x20 [ 2142.636742][T14110] _copy_to_iter+0x131/0xbc0 [ 2142.641334][T14110] ? check_stack_object+0x61/0x70 [ 2142.646370][T14110] ? __virt_addr_valid+0x15a/0x1a0 [ 2142.651478][T14110] ? __check_object_size+0x253/0x310 [ 2142.656767][T14110] seq_read_iter+0x7f2/0x930 [ 2142.661367][T14110] seq_read+0x221/0x260 [ 2142.665521][T14110] ? seq_open+0xf0/0xf0 [ 2142.669705][T14110] proc_reg_read+0xe1/0x1b0 [ 2142.674234][T14110] do_iter_read+0x3b1/0x4b0 [ 2142.678802][T14110] do_preadv+0x13b/0x230 [ 2142.683070][T14110] ? fput+0x2d/0x130 [ 2142.686963][T14110] ? ksys_write+0x157/0x180 [ 2142.691475][T14110] __x64_sys_preadv+0x54/0x60 [ 2142.696151][T14110] do_syscall_64+0x3d/0x90 [ 2142.700568][T14110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2142.706526][T14110] RIP: 0033:0x4665e9 [ 2142.710414][T14110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:05 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 4 (fault-call:4 fault-nth:9): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2142.730021][T14110] RSP: 002b:00007f9fabd36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2142.738434][T14110] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2142.746476][T14110] RDX: 0000000000000004 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2142.754443][T14110] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.762411][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.770379][T14110] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 [ 2142.806874][T14123] FAULT_INJECTION: forcing a failure. [ 2142.806874][T14123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2142.820049][T14123] CPU: 1 PID: 14123 Comm: syz-executor.4 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2142.830196][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.840249][T14123] Call Trace: [ 2142.843518][T14123] dump_stack_lvl+0xb7/0x103 [ 2142.848104][T14123] dump_stack+0x11/0x1a [ 2142.852258][T14123] should_fail+0x23c/0x250 [ 2142.856775][T14123] should_fail_usercopy+0x16/0x20 [ 2142.861841][T14123] _copy_to_user+0x1c/0x90 [ 2142.866271][T14123] simple_read_from_buffer+0xab/0x120 [ 2142.871638][T14123] proc_fail_nth_read+0xf6/0x140 [ 2142.876656][T14123] ? rw_verify_area+0x136/0x250 [ 2142.881507][T14123] ? proc_fault_inject_write+0x200/0x200 [ 2142.887141][T14123] vfs_read+0x154/0x5d0 [ 2142.891375][T14123] ? __fget_light+0x21b/0x260 [ 2142.896043][T14123] ? __cond_resched+0x11/0x40 [ 2142.900756][T14123] ksys_read+0xce/0x180 [ 2142.904913][T14123] __x64_sys_read+0x3e/0x50 [ 2142.909429][T14123] do_syscall_64+0x3d/0x90 [ 2142.913901][T14123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2142.919860][T14123] RIP: 0033:0x41936c [ 2142.923750][T14123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2142.943514][T14123] RSP: 002b:00007f9fabd36170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 10:52:05 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 0 (fault-call:6 fault-nth:0): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000005bf80)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r4}, {r3, r5}, {}, {}, {r4, r5}, {r4}, {r4}, {}, {0x0, r5}, {r3}, {}, {}, {}, {r4}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r4}, {}, {}, {}, {}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4, r5}, {}, {r3, r5}, {}, {r3, r5}, {}, {0x0, r5}, {r3}, {}, {}, {}, {r3, r5}, {}, {r4}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {r4}, {}, {0x0, r5}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {r4}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r3}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {r4}, {r3}, {r3}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000045440)={0x0, ""/256, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f000005bf80)={r11, 0x0, "c6f8c2cb2599e9dc8fad9b890314908e6fad511bba74760dda3b78c0305311dc49e6b7b103d780133b7367ba99a94f25a04e251a8d58cbbf655fddf0021ffd2bbd7d5e7f2a0afb343c7cc008ce8f687cc3270e4df07328abfb83c33aa3815aaf8d4b05cffd91a8125fa76af126a40f7f1092609ae92d0dbbef3a65195d7ea7455a6cef5ba06f40f90a916153c51ac45a1d9cb847a346a9ecc0b7940ebe08741d9acc8c1bf380c0ea192033342c1f6ea74ff27b70ed47b5bbcbf04216d66e524eddd5692823ed23feab20ae447b918801dbe6c28cdafe4294f84ec2f893ba05454e784f783ed76d9a1da87f34467afcaeb97ae81e9ce74bda8f5dd5135a011522", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r10}, {r9, r11}, {}, {}, {r10, r11}, {r10}, {r10}, {}, {0x0, r11}, {r9}, {}, {}, {}, {r10}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r10}, {}, {}, {}, {}, {r9, r11}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10, r11}, {}, {r9, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r9}, {}, {}, {}, {r9, r11}, {}, {r10}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {r10}, {}, {0x0, r11}, {}, {}, {}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {r10}, {}, {0x0, r11}, {r10}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r9}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10, r11}, {}, {0x0, r11}, {r10}, {r9}, {r9}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045640)={0xf02f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6}, {r9}], 0x7, "4a55d5764823d3"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2142.951935][T14123] RAX: ffffffffffffffda RBX: 0000000000000259 RCX: 000000000041936c [ 2142.959918][T14123] RDX: 000000000000000f RSI: 00007f9fabd361e0 RDI: 0000000000000005 [ 2142.968047][T14123] RBP: 00007f9fabd361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.976098][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2142.984062][T14123] R13: 00007ffe41cc9a9f R14: 00007f9fabd36300 R15: 0000000000022000 10:52:05 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2143.055342][ C1] sd 0:0:1:0: [sg0] tag#2793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2143.065736][ C1] sd 0:0:1:0: [sg0] tag#2793 CDB: opcode=0xe5 (vendor) [ 2143.072654][ C1] sd 0:0:1:0: [sg0] tag#2793 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2143.082309][ C1] sd 0:0:1:0: [sg0] tag#2793 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2143.091890][ C1] sd 0:0:1:0: [sg0] tag#2793 CDB[20]: ba [ 2143.100653][T14140] FAULT_INJECTION: forcing a failure. [ 2143.100653][T14140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2143.113740][T14140] CPU: 0 PID: 14140 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2143.123914][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2143.133966][T14140] Call Trace: [ 2143.137238][T14140] dump_stack_lvl+0xb7/0x103 [ 2143.141829][T14140] dump_stack+0x11/0x1a [ 2143.145978][T14140] should_fail+0x23c/0x250 [ 2143.150474][T14140] should_fail_usercopy+0x16/0x20 10:52:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x8000000}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2143.155494][T14140] _copy_from_user+0x1c/0xd0 [ 2143.160073][T14140] io_submit_one+0x42/0x1350 [ 2143.164730][T14140] ? asm_exc_page_fault+0x1e/0x30 [ 2143.169753][T14140] ? __get_user_4+0x1c/0x30 [ 2143.174328][T14140] __se_sys_io_submit+0xf5/0x260 [ 2143.179260][T14140] __x64_sys_io_submit+0x3f/0x50 [ 2143.184194][T14140] do_syscall_64+0x3d/0x90 [ 2143.188606][T14140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2143.194491][T14140] RIP: 0033:0x4665e9 [ 2143.197347][ C1] sd 0:0:1:0: [sg0] tag#2802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2143.198372][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.208715][ C1] sd 0:0:1:0: [sg0] tag#2802 CDB: opcode=0xe5 (vendor) [ 2143.228352][T14140] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2143.228372][T14140] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2143.228384][T14140] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2143.235213][ C1] sd 0:0:1:0: [sg0] tag#2802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2143.243582][T14140] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2143.243595][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.243607][T14140] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2143.251566][ C1] sd 0:0:1:0: [sg0] tag#2802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2143.302539][ C1] sd 0:0:1:0: [sg0] tag#2802 CDB[20]: ba 10:52:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x8, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r2 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0xc}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004800)={0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000680005005a000016fe07000000000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x1c}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r4, 0x0, r6, 0x0, 0x33fe0, 0x0) 10:52:05 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x78}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:06 executing program 0 (fault-call:6 fault-nth:1): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x259}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2143.579714][T14176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36168 sclass=netlink_route_socket pid=14176 comm=syz-executor.1 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x20000094}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2143.713636][T14183] FAULT_INJECTION: forcing a failure. [ 2143.713636][T14183] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.726278][T14183] CPU: 0 PID: 14183 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2143.736473][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2143.746528][T14183] Call Trace: [ 2143.749819][T14183] dump_stack_lvl+0xb7/0x103 [ 2143.754420][T14183] dump_stack+0x11/0x1a [ 2143.758580][T14183] should_fail+0x23c/0x250 [ 2143.763000][T14183] ? io_submit_one+0xb0/0x1350 [ 2143.767774][T14183] __should_failslab+0x81/0x90 [ 2143.772543][T14183] should_failslab+0x5/0x20 [ 2143.777061][T14183] kmem_cache_alloc+0x46/0x2e0 [ 2143.781840][T14183] io_submit_one+0xb0/0x1350 [ 2143.786572][T14183] ? asm_exc_page_fault+0x1e/0x30 [ 2143.791775][T14183] __se_sys_io_submit+0xf5/0x260 [ 2143.796728][T14183] __x64_sys_io_submit+0x3f/0x50 [ 2143.801864][T14183] do_syscall_64+0x3d/0x90 [ 2143.806333][T14183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2143.812237][T14183] RIP: 0033:0x4665e9 [ 2143.816125][T14183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.835750][T14183] RSP: 002b:00007f8e66ca1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2143.844166][T14183] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2143.852144][T14183] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x7ffff000}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:06 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0x24}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:06 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2143.860116][T14183] RBP: 00007f8e66ca11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2143.868089][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.876075][T14183] R13: 00007ffdd3cf817f R14: 00007f8e66ca1300 R15: 0000000000022000 10:52:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x74001) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x301000, 0x8) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000480)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd850) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0x205}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:06 executing program 0 (fault-call:6 fault-nth:2): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:06 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201fdffffff0a000000ff45ac00000000000500080000000f00000002400000000063000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) fstat(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000001940)='./file0\x00', 0x101, 0x1, &(0x7f0000001a40)=[{&(0x7f0000001980)="819f47ac6399808b7c7c529bc91214f0b686dd18f293f6889d2557e592aaabd1767df1455c12fc3017011201166091f5e960c88c2eac417c5fdf89e41637850bf8c6a9e31e40554db12ed8bb0c1ea718e61c739b303df7fef4ea6c6fb1baf4ff5ce925600b8c4da84feb99eed2fb02544b15193e8ed1a06303f61c6585424e82eff72610f8271840b4f10efa478e89956d31d54676b661668c1aae8e7d79cea1d9992deb", 0xa4, 0x1b9}], 0x1108000, &(0x7f0000001b00)={[{'!'}, {'\x9c'}, {}, {'.'}], [{@fsname={'fsname', 0x3d, ']-'}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_eq={'euid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}]}) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x3, 0x7, 0x80000001) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/184, 0xb8}, {&(0x7f0000001700)=""/23, 0x17}, {&(0x7f0000001740)=""/1, 0x1}, {&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000001840)=""/20, 0x14}], 0x8, 0x1000, 0x8ff3655c) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000000100)={0x20, 0x0, 0x800, 0x78bd27, 0x255fdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x854) 10:52:06 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0x20000336}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2144.407457][T14224] loop1: detected capacity change from 0 to 1 [ 2144.443542][T14232] FAULT_INJECTION: forcing a failure. [ 2144.443542][T14232] name failslab, interval 1, probability 0, space 0, times 0 10:52:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f00000020c0), 0x0, 0xd9f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername(r4, &(0x7f0000001340)=@nl=@proc, &(0x7f00000001c0)=0x80) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000180)) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/109, 0x6d}], 0x4, 0x8, 0x3dda) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(0xffffffffffffffff, &(0x7f0000001b40)=[{&(0x7f00000013c0)="b2ca9dd90bbb88793f024371993b659963b2ae2f0bfab17cfca570b40912b24c81b94394a4320b9b97ae6ee464cef41fc5b5fbfc4fc3f598187842d6fdcfa557c83e7a1965fa5b807280e0fd6a9b277657749467cf38bbca9e1dab6a1405e4b60cf212d61c1b0db0298306d70dd6922a105882138cac41c61e0b15546b62ec87e7fd83522d129778b75876d38f64a14cf4eafb89b7ec8b0d5ad231b569fb9359651bbc406e0b8b880a4011ae7c904a6fc72572b1b83ced79b76af63fb6fe13b0ecf659f2ee13cfbc", 0xc8}, {&(0x7f00000014c0)="52bdbd9464e7c61d7058ae0ce0640d1cb16cd306c998eb148a89f9dec9c7dcec692b62da9f465f27d8b3e0c773bcd36431ca9533b975b2290fbbed989b984d2ae88759dafad08df42643f7e571b13eb2cb5939a686795c940565d800780448dce25fc2c8e490f9e54fcd6a07abcd6f87d10df6195b2443945d3aa56bd41c4f6545376d89e1b354d0f56e7156e76abb0fbd62b365e1bd4bdf6ad7685a6903640beb3ecfec281102a5d4d7006bff58b8ae88c92fdb9796f2e9859b48e28ff436dffc65da8d94844bff87eca4f22f3a930c399de69936da51d9945ac68c08b8c62fdb1378ce", 0xe4}, {&(0x7f00000015c0)="b8c86cc0a0e41c0278d8250b9454a950a6", 0x11}, {&(0x7f0000001600)="70554c06200854809c41397d3bf7bba10491b154fe57089d3434ee95e8fe711e531edf7158f1dc18664405ffd98f724670b06d23c8028de8d28482a013e2af440ca0c3b5dd286eb9e59d8bf9df479546dffb4fa709abaad70be2c3211408a8228f18809da7a9bc2bc848ae711c92df466d265a91899d730e319b9b98a07f29792f78d058489e855a4fb3d81db629062099b1e48759f4e094363cac512ddcb1f6eb95eaae2ca9f8c74dc8936c7aea6488e5570f741815fdf11b6ee155964907e29b02adc69c1357be4fa14c92ef", 0xcd}, {&(0x7f0000001700)="e1fb07360dddcc0a3156d2fe656582482564b01a9177d5c55df0ab6fb9a8cc16912b25643043e1f82fdad9fbe8d4e37a71c96822d986aeb735a5ac2b6433d6cd948e60625b8c6b4108833ebdcf6909531abbe928278dbba9e9281fe91fa0ebfc2baef11027c2ed6f72cb5fc240479afdce7bf17ed24493d8579aaaf451cc1e9cbdc30ab9f494268269d193e5ecce5b6502", 0x91}, {&(0x7f00000017c0)="fac6693e3bf2a9e0916db6b402f4259c4e137dc3f56033c3fca68cbd10340346fbb4ff4dad77fac371545ff1edec4c35891233", 0x33}, {&(0x7f0000001800)="66012c72179fbc31ff0e6fe14dba8f06c9a17771d397679cd39c7986e39f4ec7252871e0c26401e9a0eb5677d7c6d6ab68c6a564b30f8e69723598aa0a701973e4e1ef2adeb465fd4b6d7b454a55ece5aaa3f4d3d6d8308f20c0d7f32a3aa61b3c8ad99010277f958f314f6f12cd2041dc7ed0bfd44e79c98216aba3b68a4ecc9895b1ff7bb95c88c5405fc066f8d58cce3e44bb0dfc83544ff661c57455e0c37af87d79677804e37520eb3a3bbb565bdd188aac083be2ea7d6a57f74f282c00eb501fdc", 0xc4}, {&(0x7f0000001900)="0ac92ac24914c2c3a34ecfdca76f60f6b4452b8b02649d73298792df038b0ad3e1667e8e2b2ce407fa600d536eecfd6e7d58cc49899cd2d230170da521986c91b0a1295df8cb18579fbe4549c2b9f69a0bd908b91ab8599d5327dea91f9363afe83a7a4636b2abe8fd3841ba5027308b5b7b2988ca86086172440946cedde3875ec1bad31d045923f1919b0bf64a77664985a5625cd980929836d87fa5c9c26d1a3e4d69d0bb77033987b7753d19f67e8f09a8464c612e3c029673c8d7a27051268f1f2a0262052b9b5e87cef9905cb463bed21d2bca984ea88a34a3c6033261346ee06d378bd2468b3234a04a8ff8a32a48", 0xf2}, {&(0x7f0000001a00)="336a962f57c6ec6d2679044a0d57f006ae85cdd82c4f83f5a92d1e526c24b72d8b1d4601601d38e6fb891bdfdc6db947ac4dc69212a732ca00b7b9c4f18d407b9b9faf67bca054ee6cba785ffc2a10dc61f46c7c2469d9c4bd562f9c6a96be837a35eaea85aa13a527bbe7c73fd3cf2358f34b4634b94b5fd39657d585888ec3f9a70c1bc134e7470e37658fa276dd881834805b35b65ea6c0cacfd3934bcc07d7181e89f3be0d229507a86557f486af1669875c39ad49533c315e41b6b8d34c6f0a3f2861f89738a21adf1e7a", 0xcd}, {&(0x7f0000001b00)="1237daa5c93bd77ce630d9c45c27c934727c790f7d4eb1acaef65affd1", 0x1d}], 0xa) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) ftruncate(r1, 0x8) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:06 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0x7fffefac}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2144.456205][T14232] CPU: 0 PID: 14232 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2144.466351][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2144.476514][T14232] Call Trace: [ 2144.479797][T14232] dump_stack_lvl+0xb7/0x103 [ 2144.484387][T14232] dump_stack+0x11/0x1a [ 2144.488631][T14232] should_fail+0x23c/0x250 [ 2144.493047][T14232] __should_failslab+0x81/0x90 [ 2144.497803][T14232] ? __iomap_dio_rw+0xf2/0xa60 [ 2144.502621][T14232] should_failslab+0x5/0x20 [ 2144.507116][T14232] kmem_cache_alloc_trace+0x49/0x310 [ 2144.512405][T14232] __iomap_dio_rw+0xf2/0xa60 [ 2144.517011][T14232] ? __schedule+0x42a/0x670 [ 2144.521536][T14232] ? filemap_map_pages+0x819/0x870 [ 2144.526645][T14232] ? schedule+0x67/0x90 [ 2144.530803][T14232] ? __down_read_common+0x4b1/0x530 [ 2144.536002][T14232] iomap_dio_rw+0x30/0x70 [ 2144.540328][T14232] ext4_file_read_iter+0x21a/0x290 [ 2144.545436][T14232] aio_read+0x1c1/0x280 [ 2144.549590][T14232] ? should_fail+0xd6/0x250 10:52:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f40)=[{0x7f}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="a676084547ef559e3b608b39e17e1d9f0e82de5f223294d7eeb16908925651d9944d36163cce9de0d5b22963bad7d29dabb4eb59bb331c5bb0d12259b041c8912938c958096ed965ccf6c6aa43b476bab7fe780982567193a54abf30df429ea5ae2d38fe074f50e957eb13d8c7f8da754691e46b02e20182a85a913572dd4b7eb4bbee44c37f898fe283bf190601e787d6d2003b5a0dded53b65d964f31684c31ab6834c43d9aa67c846d0c482e92f4c5dd6052ae838fd10e34afc44f3f7f5e16d36fff4f120c4382f0b4c6b57d7522e3c59f0d436edf65eef78229ad47cc8b83ee1faf2ae4aa9f730284996387ab992459e74db80ae53dd9c2949916759cccbcdc0dd5082e0055207257bbc6395a5dc597601f7aba686e04e16c0bdeccc129f1deac21905ec92be893fa308a69823e8f0217a30b8e2f3a688eecc49e5f2e5de2e4f4403ee579ac9599c6c54e0e0bdca620194ab15b9a85f2264a136ba8c25a2fee890b26233ea8922d702f6c402f44616a19ca821f3d889d1c3c7b9abcdfa22dca627136ae1360ae518d8ba58b9347b421b559c1d4d4f2033625c6866c7ae1b3b7329f238971b9e3d169fba1e7f88dbae9f09bcd18c7e13cd7ad7df100ce3b20705aa31cd9f6038a65f14c77fc01344018e928658f631d0ce4c42426ff3b8ea2b8cc5727da9cc1d13cfad7ca61fe04768878974a5ab18001988d16f23763483581683a168c8df1ec226d14e43cb0bd439be21e84ea5f2eef5284117a8febe17b10a042fce1ae79f0e5a5d88621be4c5f28b648be26ff95b35317866867f937ae366bd2d5b46b9c1375d74d81c8782f9f7c02bf64491ab92f911ce94e27c3203b27ce54c8f789c85267f64416b47dc9a6a58e4bfae9d82b4d82c3424dd47b2e5f60ad93b8ce0944c15dc88934db7d876bed4ae3bfa2781907d6aa5d6c800e246863ce7dc087289fb214a5eb40b745f0bf6b31b16f90d9f1cdd82651ab37cac49a92bc1e8fd477ffcbd243708e79d110c2176d5ffe1529fd8eb822944ec71ad13cf220892389586a4cb3fc800f0cf5606e18514548d664843567a8ebd2cc81f805c7f0783ed33a0922ae2fbfeebd4cc4d5013e047ea4c545952c3915a5d406bda65d9c369bf6ac54639ac780b39b2130913de1d0174ac6e7f51ed530afbd952d2bc517bddae7d447524ee6f5961792edd24db97e577f27e347acaa3124df708304dd55d553fd6f9055fc4de8e7232ff130904830bc74bdb312b02d8da4363f282204ba6fb7f6b8a4ec7784a1ee7f74c9f78b49419df94862c70fecca90e7d70bb69655c9c07440d74765c98f51bcbee39e0509583485d5369b9ecad6048b78919b455d580b72fc82c4280814eaa66dfdf34334e98ebf30b82f0033ad8a58fbf04e4aa4799c69afe6cd20d5ed06cffdb8e4ada08216bf2ed40d94782e3558deca45501b877b0f5cd10f272b602e71e00b79bfabc1e22a752201b06909a07a8a559cc64e05a1ec95d613c05ca97048f0e0b3a9e7f227d86ea865a7dae039ebf0a093ae4ad6a43b61c62373b18e0d06d56fc9ed9654a8b2a2363566c56f6e2d51fdaf624f51fb7e715f469fe22b995ef60d1106c9784278e19c41034fe9cb05b81a501ff2dc422704a9a49dc0cddf62728e50d850700000000000000ded19e7a71300635e2ef5f9955be8ae4d7e8319077687c955ba12db3d6068545f17b714ecfa1b5c69c25fbe4e279e91d2d19a72452f4719814831e3ae4a05976a45f955d4bd6ea0d6fda797f3f215e799787907e063f000000000000007bd778e426d04e4562cb31b61093f5ee0e8a38fb8e58b498e2577117b2854f12aa92588d6a7f9368aae35de3b965a1a30f44520f783718b4c7cfa163c1acbda149e3664ab608b2a3dd2d4331b7b8042ab5c5227d9ed2f4c6eb8f4f383ad08bfa72dcc6f944a8f0edb37ba65c527e2cbc4e45516a42cbaf236fedd66cdf6c0c4068b8fb5880fa01c9c5aad3d556efecd55271893f374fc36495831f00a17190ef9b879de707b648f9e43689638507afedebaeef99404bcd58950b9d1a5ae1ddcdd0882ef725e03ac1c43ddaea9a7726b836cb64d363ae7062d8a539d16471d7160d7bc1f8707c9aa77240189393eea889ac19a4958c56e2fdc38a7e264e6effacb0202a22a505003a6fe2352fee85cebca1d8706d00f2be8826b261b5fe6ee75fa8fa38984445e1cd4c382cf2cfe14d7c542b14a637d05e729cde31f6ceac712394137e2bb408f61d9972173b295bab2a74564236b6b6e441eeb835659caaa54404fd4706d32bbf981ced48c6e82f9e9cede593c8e063a9a789ae38c47ff9d14cd855d6eb72ea7009efd3ce318aa8c96d7d6e82925d10090c04642af652ddd9732fd01f8cddf759cc9f79308a43588df227d79f7db8750d4498be9cd4eeaf2b12435704e67c156aa74eba00bdd241f7d23652895ea54743a12ffeb606cfaae88d14400cd230d55e112891ebc96ac90183be301564d7d2fdf3d4bb7160ea889fee98a47fb4f816a2fe0cb66809ebf8763306c71203f86d6d85e7c4bd3694f71354367c69b7053ed75ca15cd441e6caebdf4ec15f3eec4f86b1e3506048c52851406897d63fe54db0100ac6eed6cad0733c941c345da94d0c6f4eec92820dab06bc330e74f52c5858fc71862701ec3b690605fb460d1f6e46f99299b4cf3df8d65f87c4a2ef8d05fa4b3841482f4572fe4773cb548ae691f12a219de1902a644f238a9f38d9913790de484a1251e3b8399a10b3e73a4895e2ae57088f38524ebd5fd2be455ceeb16b5bcf5300cfedd1e326a862c0bf3e1bef531a6c7a5895c247b12b39d9952529de825f8a31282be28ede06b7a5062c4dfefee45c52a901504723c59983d8746e84c457f8fdd18f55379189b63e5b9baaadf9a117f98538c1015f5d1da113c74f63b59545658c1df48ff840a691efd84f835a92a0a6ba2d9a4fb09a0577bdb3f888fa5ddc0abe98cdda0f0a165878e19fb99372077a605cc91e91e0bfdbd09c7b6ffa9db203000000bc6d7e572b5b46decb2e28ff71593b5bc58d21f86ed46db4e0f142af07d53c1b405511da1c80d5db99b4957443ecaacfa6e66732bcdd609e9b4531f50f5619571aa738abf0cc61eb8973be69931a6fef7e52a19f70ad318d549b0c8c805922e81e6ada33a4b59a9af96b40e563b6b147d04fec6ef7029ae8246744cf2f803432223529ad6456b188f34c00ce0dc4863beb9be26ae19b590927712db57cde87f9aa13c23fca0d1ccdfb77eb2f987a8905627b294753124a4bd6c03df81bdf014d2ba8ad181e5ee6094635ec64f04d1932359bca717bf00101e06e23fd6aa73eecca651471d875b088b4fa5a4765a9ac30725ac4032cfa77ed55229d5efff09463913195d92c4956833f2c3132a9c08588882624839502b8e83b9f700fc95d38891c25cc0e47f5865005403907d75916a5b31694f627cd90dfa2878a6044b6283febda431180c84caf8b2dc73ea016124c668e9d650449c9d272b075aaa4fc2174ebc560c10db6a6c427086a498456b8a9adc05a67389e00d2dc429a865861fe241224d9d200e92dbb8605f76f347ea4bed15a0ebae4f434fad2069ee387465f96efd2d52affc44ab011b6aa8004393d59b7ef6fb0f13568eb20fb47d9007ca13267233b6862426565b75018d3bb63912d87053ed33ffd87c48ba6bf1d8c1c2fa7103b527077a83d00ffc5cb75a76bf8861090ff984a4de3354c0bf35719f5ffe3c2fb11035ec8a525e7f73997e337b195c2ef4f36ecf498b939d47297bec7b41480c8ccb6736e523c42ce4016caf7f7883ab62b44cbfbed0e4a621d44c67027f1b5be2cec6f086c4a73148f05c0a08046d1cb991fe11c43bbaa28e0746ff121cfbae5e6c9c04a2794019bafe704e058e6020dfdce967a6b86b569b8721fc172f9ffbe9a77e70e7a998772b6de720230a40b7a5796af6188c800b7fa06c54dd6be660a050781f8e03edae98532fef635dee9917145d831519e4b1e432ad926225bc4922214658cd0615760e1aa90b1c371811e475cbb69a3ee5392336afd2b8accfc204754ef95b362b0b2a229f1857a118c74cde213571b42f3a6340cd0b165712d7b47532e65a299d2d0c9a5661adfac383b8bd2a3fa625fec436516a9147be525f05577e485dd3d70076d94d2fddfee253963e4d7f9e9af4b3948a6757033ab65cbaabe09e4c2ee4e2803b97c84a109a4aa82ed72a1994c7ac159e7e6f5c26c11728ef65503127866a4c668379f82e8db5b8934f479aaf5df687bcc7933633471ab79443d69740cd880a5375e5ece1b05c41ccb70c7ef718fcb3667260f93b4c24478ed1c2112d3fa959b421c7e4e8bd75efc1014f6c8f69b1dd7993c4d04700a475118536de33b142f1f6b21a349527ffc7ef678a7b567c78192d0cf1c1ef95bb2665eaca4f2e63a0c8ed6d5955b26931d98b8b190c36b54c6f8ae670e706a97965dec5881b070fb1341aa47ee181da6f85681c21b1bad7f8191881d920983c2ff0e523adaf3123b0773d561859a54a6a77c0eccccfef8abb808120ce27c43476b1c978985ae42c680147f092502bbb1f0e37570f876db7215b68ff453eee673519cb1d0adfcfcc477ed5663955e7d20228d0bdcb9a5a855c6a7eac601c79d91ba01f1d8575b721951e908fa72c295dcea1eb57531748875713cc6a32b3712e701b22b15d3e53337fff2271ce43c8023cab1c26130b017949a16e213e8186e6df3a1b7ba3dd63c668c3fa6542133cd30546fe519ee1dcb40f487066d2e6118e8f96705abe25f288789f38bcf8eb695e16a2c00e61f5ad1593d3c33e150ecf1d6f5a561b9698bca30a19cb71572146ff2dc771b5ae9f0e26ef2491f93d8605df6d849f4cce05e4687a5a4ed4cafb51ee94ed070aa9bbc9ea3edcbe457b518cebfa3d206dac8ec464c9a4ebc74bd951e6c38f197a915fa7b25d9d82fc2fccc36c782a249e79d73be2fa17b5929c723b88cda6b7b5e09e988ce68714fb650d8c394ca3608f101a9fb203a4c85273609343264b8e0dffd91be57f04ad2b845ac0a3b525a5160dbfd1e467f55ffb4f2543acb63855434ba7e6721aaa18c7497a6966809c0732f72a23f0de99e285a798cdfd6a59324a0969860715a06e99b338aaf99aa88d2198b99970f7d5efb123c4a66dc05c4d8cc9a53eff3bdf01a1a3202e63fe4f79a634279d95a574921f9f25466f47f59b230dbc34fd205ba57815f26e7083bd90419e21eb643f5ca893e2405118d5d6ac3dc2bdf5974cec29c824826c8197674096aa911d04fad7d149d82f6aa32c4a07ab2dcaceb575c83969e34410c4448b6cae5282cb5ca2449185985f68f66831f1eda1a722e1d036565034bf340c02999eb334ae5b79b2ca556511c2490413dd3d551a47e6a10d802d4effa55b4284c5967a479509f4efc41668e40573e6b7054f8ba005efb1fc7ca4ad7b67034fd0e4a52a2d8c78b6814560231b643df0e010422d215c73af5159d2dd51bf805b5d3642a21161e99d7966b7cfb09b1b15a63005b5dc86799b860fd048e130f084c430127494e31678f31daacb2ce8befe6e50dffd7e466448a1db97ad21086ef7cd69241ca9e49b6f18ac0f72ebec5b326ae8ffa38e7137325290fb8a60964f99893cb9924f514d9c17a79a4fbaad0b0bca44502c0ff8b7bfd4f939c6e6edb33e765a6f066a4b2a191b815ed216864e2a9fb5d29de541a092ce67e32093cf3e8d88617f77e37104a7812d056c449d299e5ae7548a1513333870bd74012efbf125b269488ed1f64223d16b2cbc13646ef03e4c016fdc2e68990e6a657600a5730169b33da458a5d736b65bcef0513a5bcd5106a44d33f5c1367e51bfc11c89386c4e492707db87887e5b86c1dba5538fbf5391f5f450a9064b6dfb04f5e7a462277cbf6810e1adf7d64acba3d5e296f5c868cac1cfd76016ca31f52d1169826cf2b4dc548fa348c4c877f9ab4c5cd8fe90452d486d455f3312fa90d3cf031abb0c9ce4fe21496de73c4453770625096a76e7ec42de4e1d12074c68d26a2a143bc762209e77244fb62b8660a62251490e0e68ffc578d27c943632f5462ffe56a0811757d7a2a9ad5c690fd7a2118b5a9d0b266493cef716ef8308d61f4d4c8f2947599294b98f0664c7ba67d5080a67d01dd227e02ed92ac5e06a3a10fed4ea3ea109bf0f23ea44c108a31c56a82c296522328198f30f528927b59a6b38a0738bc055559b83f5be231a9137f16d4fd49611fd0f205afaad2ebe2487abd230a3de428529e18bdf20c9fe6e856607cfa83e5ba0d3eed7f6ab508358604a8e762553a884e07ec2a3b60adf543", @ANYRES64=r6, @ANYRESHEX, @ANYRES32=r5, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r4], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x8, 0x0, {0x5, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x20000000, 0x7, 0x1, 0xfffffffffffffffe, 0xa4d]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0xb, 0x4, 0x0, 0x2, 0x0, 0xd71]}, {0x9, @usage=0xe1, r8, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x487, @usage=0x7, 0x2, 0x3, [0xfff, 0xb74, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r2}, r6, 0x6, @inherit={0x88, &(0x7f0000000100)={0x4645e2ae752c5674, 0x8, 0x7, 0x1, {0x9, 0x20, 0x0, 0x7, 0x2}, [0x3, 0x4, 0x15, 0x6, 0x0, 0x1, 0x0, 0x1]}}, @devid=r8}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000240)={{r1}, r6, 0x4, @unused=[0x8, 0x0, 0x108, 0x1000], @name="b153bd53fc61c5bb960e66d18fe70f78dbbe37f4e416ba78b79162b0c7da114045478ac154026ba40f7f33d2853605d9ce1187c73593d8218c949c85a02ed1ec9d50299a05fa9521159f1d0be9d5110259b8c89c43790a31781d6e25a732e6430e56f688659027a01d41be058e66bcf79563e9674c70a3f14ea3f22fb44e2e6084c11b9ba1739cfd4340614e6d660942dec84e025c52f3c46fcd802a6d9693e68875dfc6a77f74d741c99de5a3b0c8c011039df45a1055985c14175e865bb90f026399148c31baa5524d14392d510310b58249c887cf2e9edd3569c87e737fc3e900f1edcde79865fc2bd8d71cd14d145b7da5c9d1da43b7351c0b5ab6919de7a9ef3c98bdf74e95ad9613cffadb24fd9cc867d2406c62c8a063d726a744ef59a0834c2ed6fbc67eb2ab1d2800b921cc47a61f329152d9140440532c031481c30b66c3fd0897460ec0887980bc4f924941e51c56ca2b21d8e7847b755fa98f523fd9319606302852497df7960d64a1e576da1089162fc140b20a2d73a6de12fed08669482a12f1c55b4bf58122a9ddadc3e557f8d6c2d6306ef6eb1f7d355b74ba7f33d8ddd614702436c7d71ff18a6b830ce7cfc0ff9d881f0a80b32a1f1d965f6d036aa1734122dc625dad492036ed7e5970c097e9fe95103a196f424f7a17ee54c8e47dea1795a3f6c9274433adc8bd59a12f1a5a2f700c2b7655af4458c932eeea10b50684371965a1498b8246a384fc31d862e60a46a3fab123c8455377cae13ae7c95de6eed53bc4c7e51b04fe91f0ce8b76aa06ba53242adde2eb0a087bdbec7ae2094234073b2a82d04b656003111eb77fd102280caa88e261e991449cfe3918b78fe7b7e64e560a5c6f226b1076cd15acc0a8e0e4ab2dbf711ea4e72c009c658b82d4d1bfe6dcb3a9acb8e10f574e9fdb03347d5af8d195aff3957bfeec805cf36be3ebd08b01d5f48e38b52c831b7752e8088d8e935c6f09053598c17a954d60e89fbac9de100f1ae716b2f948d550da44648fc5cf9112fc7781bbaf9af5123433e741d6718986d64b9158e03c56243671ae8762232037bdd819363e9d1f48ae8f317139a9101906780469cdd0e344210a9fe04b30c328a5449249071d10be091c8b5d93b834df74cb5509fa14aac2b6f8fcc4233f04433b64dfeefe82dd9c730e0f03e62cfc47ae30ff658621a5bd5525c078511395e0136d330f4f3fa9dbaece67afbf1f7983be85e72d0d04d179841957881bbe74fd4f4cc9c3ee5ca5a411723f5a8b01d32e7893ebec8e4c332db86597d8121313e0c72a6fc348d25457362111f406d3788ee5423dd7611b434a881443ca704b00617f84e0778f5e1921a77a3b510a86296ad3abebab73d203ac7d222852c4f751b6ed2de5e63962900063cc0ac0daba51b3bbd92545a00792cbd40a645638c29106bc31c04cd7141534fb4be2d2be2afa3f2948439d43266ddf484b17517bba5c3b38230e64d7d03a84b7622c7c42a9de0d49dc3210a278dea8a808b29b97ac28762eefe3445dc2f928adcd8d9fbaed664976e82d9d48a0b2f8f6a27e1b2e5c81ac8c06f9325470325ac4d95ddaddf25d21635a11b70b80180bc2b9140baa704342c811fdb20f48eb9ad76b082cc3df855919544b5ab3bde81b4e182d927fb6dfb619829b66c87ac71537fa999f143c95e32c2d8b73d5668ad428394a1d9f8fb6d9777686d9d59a33fad970cc2a19c6565dd1a1eff1ee5d73c6e24f5a1ffc38459a88789217ac0f388f2e51f4e839a1abfa62a60ef43e87026c03974964b8ab5001a75154243221648536b8f635e139978595f4e7edcff38b671d03d970661a9904445ee00518d873cec7e806e12f8bc977224fd607adac2115c91cf1f14cd4bbda85ca97e2ab978a13db9049890d2133fec1c047c480b4e630995b55f0c2da252421901e6b3b67e961872713b8c53e7687249170c70237b4536464b9a90ba11b0265f6a318d41c3f21284e16a7c3de4fb70e1e1af7c6ba0ba292d42f2c6cc822c0bef94249dd91595b2a5e1b14be7bfe8ee618e821886d381c3af873eab2a91da9515f3ddab27e4239a28fe8093d1812745f5ea393dea614b81430f8e7e88dc4a6a99b64de4d9301853921aae621d066bd2d73642064df3df0f4c62a06fb4c827225d16a56c793de388d148c4f3830393543e428b53f756bec9a7a836681e19b160a766c764be91433e25955e3f68f856cb02f0a54d81c84f0f1f03acbd98041b7a407360f6a3dad84e1d3dcccac9d8877b3aa0f38e93d625f1e40e6814b9e28ef30820c1fd996e9e17b7b2e131abd194e6c652e6191a84731ad9f798f72217aafab33f548983dbc6cb690e0fc52e9ae64de98074590b3c4e729dbeaae53ec547ea7f16277b9bfe2b8702073e919d31199a9eb968be9908950fea87a497140288b95e04a3c92bac7fcf598d250dd10cb81036216485bcb8a05f2b69a927a805ada855c10b3dcca41eb241c5dbcc66ee6defaf5f6189c36af4f9d67b4299d01867f3fc9da2d9b2bf474eb8d653e429030aea0b1443fbd51680771d8322bdeee0ab1abcabefe50736f445d66a59c2cd73f6db8f9675ad3beb0f7833d78521c3c2a0de44247b66310abb342e5d8746c847ba45db3fc74976ca9b01b2b389578fc9f2fc808cf41594dc299181475c7bbe324bde4176fdc1365fe06e554ec942eb3c25ead4d6b463905770f19b381a81a3c999dfe813ba2f5b9528588a8822dd00ec3332f767ab2dc1bc7a0777364f7cf87ea163eeeb6e32c9ff07c14c51136c43ef83329c757d1f2d3f1117712613f88e7c74c1c05a74c73470d2c61af41def1f9123077a67beb659becb353095e5e71ca3868f9a053d76de76cd4c05348c984e92fa4d73d3ed3a9f591d9adb97b73a59c8f6d9827eb629ad3482f6c5e7818e8603a820ddd8cf7be008b0a965ae26f43f1626a104f5e9da5642c8374564d8e29f17ee9081cd8b5eed544e9192d249a2283f958814963ac96a1019f796cebd3c0eef7a176c80ac40875a537c5a87a70c6b231e214f1be0eb7c53a5c149b7bf6a957f92e33508dbac52798e05f3a38e324b320728eb7a24462bef668ff547e5a295cf33ea43591a5e0a23d335865752fcb588577de3faf64ef3f7be5e05ef5b095f8761a984b0e907915816cf842d82bf4dd8d65985829e97a3a049eb0f1a1d46102967380124e3f8930b3c4bc42ab93c8a05ef0c97fec0c9f2a82168f3db8b24ac548df5a5b170c974f9fdcf5343d629d9682d9906dc8286432458f822802ecb3ce27244ee2647d1d62d03dc83fae5628b3e13ee52426e7c348057dc131ed5df09ecbe8c621023a68e65050a0d21214fc10cf79defe3474eb9d24e251cd57c19ba90239225c76fed78b15ec2ddeab2e64f19d9752bb07c815707c1710f7d3595fd064ddadd3ef0e82270998c3ba38a8cee8c4b1289baa6179751f1b1ed88c551f4fc105b5d56e05540d71384dd7c8ebdea50151f2a1aa28128a52595e91faed2b6a884d80ad8109b1b2d994fa5625b193bab55a31082821f5781b66c1e5d706dfb73c3ab2049e63eff1491e513299bb10faa095f5bbb443f8dcb53c6c3f6f7ca18cd38d674331c92866cafa8af334883934dc87ce113f44ac87ccb3a1066b01a195c9aca0e83fbbfb5543bda1e3678ad47b1a442af52fd8c42a8e31ed091ea0503ae459e5610f8c82b0fc5887208f5e272906c5881af86f21d4bb10a4e89c97fe2cb5a6b61cd2de6a7d77d29bcc41fd5e2b179a610dbf11d220bb824aa5f7948e9e73ab75deb3c5c8a07b1371f366174bc23a742c0b719473aeab7eee114861994cd1ccce00509836bd5f38494273afd819a8434f198104a755aceba538ab89d9d5467719fd65b29eb8c21701d901c0a05d4d9d3f3ebc38ceec0fed2f754ccf088de9e9aabfc2ed498d597ba1f9c8fcbaff2acaf155480121e5594973d08cc218043944ca866195e5360f0ea2e16e3bd52703b2cd16a82108a44bab587fa4ca80b04f75d3dda1b8592df3c4f67a315fdf2efa6104cad2b9f500f4f4ae43b8c88d6aee9b567835b90878ef4b74999de640ae2badd8d16dafb605c68b9540d2da2370086120a02690bfc1b1b044e14b392d810546137f453610af0df9fa9db9f4cb864f657dc58adc73a25d83c1f9fc1f4870dc59cf9bc6760ece1e3c455e5057b616aa01962e45d97ac3fe4b500125457268c6afcb03753b365a9fb006a0040e59da52caa0c518598fbc42d9ca50660f7b776d993321c57b221bcfd20ed5336091043afa712e4d3e5fd784d2a8671d1bb8cc3f118455203c6369a877542e4ee84b7b05df9f5f5b9d0f931da6213bbb6a6819552be674af741f388f6e9f9dcf9aa55e74835f4f1f59d3e13846027e313885360a807dfbfe96317593b4a9ce8011171c68ad65a32ec1aa3f1f452648ffc8c32d00e3560bbb2e95bdb45c8ae3153e72143c92f1099a961581ff517fcac80b0e00f8d7725fe4d3178b7453b6b0e3eccef72da62e523b418c546dafdd62288d70e6ca795aad9d4e0701d44b8cdf994d592cc9c1badf2749260b26a65cd4bc7880bddc331b8f9e67ae36d4a333ec982471270e7dcc9de1dfb9ad2d3b7d479e63397075b3d75fd7ea794b3f8c7fc1e5f5aeee22e278e6e78e1c9e2f41c575ed7e22cc796705e2c2c0ec0a5673e3f0c9b66889990d12d5ee56fac3a1f1bac7dd2702f4be54f9216402f3bc7fc2dfccc59540ae916f284b274e2ce14f9148a15d6ff7f3fbb4c21c87ee46e3cf68bb4e4d39c56e1fb53f40e948238af134ae72ca3a1141e65a02aea550a603889216b30b17cdfc72cb6ab8a0a164a5cb573df91eea6576c609a9992ba33a612c58d1249549bb5d75ccb413183e000a4f6bcde70fc31ac8593271000c314280491cf2962ab6f85e8120f29066a6c6f64c48e429c6dafb85daa193288ede4fed96bce62faee0e8881efcd4421f5d285fe619847e26c6a5776d22fc12d4f28fc6a728d8363c69e989d5f378613c4a8dd7ce01857ce02d658b48f17e3e5df65c3bda74a016cca395cdcd0f964bbb3d84eb56a67409353c1f2e396411871124b19973a892bfd6370154be5e1a117bf4be3596491346dc400cad48c491eec74a6afcb45e677c01ef7432ed6ce20f5ae7c5cbb578d0d96a05060580a40a5f7c4db1cc014563fd5b16b6162186ba5d4bb4e3c3aaaaced11e73312227593f1a2cc0d9f4146bf40d93c449dafa2658c9f3ff8573a72ed6025c1a7fc6def3c7b3aa49b394bff9394ef927df8375bfd69fc1b67061c67064f15eeee4f942d82cadbefc637b53d72cf96839ef3818ccab2ebea35f4f3e1687af3bbde1e160915cb91537e89db39cc9686bf4bdd31d9c7438536046fc75858a01c4ac4fb30230a016af434b62225be11fc93a5a2f4d02d0a688830183e137495d8e4c607100e99f34b36973588e8a930d2da7632dab0602f267cad2ded4f1ef302210a8770795bef1fbf43ffec1150af83b8a2f2e90c0ab787ce3e8993e7ad454fa24bbed99f34ea5cf47f21b3e9968998fd28f9f139279f8b5761053bebc0c40245d0a756b1aa71e5f3e706386897693665e22c29250a5676959a229855c0c517d8bb7448fbc42e0b73ae255db637d243b22899e7c1e34b1fcced4a4c96d6c03890a68c5dd776d7bef68baf9f3dc2370092bea57c4ac90cc4e23a12fd291d04be4ce"}) read$eventfd(r0, &(0x7f0000000100), 0x7c) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{}, 0xa, &(0x7f0000000040)=[0x63358f8a, 0x2708, 0xfff, 0x8c02, 0x2, 0x9b8, 0x6, 0x9, 0x3ff, 0x7f], 0x12c, 0x6, [0x4, 0x6, 0x1ff, 0x5]}) 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0x1e}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2144.554093][T14232] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2144.559137][T14232] io_submit_one+0x7fb/0x1350 [ 2144.564016][T14232] __se_sys_io_submit+0xf5/0x260 [ 2144.569134][T14232] __x64_sys_io_submit+0x3f/0x50 [ 2144.574107][T14232] do_syscall_64+0x3d/0x90 [ 2144.578523][T14232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2144.584544][T14232] RIP: 0033:0x4665e9 [ 2144.588433][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0x10f}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2144.608268][T14232] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2144.616683][T14232] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2144.624653][T14232] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2144.632620][T14232] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2144.640581][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2144.648544][T14232] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0x200001fe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:07 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2144.680748][T14224] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 2144.686124][T14224] loop1: partition table partially beyond EOD, truncated [ 2144.695078][T14224] loop1: p1 start 10 is beyond EOD, truncated [ 2144.701180][T14224] loop1: p2 start 983040 is beyond EOD, truncated [ 2144.707627][T14224] loop1: p3 start 225 is beyond EOD, truncated [ 2144.713770][T14224] loop1: p4 size 2 extends beyond EOD, truncated [ 2144.768448][T14224] loop1: p5 start 10 is beyond EOD, truncated [ 2144.774546][T14224] loop1: p6 start 225 is beyond EOD, truncated [ 2144.782261][ T1040] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 2144.787541][ T1040] loop1: partition table partially beyond EOD, truncated [ 2144.795285][ T1040] loop1: p1 start 10 is beyond EOD, truncated [ 2144.801467][ T1040] loop1: p2 start 983040 is beyond EOD, truncated [ 2144.807890][ T1040] loop1: p3 start 225 is beyond EOD, truncated 10:52:07 executing program 0 (fault-call:6 fault-nth:3): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:07 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2144.814033][ T1040] loop1: p4 size 2 extends beyond EOD, truncated [ 2144.823328][ T1040] loop1: p5 start 10 is beyond EOD, truncated [ 2144.829428][ T1040] loop1: p6 start 225 is beyond EOD, truncated 10:52:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="63476536636b60737492694f76dbdf0600000075a6e15d61b001df2764ff07000000000000001a746457807889187761228ae045a14f1554e0334d817cbc329531d0b6d02fe0f31f80401909dbb00b8185cd04ad623080023260d7c2ff6c0167c07e973ae31d4fd6c7cdd17e5b9c22bd26f9b788a8188eccdca7784b49acb214ea26eda28a0a67974b3eb04890597112badc294c8cc4f7903283ac548c732fad43203a56a2819624491e58b4d6210b5ad557126af7f6a15a383c15cc96ba923196ac04adf879df1d90bc3a9ad9e917dfd6c38b14407995fbafd145d69deea14e574576ef4fe52261b905205184e0709751d2aa96282f23e288cb0f8e0f00"]) chdir(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 10:52:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000, 0x12, r0, 0xfdffd000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000040), 0x0, 0x0, 0x4db3ab6a) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000240)={{r0}, 0x0, 0x0, @unused=[0xfffffffffffffff8, 0xff, 0xb507, 0x4], @name="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"}) 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0x7fffeeb6}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2144.886065][T14297] FAULT_INJECTION: forcing a failure. [ 2144.886065][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.898761][T14297] CPU: 0 PID: 14297 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2144.908955][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2144.919104][T14297] Call Trace: [ 2144.920922][T14302] loop1: detected capacity change from 0 to 270 [ 2144.922397][T14297] dump_stack_lvl+0xb7/0x103 [ 2144.933372][T14297] dump_stack+0x11/0x1a [ 2144.937531][T14297] should_fail+0x23c/0x250 [ 2144.942034][T14297] ? mempool_alloc_slab+0x16/0x20 [ 2144.947096][T14297] __should_failslab+0x81/0x90 [ 2144.951862][T14297] should_failslab+0x5/0x20 [ 2144.956366][T14297] kmem_cache_alloc+0x46/0x2e0 [ 2144.961161][T14297] mempool_alloc_slab+0x16/0x20 [ 2144.962987][T14302] FAT-fs (loop1): Unrecognized mount option "cGe6ck`st’iOvÛß" or missing value [ 2144.966066][T14297] ? mempool_free+0x130/0x130 [ 2144.979736][T14297] mempool_alloc+0x8c/0x300 [ 2144.984236][T14297] ? percpu_counter_add_batch+0x69/0xd0 [ 2144.989925][T14297] ? ext4_es_lookup_extent+0x36b/0x490 [ 2144.995389][T14297] bio_alloc_bioset+0xcc/0x480 [ 2145.000225][T14297] ? iov_iter_alignment+0x13b/0x370 [ 2145.005499][T14297] ? iov_iter_npages+0x10f/0x390 [ 2145.010448][T14297] ? iomap_dio_bio_actor+0x469/0xb50 [ 2145.015737][T14297] iomap_dio_bio_actor+0x511/0xb50 [ 2145.020870][T14297] iomap_dio_actor+0x26e/0x3b0 [ 2145.025613][T14297] iomap_apply+0x1df/0x400 [ 2145.030012][T14297] __iomap_dio_rw+0x62e/0xa60 [ 2145.034679][T14297] ? __iomap_dio_rw+0xa60/0xa60 [ 2145.039583][T14297] iomap_dio_rw+0x30/0x70 [ 2145.043974][T14297] ext4_file_read_iter+0x21a/0x290 [ 2145.049117][T14297] aio_read+0x1c1/0x280 [ 2145.053260][T14297] ? should_fail+0xd6/0x250 [ 2145.057874][T14297] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2145.062934][T14297] io_submit_one+0x7fb/0x1350 [ 2145.067594][T14297] __se_sys_io_submit+0xf5/0x260 [ 2145.072595][T14297] __x64_sys_io_submit+0x3f/0x50 [ 2145.077534][T14297] do_syscall_64+0x3d/0x90 [ 2145.082057][T14297] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2145.088074][T14297] RIP: 0033:0x4665e9 [ 2145.091992][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2145.111664][T14297] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2145.120072][T14297] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2145.128337][T14297] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x50}], 0x4, 0x0, 0x0) 10:52:07 executing program 1: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14000102, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c190000ce1900000f000000110000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x4c0000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chroot(0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 10:52:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000240)=ANY=[@ANYBLOB="4067e0a9089318c17326f65112b249da9749dafbd3909f58d32aea9b5717a3dc461fdba0eaa536ae0faa11b2c023c3421f55f280e091b93b148176fc2c89887a471ce22b18b41ea632d161e9a9b29362c318bdbba6a7a30b20be7dc656a09d073e160998a2a796e6cdb597b52421dbef49d1621e0211b1fe89190c2d1271bdba"], 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@sha1={0x1, "e219ac47fffd9efd0003268d855a62471fc67d80"}, 0x15, 0x76836913eac0c713) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2145.136290][T14297] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2145.144249][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2145.152298][T14297] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:07 executing program 2: r0 = getpid() ptrace$cont(0x18, r0, 0x5749, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x3) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x7c) [ 2145.202458][T14319] loop1: detected capacity change from 0 to 264192 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x20000391}], 0x4, 0x0, 0x0) 10:52:07 executing program 0 (fault-call:6 fault-nth:4): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2145.271682][T14319] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 10:52:07 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:07 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) read$eventfd(r2, &(0x7f0000000040), 0x8) [ 2145.315935][T14319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 10:52:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x7fffedf8}], 0x4, 0x0, 0x0) [ 2145.395472][T14351] FAULT_INJECTION: forcing a failure. [ 2145.395472][T14351] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.408127][T14351] CPU: 0 PID: 14351 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2145.418271][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2145.428318][T14351] Call Trace: [ 2145.431724][T14351] dump_stack_lvl+0xb7/0x103 [ 2145.436307][T14351] dump_stack+0x11/0x1a [ 2145.440455][T14351] should_fail+0x23c/0x250 [ 2145.444872][T14351] ? bio_alloc_bioset+0x27d/0x480 [ 2145.449964][T14351] __should_failslab+0x81/0x90 [ 2145.454759][T14351] should_failslab+0x5/0x20 [ 2145.459249][T14351] kmem_cache_alloc+0x46/0x2e0 [ 2145.464012][T14351] ? ext4_es_lookup_extent+0x36b/0x490 [ 2145.469478][T14351] bio_alloc_bioset+0x27d/0x480 [ 2145.474471][T14351] iomap_dio_bio_actor+0x511/0xb50 [ 2145.479670][T14351] iomap_dio_actor+0x26e/0x3b0 [ 2145.484583][T14351] iomap_apply+0x1df/0x400 [ 2145.488982][T14351] __iomap_dio_rw+0x62e/0xa60 [ 2145.493684][T14351] ? __iomap_dio_rw+0xa60/0xa60 [ 2145.498520][T14351] iomap_dio_rw+0x30/0x70 [ 2145.502922][T14351] ext4_file_read_iter+0x21a/0x290 [ 2145.508142][T14351] aio_read+0x1c1/0x280 [ 2145.512381][T14351] ? should_fail+0xd6/0x250 [ 2145.516990][T14351] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2145.522013][T14351] io_submit_one+0x7fb/0x1350 [ 2145.526810][T14351] __se_sys_io_submit+0xf5/0x260 [ 2145.531732][T14351] __x64_sys_io_submit+0x3f/0x50 [ 2145.536697][T14351] do_syscall_64+0x3d/0x90 [ 2145.541194][T14351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2145.547100][T14351] RIP: 0033:0x4665e9 [ 2145.551036][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2145.570634][T14351] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2145.579135][T14351] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2145.587089][T14351] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x3, 0x0, 0x0) 10:52:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000480)=""/25, 0x19}], 0x4, 0xd9f, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000200000008000000", 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x79a0d9de16943b12, 0x20010, r3, 0x82d27000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40002, 0x11c) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x6000000, 0x6) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', &(0x7f0000000240)=""/143, 0x8f) [ 2145.595042][T14351] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2145.602989][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2145.610936][T14351] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x5, 0x0, 0x0) 10:52:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0xc9ab) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@remote}, {@in6=@empty}, @in6=@empty}}, 0xf0}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) setreuid(0x0, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:52:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = socket$inet6(0xa, 0x2, 0xfe17) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) r6 = fsmount(r0, 0x1, 0x5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_setup(0x6af2, &(0x7f0000000240)={0x0, 0x2f0f, 0x4, 0x2, 0x31e, 0x0, r6}, &(0x7f0000645000/0x4000)=nil, &(0x7f0000136000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, 0x1}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f0000000080)="79ef3bf5340e4f910385b7a1dc77bd12c921916d13c55fa8205adaaf068009e4cf0510b51b427cd6ed07351039a82f2a2eac5b69008b4a551943a32a1d8a2719870fa6117f349e181837d93444c43e2fdb2992da583074", 0x57, 0x8000, 0x1, {0x0, r7}}, 0x200) r9 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xa, 0x1, {0x0, r12, r3}}, 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) openat(r1, &(0x7f0000000040)='./file0\x00', 0x200200, 0x6) 10:52:08 executing program 0 (fault-call:6 fault-nth:5): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x6, 0x0, 0x0) 10:52:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) ioctl(r1, 0x5452, 0x0) [ 2145.811821][T14394] FAULT_INJECTION: forcing a failure. [ 2145.811821][T14394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2145.825058][T14394] CPU: 0 PID: 14394 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2145.835299][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2145.845374][T14394] Call Trace: [ 2145.848645][T14394] dump_stack_lvl+0xb7/0x103 [ 2145.853228][T14394] dump_stack+0x11/0x1a [ 2145.857377][T14394] should_fail+0x23c/0x250 [ 2145.861796][T14394] __alloc_pages+0x102/0x320 [ 2145.866387][T14394] alloc_pages_vma+0x513/0x680 [ 2145.871154][T14394] do_anonymous_page+0x16e/0x8a0 [ 2145.876090][T14394] handle_mm_fault+0x98f/0x1a50 [ 2145.880969][T14394] ? follow_page_mask+0x93f/0x1040 [ 2145.886123][T14394] __get_user_pages+0x32b/0xbc0 [ 2145.891231][T14394] get_user_pages_unlocked+0x175/0x630 [ 2145.896771][T14394] ? gup_pte_range+0x429/0x620 [ 2145.901533][T14394] __gup_longterm_unlocked+0x47/0x100 [ 2145.906905][T14394] internal_get_user_pages_fast+0x763/0x860 [ 2145.912854][T14394] get_user_pages_fast+0x5d/0x80 [ 2145.917873][T14394] iov_iter_get_pages+0x199/0x7e0 [ 2145.922897][T14394] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2145.927931][T14394] ? mempool_alloc_slab+0x16/0x20 [ 2145.933044][T14394] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2145.938402][T14394] ? bio_alloc_bioset+0x402/0x480 [ 2145.943435][T14394] iomap_dio_bio_actor+0x673/0xb50 [ 2145.948533][T14394] iomap_dio_actor+0x26e/0x3b0 [ 2145.953281][T14394] iomap_apply+0x1df/0x400 [ 2145.957687][T14394] __iomap_dio_rw+0x62e/0xa60 [ 2145.962348][T14394] ? __iomap_dio_rw+0xa60/0xa60 [ 2145.967183][T14394] iomap_dio_rw+0x30/0x70 [ 2145.971681][T14394] ext4_file_read_iter+0x21a/0x290 [ 2145.976827][T14394] aio_read+0x1c1/0x280 [ 2145.980967][T14394] ? should_fail+0xd6/0x250 [ 2145.985457][T14394] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2145.990565][T14394] io_submit_one+0x7fb/0x1350 [ 2145.995318][T14394] __se_sys_io_submit+0xf5/0x260 [ 2146.000352][T14394] __x64_sys_io_submit+0x3f/0x50 [ 2146.005298][T14394] do_syscall_64+0x3d/0x90 [ 2146.009720][T14394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2146.015597][T14394] RIP: 0033:0x4665e9 [ 2146.019732][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2146.039329][T14394] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2146.048209][T14394] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2146.056176][T14394] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2146.064131][T14394] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2146.072081][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2146.080110][T14394] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:08 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x8, 0x0, 0x0) 10:52:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f40)=[{0x7f}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES64=r6, @ANYRESHEX, @ANYRES32=r5, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r4], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x8, 0x0, {0x5, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x20000000, 0x7, 0x1, 0xfffffffffffffffe, 0xa4d]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0xb, 0x4, 0x0, 0x2, 0x0, 0xd71]}, {0x9, @usage=0xe1, r9, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x487, @usage=0x7, 0x2, 0x3, [0xfff, 0xb74, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r2}, r6, 0x6, @inherit={0x88, &(0x7f0000000100)={0x4645e2ae752c5674, 0x8, 0x7, 0x1, {0x9, 0x20, 0x0, 0x7, 0x2}, [0x3, 0x4, 0x15, 0x6, 0x0, 0x1, 0x0, 0x1]}}, @devid=r9}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000240)={0x0, 0xf9a, 0x1ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000640)={{}, r6, 0x2, @inherit={0x58, &(0x7f0000000040)={0x0, 0x2, 0x7f, 0x1000, {0x2, 0x7ff, 0x3d, 0x2, 0x800}, [0x2, 0x800]}}, @devid=r10}) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:08 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:08 executing program 0 (fault-call:6 fault-nth:6): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2146.100150][ T25] audit: type=1326 audit(1629543128.525:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=14392 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x9, 0x0, 0x0) 10:52:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x5) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0xa, 0x0, 0x0) [ 2146.259225][ T25] audit: type=1326 audit(1629543128.685:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=14392 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 10:52:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/187, 0xbb}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/76, 0x4c}], 0xa, 0xfffffffc, 0x800) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2146.310306][T14445] FAULT_INJECTION: forcing a failure. [ 2146.310306][T14445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2146.315861][T14399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 2146.323710][T14445] CPU: 0 PID: 14445 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2146.331662][T14399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000cd301d76 [ 2146.341756][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2146.341767][T14445] Call Trace: [ 2146.341774][T14445] dump_stack_lvl+0xb7/0x103 [ 2146.341793][T14445] dump_stack+0x11/0x1a [ 2146.341808][T14445] should_fail+0x23c/0x250 [ 2146.379447][T14445] __alloc_pages+0x102/0x320 [ 2146.384047][T14445] alloc_pages_vma+0x513/0x680 [ 2146.388839][T14445] do_anonymous_page+0x16e/0x8a0 [ 2146.393783][T14445] handle_mm_fault+0x98f/0x1a50 [ 2146.398660][T14445] ? follow_page_mask+0x93f/0x1040 [ 2146.403848][T14445] __get_user_pages+0x32b/0xbc0 [ 2146.409033][T14445] get_user_pages_unlocked+0x175/0x630 [ 2146.414494][T14445] ? gup_pte_range+0x429/0x620 [ 2146.419296][T14445] __gup_longterm_unlocked+0x47/0x100 [ 2146.424712][T14445] internal_get_user_pages_fast+0x763/0x860 [ 2146.430649][T14445] get_user_pages_fast+0x5d/0x80 [ 2146.435576][T14445] iov_iter_get_pages+0x199/0x7e0 [ 2146.440659][T14445] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2146.445738][T14445] ? mempool_alloc_slab+0x16/0x20 [ 2146.450883][T14445] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2146.456332][T14445] ? bio_alloc_bioset+0x402/0x480 [ 2146.461380][T14445] iomap_dio_bio_actor+0x673/0xb50 [ 2146.466493][T14445] iomap_dio_actor+0x26e/0x3b0 [ 2146.471251][T14445] iomap_apply+0x1df/0x400 [ 2146.475651][T14445] __iomap_dio_rw+0x62e/0xa60 [ 2146.480305][T14445] ? __iomap_dio_rw+0xa60/0xa60 [ 2146.485154][T14445] iomap_dio_rw+0x30/0x70 [ 2146.489487][T14445] ext4_file_read_iter+0x21a/0x290 [ 2146.494619][T14445] aio_read+0x1c1/0x280 [ 2146.498803][T14445] ? should_fail+0xd6/0x250 [ 2146.503314][T14445] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2146.508318][T14445] io_submit_one+0x7fb/0x1350 [ 2146.512975][T14445] __se_sys_io_submit+0xf5/0x260 [ 2146.517897][T14445] __x64_sys_io_submit+0x3f/0x50 [ 2146.522824][T14445] do_syscall_64+0x3d/0x90 [ 2146.527233][T14445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2146.533110][T14445] RIP: 0033:0x4665e9 [ 2146.537000][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2146.556680][T14445] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2146.565169][T14445] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2146.573145][T14445] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2146.581113][T14445] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2146.589064][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2146.597117][T14445] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa03400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0xc811) read$eventfd(r0, &(0x7f0000000100), 0x7c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) r4 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, 0x6, &(0x7f0000001500)=[{&(0x7f0000001300)="b1a1c62faed80400655c9d2199ec108f6ce75b94417e11f8a6316ddc286948a39e45c5aa09bc7ea23e958a018c865a57919aff5f67d11413fa40707dcb1fbd07", 0x40, 0x1400000000000003}, {&(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffe01}, {&(0x7f00000012c0)="911fb1c8b383bb636a0aa68263a03e7345aafd99faf4396e89f614c143dc192e3c87728e7e9c306ab0a0e36e", 0x2c, 0x4}, {&(0x7f0000001680)="914ee5b633a00a767290169c15fb9d3d613b0bc01d7cd4ff36a4fc3f343b531bcec86bf052d49cd24713fec435a7e4a9546d570e6bfd1091776224acbb30ce03af9280b39f0e2f421beb0ae275ad05ba11ade133772cdffade9d7c64c4155d912b4aa5eaad15acc452a2c8ca6862033c8ba005f709e18c9d60747ecd9afa63a6df40b6fdd039dd745ad2ec352bd412c34cb4acfeb3d1880e77576918f31e0b3d1a891bc3b2bc0856f6c98a612403b52354e8", 0xb2, 0x6}, {&(0x7f00000013c0)="01b8b2a1e5c49d7e55517786ce063d26066d9ae79af07b64973d416159c03b70ab5b0c17d25278e08d7c6bcad52f0e969514ae6acf66dc6d9a09790909422fd5502a2a30f0ccfaa67a4125da6e3924092d9fe4d36fa8656e44c89eadbea075b66bd0b4645d91ab56f80eca3d3278f806846b65cb396e9de0cc98b8f9b3ed0b2bdfa05f873836eb48e7301c9f2207c9359b64b83e66bd498affeb6f683fa36b053eb850723722f097bb2643a2d2aeabc1ed0359f5fd1af5556a434ada7b373178180dc2edc29f6abef1f96b21323f871da73b4ed4ca2595cdaddf9a548847", 0xde, 0x800}, {&(0x7f00000014c0)="3c6ccc4560bfb0e472b704", 0xb, 0x3}], 0x2001010, &(0x7f00000015c0)=ANY=[@ANYBLOB="54495043002cb928282cd00ffe5713fe3b5b5de440ab3a2c3a5eb12c7375626a5f726f6c653d54495043002c613030303030303030303030303030303034362c6d61736b3d4d41595f57524954452e646f6e745f61707072616973652c736d61636b66736465663d2f70726f632f737973760870632f6d7367002c"]) sendfile(r3, r4, &(0x7f0000001640)=0x1, 0x3ff) 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8, 0x3f, 0xbd, 0x5}, {0x1, 0x2, 0x8, 0x400}, {0x0, 0x4d, 0x1, 0x8}, {0x1, 0x7, 0x8, 0x1f}]}, 0x10) r1 = socket$inet6(0xa, 0x100000003, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x598, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) [ 2146.607059][T14392] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 2146.615049][T14392] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000cd301d76 10:52:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x4000, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1dc, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x650}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x357}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fff80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8094}, 0x8800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404040, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:09 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x2, 0x0) 10:52:09 executing program 1: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x27}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x6b7f9708d0e1f5ae) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x3f, 0x20, 0x1, @loopback, @private2, 0x80, 0x8, 0x1, 0x10000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x51004}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@expire={0x124, 0x18, 0x8, 0x70bd26, 0x25dfdbfe, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4e23, 0x101, 0x4e22, 0x9, 0x2, 0xa0, 0x0, 0x4, r2, r4}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x2, 0xfbe7149, 0x7, 0xffffffff, 0xfffffffffffffffb, 0x20, 0x4802f88f, 0x800}, {0x3, 0xdb, 0xf60, 0x2}, {0x2, 0x7, 0xffff}, 0x70bd29, 0x3500, 0x2, 0x3, 0x7f, 0x10}, 0x9}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@mcast1, 0x0, 0xa}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20044015}, 0x44000) clone(0xeb0ab100, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x6, 0x6, 0x4, @private0, @mcast2, 0x1, 0x700, 0x5, 0x5}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:52:09 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:09 executing program 0 (fault-call:6 fault-nth:7): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x3, 0x0) 10:52:09 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = shmget(0x3, 0x1000, 0x0, &(0x7f00002f7000/0x1000)=nil) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='w^\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(r3, 0x0) accept4$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x841) 10:52:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2146.881047][T14496] FAULT_INJECTION: forcing a failure. [ 2146.881047][T14496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2146.894406][T14496] CPU: 0 PID: 14496 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2146.904572][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2146.914620][T14496] Call Trace: [ 2146.914675][T14503] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2146.917888][T14496] dump_stack_lvl+0xb7/0x103 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4, 0x0) [ 2146.917910][T14496] dump_stack+0x11/0x1a [ 2146.917925][T14496] should_fail+0x23c/0x250 [ 2146.926145][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2146.930649][T14496] __alloc_pages+0x102/0x320 [ 2146.930675][T14496] alloc_pages_vma+0x513/0x680 [ 2146.957734][T14496] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2146.963470][T14496] do_anonymous_page+0x16e/0x8a0 [ 2146.968450][T14496] handle_mm_fault+0x98f/0x1a50 [ 2146.973297][T14496] ? follow_page_mask+0x93f/0x1040 10:52:09 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0xc9ab) close(r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000200)=0x3) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x8) read$eventfd(r2, &(0x7f0000000100), 0x8) signalfd4(r0, &(0x7f0000000040)={[0x7f]}, 0x8, 0x80000) [ 2146.978472][T14496] __get_user_pages+0x32b/0xbc0 [ 2146.983328][T14496] get_user_pages_unlocked+0x175/0x630 [ 2146.988825][T14496] ? gup_pte_range+0x429/0x620 [ 2146.993611][T14496] __gup_longterm_unlocked+0x47/0x100 [ 2146.998993][T14496] internal_get_user_pages_fast+0x763/0x860 [ 2147.003742][T14503] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2147.004983][T14496] get_user_pages_fast+0x5d/0x80 [ 2147.013181][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x5, 0x0) [ 2147.018038][T14496] iov_iter_get_pages+0x199/0x7e0 [ 2147.018065][T14496] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2147.037255][T14496] ? mempool_alloc_slab+0x16/0x20 [ 2147.042352][T14496] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2147.047731][T14496] ? bio_alloc_bioset+0x402/0x480 [ 2147.052760][T14496] iomap_dio_bio_actor+0x673/0xb50 [ 2147.057869][T14496] iomap_dio_actor+0x26e/0x3b0 [ 2147.062673][T14496] iomap_apply+0x1df/0x400 [ 2147.067093][T14496] __iomap_dio_rw+0x62e/0xa60 [ 2147.071764][T14496] ? __iomap_dio_rw+0xa60/0xa60 [ 2147.076610][T14496] iomap_dio_rw+0x30/0x70 [ 2147.080944][T14496] ext4_file_read_iter+0x21a/0x290 [ 2147.086089][T14496] aio_read+0x1c1/0x280 [ 2147.090311][T14496] ? should_fail+0xd6/0x250 [ 2147.094823][T14496] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2147.099922][T14496] io_submit_one+0x7fb/0x1350 [ 2147.104601][T14496] __se_sys_io_submit+0xf5/0x260 [ 2147.109540][T14496] __x64_sys_io_submit+0x3f/0x50 [ 2147.114518][T14496] do_syscall_64+0x3d/0x90 [ 2147.118945][T14496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2147.124835][T14496] RIP: 0033:0x4665e9 [ 2147.128807][T14496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.148412][T14496] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2147.156840][T14496] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2147.164839][T14496] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2147.172815][T14496] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:09 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair(0x2c, 0x1, 0x5, &(0x7f00000008c0)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000009c0)={0x0, &(0x7f0000000980)}, 0x10) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="1f2e3d0a40f90419496e79a2c3bb4e50f6d4f127bf42f3fa7397cac6b37a8178b9e17a30f90a9b19f3aeb409723d0140c4389407794e90169aae1b0af845af198718475af6b896d568cb951f13626c58accb8f28ba7dbf1b57a5fa176b", 0x5d, 0x1}, {&(0x7f0000000200)="e6606001d9f9a053c47a1f3b404c3b8ff3f41bd52098530d2c891c05cab23ac57dad78d8dcec47bea7e74740cc63726c6f31c2ddfbddce0daf0a527e669415eab0df220bd5d078d36a0d1e4190703a8c3ff3695a5be612096f0cda571d5b6c0116685031c833894d460a8cbb641d8f8bb6907414623e89ca1e170735d2254c8a69b005f4b3", 0x85, 0x2}, {&(0x7f0000000300)="7cfcb7572261776c19818919df5d02000000dbef0b241270212a0100000000000000e3b7819868520df3f99b0a7a196d9bce4b09f5128ee1a654b9e41968baab82f733", 0x43, 0x3ce}, {&(0x7f0000000180)="416c131d1ffc5c36fe427d83f3db4cfbcd4b0a82dd9d6282fe679cd3be75f80d266d1875bab0b5968203bf28627a251b0d723200", 0x34, 0x10001}, {&(0x7f0000000380)="cc3ce44b6245f24e4498370c33f2db5c44ed0fcddd448e8ee1a411526a60390ab347d0be32bb0276a7b56e5c3441cfbb9ea73595be455812d584241732017ea0781aaa3dd46caa99f583a8f3a8c22c938e94a0906008be0d83ad86ac04abd99c2a88919668ae5e711329e5d063fea03bc40c04b87628184c7f8c4c53250ccae15cb2b0d28a8d3a1d76100192ad9df5f6d36b51c3038855e01ca0e4e6aae8ee8a547fe966690950dfe800866210e955a69e2879d421af3c8fd074fb854aaa29c97f82500022a6f8", 0xc7, 0x2}], 0x10028, &(0x7f0000000a00)=ANY=[@ANYBLOB='lazytime,jqfmt=vfsold,nobh,fsnaie=,appraise,smackfsfloor=memory.current\x00,smackfsroot=nobh,subj_type=,,measure,\x00']) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/123, 0x7b}], 0x4, 0x81, 0x4b2) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat(r5, &(0x7f00000007c0)='./file0\x00', 0x418002, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x2000}], 0x1, 0x100000, 0x0) [ 2147.180791][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.188765][T14496] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2147.259308][T14525] loop1: detected capacity change from 0 to 256 10:52:09 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6, 0x0) 10:52:09 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:09 executing program 0 (fault-call:6 fault-nth:8): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7, 0x0) [ 2147.462024][T14525] loop1: detected capacity change from 0 to 256 [ 2147.518525][T14553] FAULT_INJECTION: forcing a failure. [ 2147.518525][T14553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2147.531829][T14553] CPU: 0 PID: 14553 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2147.541981][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2147.552169][T14553] Call Trace: [ 2147.555493][T14553] dump_stack_lvl+0xb7/0x103 [ 2147.560135][T14553] dump_stack+0x11/0x1a [ 2147.564286][T14553] should_fail+0x23c/0x250 [ 2147.568869][T14553] __alloc_pages+0x102/0x320 [ 2147.573474][T14553] alloc_pages_vma+0x513/0x680 [ 2147.578341][T14553] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2147.583895][T14553] do_anonymous_page+0x16e/0x8a0 [ 2147.588836][T14553] handle_mm_fault+0x98f/0x1a50 [ 2147.593770][T14553] ? follow_page_mask+0x93f/0x1040 [ 2147.599068][T14553] __get_user_pages+0x32b/0xbc0 [ 2147.604124][T14553] get_user_pages_unlocked+0x175/0x630 [ 2147.609661][T14553] ? gup_pte_range+0x429/0x620 [ 2147.614459][T14553] __gup_longterm_unlocked+0x47/0x100 [ 2147.619922][T14553] internal_get_user_pages_fast+0x763/0x860 [ 2147.625917][T14553] get_user_pages_fast+0x5d/0x80 [ 2147.630865][T14553] iov_iter_get_pages+0x199/0x7e0 [ 2147.635902][T14553] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2147.640956][T14553] ? mempool_alloc_slab+0x16/0x20 [ 2147.646065][T14553] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2147.651445][T14553] ? bio_alloc_bioset+0x402/0x480 [ 2147.656477][T14553] iomap_dio_bio_actor+0x673/0xb50 [ 2147.661598][T14553] iomap_dio_actor+0x26e/0x3b0 [ 2147.666371][T14553] iomap_apply+0x1df/0x400 [ 2147.670893][T14553] __iomap_dio_rw+0x62e/0xa60 [ 2147.675575][T14553] ? __iomap_dio_rw+0xa60/0xa60 [ 2147.680662][T14553] iomap_dio_rw+0x30/0x70 [ 2147.685024][T14553] ext4_file_read_iter+0x21a/0x290 [ 2147.690139][T14553] aio_read+0x1c1/0x280 [ 2147.694421][T14553] ? should_fail+0xd6/0x250 [ 2147.698945][T14553] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2147.704138][T14553] io_submit_one+0x7fb/0x1350 [ 2147.708837][T14553] __se_sys_io_submit+0xf5/0x260 [ 2147.713784][T14553] __x64_sys_io_submit+0x3f/0x50 [ 2147.718769][T14553] do_syscall_64+0x3d/0x90 [ 2147.723187][T14553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2147.729089][T14553] RIP: 0033:0x4665e9 [ 2147.732981][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.752587][T14553] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2147.761004][T14553] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x8, 0x0) 10:52:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}]}, 0xc) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x8000000000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) [ 2147.768976][T14553] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2147.776949][T14553] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2147.784919][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.792895][T14553] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:10 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:10 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x9, 0x0) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xa, 0x0) 10:52:10 executing program 0 (fault-call:6 fault-nth:9): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xb, 0x0) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xc, 0x0) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xd, 0x0) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xe, 0x0) [ 2148.042346][T14594] FAULT_INJECTION: forcing a failure. [ 2148.042346][T14594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2148.055610][T14594] CPU: 0 PID: 14594 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2148.065761][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.075903][T14594] Call Trace: [ 2148.079172][T14594] dump_stack_lvl+0xb7/0x103 [ 2148.083764][T14594] dump_stack+0x11/0x1a [ 2148.087919][T14594] should_fail+0x23c/0x250 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x10, 0x0) 10:52:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x11, 0x0) [ 2148.092403][T14594] __alloc_pages+0x102/0x320 [ 2148.096996][T14594] alloc_pages_vma+0x513/0x680 [ 2148.101776][T14594] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2148.107359][T14594] do_anonymous_page+0x16e/0x8a0 [ 2148.112293][T14594] handle_mm_fault+0x98f/0x1a50 [ 2148.117134][T14594] ? follow_page_mask+0x93f/0x1040 [ 2148.122387][T14594] __get_user_pages+0x32b/0xbc0 [ 2148.127240][T14594] get_user_pages_unlocked+0x175/0x630 [ 2148.132710][T14594] ? gup_pte_range+0x429/0x620 [ 2148.137469][T14594] __gup_longterm_unlocked+0x47/0x100 [ 2148.142841][T14594] internal_get_user_pages_fast+0x763/0x860 [ 2148.148736][T14594] get_user_pages_fast+0x5d/0x80 [ 2148.153813][T14594] iov_iter_get_pages+0x199/0x7e0 [ 2148.158896][T14594] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2148.164009][T14594] ? mempool_alloc_slab+0x16/0x20 [ 2148.169037][T14594] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2148.174392][T14594] ? bio_alloc_bioset+0x402/0x480 [ 2148.179466][T14594] iomap_dio_bio_actor+0x673/0xb50 [ 2148.184616][T14594] iomap_dio_actor+0x26e/0x3b0 [ 2148.189383][T14594] iomap_apply+0x1df/0x400 [ 2148.193797][T14594] __iomap_dio_rw+0x62e/0xa60 [ 2148.198513][T14594] ? __iomap_dio_rw+0xa60/0xa60 [ 2148.203354][T14594] iomap_dio_rw+0x30/0x70 [ 2148.207687][T14594] ext4_file_read_iter+0x21a/0x290 [ 2148.212793][T14594] aio_read+0x1c1/0x280 [ 2148.216933][T14594] ? should_fail+0xd6/0x250 [ 2148.221490][T14594] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2148.226515][T14594] io_submit_one+0x7fb/0x1350 [ 2148.231196][T14594] __se_sys_io_submit+0xf5/0x260 [ 2148.236133][T14594] __x64_sys_io_submit+0x3f/0x50 [ 2148.241076][T14594] do_syscall_64+0x3d/0x90 [ 2148.245499][T14594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2148.251514][T14594] RIP: 0033:0x4665e9 [ 2148.255449][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2148.275052][T14594] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2148.283446][T14594] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2148.291463][T14594] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2148.299438][T14594] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2148.307391][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2148.315399][T14594] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="a5494b5d36a2b98fb57e0b987fd3a7093718656d5b571314c4c64ad56b16be0b2767e0807e7657635116062f396806660178c24cc156f315e9ccf318eaed3ca5fd21a90cd6b009cb3b53bd5a4b", 0x4d) mbind(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000125000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x12, 0x0) 10:52:11 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:11 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:11 executing program 0 (fault-call:6 fault-nth:10): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x25, 0x0) 10:52:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2148.863519][T14632] FAULT_INJECTION: forcing a failure. [ 2148.863519][T14632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2148.876767][T14632] CPU: 0 PID: 14632 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2148.876855][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.876965][T14632] Call Trace: [ 2148.876973][T14632] dump_stack_lvl+0xb7/0x103 [ 2148.904989][T14632] dump_stack+0x11/0x1a [ 2148.905013][T14632] should_fail+0x23c/0x250 [ 2148.905035][T14632] __alloc_pages+0x102/0x320 [ 2148.905055][T14632] alloc_pages_vma+0x513/0x680 [ 2148.905141][T14632] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2148.905165][T14632] do_anonymous_page+0x16e/0x8a0 [ 2148.905184][T14632] handle_mm_fault+0x98f/0x1a50 [ 2148.905201][T14632] ? follow_page_mask+0x93f/0x1040 [ 2148.905224][T14632] __get_user_pages+0x32b/0xbc0 [ 2148.905247][T14632] get_user_pages_unlocked+0x175/0x630 [ 2148.905296][T14632] ? gup_pte_range+0x429/0x620 [ 2148.905318][T14632] __gup_longterm_unlocked+0x47/0x100 [ 2148.905389][T14632] internal_get_user_pages_fast+0x763/0x860 [ 2148.905474][T14632] get_user_pages_fast+0x5d/0x80 [ 2148.905497][T14632] iov_iter_get_pages+0x199/0x7e0 [ 2148.905549][T14632] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2148.905571][T14632] ? mempool_alloc_slab+0x16/0x20 [ 2148.905595][T14632] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2148.905671][T14632] ? bio_alloc_bioset+0x402/0x480 [ 2148.905694][T14632] iomap_dio_bio_actor+0x673/0xb50 [ 2148.905718][T14632] iomap_dio_actor+0x26e/0x3b0 [ 2148.905740][T14632] iomap_apply+0x1df/0x400 [ 2149.014742][T14632] __iomap_dio_rw+0x62e/0xa60 [ 2149.014776][T14632] ? __iomap_dio_rw+0xa60/0xa60 [ 2149.014839][T14632] iomap_dio_rw+0x30/0x70 [ 2149.014872][T14632] ext4_file_read_iter+0x21a/0x290 [ 2149.033761][T14632] aio_read+0x1c1/0x280 [ 2149.033868][T14632] ? should_fail+0xd6/0x250 [ 2149.042865][T14632] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2149.042973][T14632] io_submit_one+0x7fb/0x1350 [ 2149.043051][T14632] __se_sys_io_submit+0xf5/0x260 [ 2149.057619][T14632] __x64_sys_io_submit+0x3f/0x50 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x48, 0x0) [ 2149.057649][T14632] do_syscall_64+0x3d/0x90 [ 2149.057671][T14632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2149.057697][T14632] RIP: 0033:0x4665e9 [ 2149.076851][T14632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4c, 0x0) [ 2149.076882][T14632] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2149.076902][T14632] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:11 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:11 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2149.076912][T14632] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2149.076922][T14632] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x51, 0x0) [ 2149.076932][T14632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.076977][T14632] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x68, 0x0) 10:52:11 executing program 0 (fault-call:6 fault-nth:11): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6c, 0x0) 10:52:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x74, 0x0) [ 2149.444189][T14669] FAULT_INJECTION: forcing a failure. [ 2149.444189][T14669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2149.460037][T14669] CPU: 0 PID: 14669 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2149.470181][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.480281][T14669] Call Trace: [ 2149.483549][T14669] dump_stack_lvl+0xb7/0x103 [ 2149.488164][T14669] dump_stack+0x11/0x1a 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7a, 0x0) [ 2149.492316][T14669] should_fail+0x23c/0x250 [ 2149.496731][T14669] __alloc_pages+0x102/0x320 [ 2149.501387][T14669] alloc_pages_vma+0x513/0x680 [ 2149.506143][T14669] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2149.511691][T14669] do_anonymous_page+0x16e/0x8a0 [ 2149.516666][T14669] handle_mm_fault+0x98f/0x1a50 [ 2149.521516][T14669] ? follow_page_mask+0x93f/0x1040 [ 2149.526654][T14669] __get_user_pages+0x32b/0xbc0 [ 2149.531508][T14669] get_user_pages_unlocked+0x175/0x630 [ 2149.537072][T14669] ? gup_pte_range+0x429/0x620 10:52:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xbe, 0x0) 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000005bf80)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r4}, {r3, r5}, {}, {}, {r4, r5}, {r4}, {r4}, {}, {0x0, r5}, {r3}, {}, {}, {}, {r4}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r4}, {}, {}, {}, {}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4, r5}, {}, {r3, r5}, {}, {r3, r5}, {}, {0x0, r5}, {r3}, {}, {}, {}, {r3, r5}, {}, {r4}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {r4}, {}, {0x0, r5}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {r4}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r3}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {r4}, {r3}, {r3}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005bc40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000005be40)=ANY=[@ANYRES64=0x0, @ANYBLOB="d20000000000000000000000010000000100000000000000010000000100000001000000000000009a0300000000000009000000070000000200000006000000060000000000000002000000000000000700000000000000090000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000007500"/160]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005bf00)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "a801f14bd985c6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cf00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r6}, {r7, r8}], 0x5, "3de7cbc592e736"}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0xc9ab) shutdown(r1, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) read(r9, &(0x7f0000000040)=""/104, 0x68) [ 2149.541865][T14669] __gup_longterm_unlocked+0x47/0x100 [ 2149.547235][T14669] internal_get_user_pages_fast+0x763/0x860 [ 2149.553198][T14669] get_user_pages_fast+0x5d/0x80 [ 2149.558213][T14669] iov_iter_get_pages+0x199/0x7e0 [ 2149.563252][T14669] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2149.568456][T14669] ? mempool_alloc_slab+0x16/0x20 [ 2149.573475][T14669] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2149.578848][T14669] ? bio_alloc_bioset+0x402/0x480 [ 2149.583960][T14669] iomap_dio_bio_actor+0x673/0xb50 [ 2149.589198][T14669] iomap_dio_actor+0x26e/0x3b0 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xf6, 0x0) [ 2149.594043][T14669] iomap_apply+0x1df/0x400 [ 2149.598456][T14669] __iomap_dio_rw+0x62e/0xa60 [ 2149.603214][T14669] ? __iomap_dio_rw+0xa60/0xa60 [ 2149.608071][T14669] iomap_dio_rw+0x30/0x70 [ 2149.612405][T14669] ext4_file_read_iter+0x21a/0x290 [ 2149.617506][T14669] aio_read+0x1c1/0x280 [ 2149.621665][T14669] ? should_fail+0xd6/0x250 [ 2149.626163][T14669] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2149.631189][T14669] io_submit_one+0x7fb/0x1350 [ 2149.635927][T14669] __se_sys_io_submit+0xf5/0x260 [ 2149.640863][T14669] __x64_sys_io_submit+0x3f/0x50 [ 2149.645803][T14669] do_syscall_64+0x3d/0x90 [ 2149.650242][T14669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2149.656318][T14669] RIP: 0033:0x4665e9 [ 2149.660224][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2149.679818][T14669] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2149.688277][T14669] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2149.696235][T14669] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2149.704187][T14669] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2149.712150][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.720113][T14669] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:12 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:12 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) r2 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x1ee, 0x0) 10:52:12 executing program 0 (fault-call:6 fault-nth:12): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000400)=0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/221, 0xdd}], 0x4, 0x8, 0x3) [ 2149.911254][T14716] FAULT_INJECTION: forcing a failure. [ 2149.911254][T14716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2149.911342][T14716] CPU: 0 PID: 14716 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2149.911362][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.911372][T14716] Call Trace: [ 2149.911379][T14716] dump_stack_lvl+0xb7/0x103 [ 2149.911401][T14716] dump_stack+0x11/0x1a [ 2149.911418][T14716] should_fail+0x23c/0x250 [ 2149.911442][T14716] __alloc_pages+0x102/0x320 [ 2149.911464][T14716] alloc_pages_vma+0x513/0x680 [ 2149.911592][T14716] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2149.911616][T14716] do_anonymous_page+0x16e/0x8a0 [ 2149.911633][T14716] handle_mm_fault+0x98f/0x1a50 [ 2149.911649][T14716] ? follow_page_mask+0x93f/0x1040 [ 2149.992507][T14716] __get_user_pages+0x32b/0xbc0 [ 2149.997379][T14716] get_user_pages_unlocked+0x175/0x630 [ 2149.997423][T14716] ? gup_pte_range+0x429/0x620 [ 2149.997445][T14716] __gup_longterm_unlocked+0x47/0x100 [ 2149.997471][T14716] internal_get_user_pages_fast+0x763/0x860 [ 2150.018858][T14716] get_user_pages_fast+0x5d/0x80 [ 2150.023798][T14716] iov_iter_get_pages+0x199/0x7e0 [ 2150.023881][T14716] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2150.023959][T14716] ? mempool_alloc_slab+0x16/0x20 [ 2150.024032][T14716] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2150.044413][T14716] ? bio_alloc_bioset+0x402/0x480 [ 2150.049444][T14716] iomap_dio_bio_actor+0x673/0xb50 [ 2150.049504][T14716] iomap_dio_actor+0x26e/0x3b0 [ 2150.049528][T14716] iomap_apply+0x1df/0x400 [ 2150.049547][T14716] __iomap_dio_rw+0x62e/0xa60 [ 2150.049566][T14716] ? __iomap_dio_rw+0xa60/0xa60 [ 2150.073366][T14716] iomap_dio_rw+0x30/0x70 [ 2150.077831][T14716] ext4_file_read_iter+0x21a/0x290 [ 2150.077853][T14716] aio_read+0x1c1/0x280 [ 2150.077873][T14716] ? should_fail+0xd6/0x250 [ 2150.077893][T14716] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2150.077913][T14716] io_submit_one+0x7fb/0x1350 [ 2150.101336][T14716] __se_sys_io_submit+0xf5/0x260 [ 2150.101364][T14716] __x64_sys_io_submit+0x3f/0x50 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x300, 0x0) [ 2150.111239][T14716] do_syscall_64+0x3d/0x90 [ 2150.111260][T14716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2150.111295][T14716] RIP: 0033:0x4665e9 [ 2150.111307][T14716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.111345][T14716] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lseek(r1, 0x80, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/153) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x500, 0x0) 10:52:12 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2150.145233][T14716] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2150.145244][T14716] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2150.145257][T14716] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.145269][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:52:12 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:12 executing program 0 (fault-call:6 fault-nth:13): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x600, 0x0) [ 2150.145281][T14716] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x700, 0x0) 10:52:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f40)=[{0x7f}]}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000000c0)='lo2\xc0Sh\xe1\xcb\xcdE\f\xd2\xc2\x02\xfd\xef\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES64=r7, @ANYRESHEX, @ANYRES32=r6, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r5], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x8, 0x0, {0x5, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x20000000, 0x7, 0x1, 0xfffffffffffffffe, 0xa4d]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0xb, 0x4, 0x0, 0x2, 0x0, 0xd71]}, {0x9, @usage=0xe1, r10, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x487, @usage=0x7, 0x2, 0x3, [0xfff, 0xb74, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000340)={{r3}, r7, 0x6, @inherit={0x88, &(0x7f0000000100)={0x4645e2ae752c5674, 0x8, 0x7, 0x1, {0x9, 0x20, 0x0, 0x7, 0x2}, [0x3, 0x4, 0x15, 0x6, 0x0, 0x1, 0x0, 0x1]}}, @devid=r10}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000080)={{}, {@val={r10}, @actul_num={@val=0x2d, 0x6, 0x70}}}) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x900, 0x0) [ 2150.414790][T14754] FAULT_INJECTION: forcing a failure. [ 2150.414790][T14754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2150.428379][T14754] CPU: 0 PID: 14754 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2150.438583][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.448638][T14754] Call Trace: [ 2150.451956][T14754] dump_stack_lvl+0xb7/0x103 [ 2150.456546][T14754] dump_stack+0x11/0x1a 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xa00, 0x0) [ 2150.461249][T14754] should_fail+0x23c/0x250 [ 2150.465666][T14754] __alloc_pages+0x102/0x320 [ 2150.470338][T14754] alloc_pages_vma+0x513/0x680 [ 2150.475097][T14754] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2150.480660][T14754] do_anonymous_page+0x16e/0x8a0 [ 2150.485635][T14754] handle_mm_fault+0x98f/0x1a50 [ 2150.490559][T14754] ? follow_page_mask+0x93f/0x1040 [ 2150.495671][T14754] __get_user_pages+0x32b/0xbc0 [ 2150.500582][T14754] get_user_pages_unlocked+0x175/0x630 [ 2150.506148][T14754] ? gup_pte_range+0x429/0x620 10:52:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xb00, 0x0) [ 2150.510904][T14754] __gup_longterm_unlocked+0x47/0x100 [ 2150.516273][T14754] internal_get_user_pages_fast+0x763/0x860 [ 2150.522166][T14754] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2150.528053][T14754] get_user_pages_fast+0x5d/0x80 [ 2150.532989][T14754] iov_iter_get_pages+0x199/0x7e0 [ 2150.538033][T14754] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2150.543123][T14754] ? mempool_alloc_slab+0x16/0x20 [ 2150.548198][T14754] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2150.553650][T14754] ? bio_alloc_bioset+0x402/0x480 [ 2150.558768][T14754] iomap_dio_bio_actor+0x673/0xb50 [ 2150.563923][T14754] iomap_dio_actor+0x26e/0x3b0 [ 2150.568753][T14754] iomap_apply+0x1df/0x400 [ 2150.573168][T14754] __iomap_dio_rw+0x62e/0xa60 [ 2150.577943][T14754] ? __iomap_dio_rw+0xa60/0xa60 [ 2150.582788][T14754] iomap_dio_rw+0x30/0x70 [ 2150.587116][T14754] ext4_file_read_iter+0x21a/0x290 [ 2150.592226][T14754] aio_read+0x1c1/0x280 [ 2150.596376][T14754] ? should_fail+0xd6/0x250 [ 2150.600889][T14754] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2150.605917][T14754] io_submit_one+0x7fb/0x1350 [ 2150.610593][T14754] __se_sys_io_submit+0xf5/0x260 10:52:13 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x400, 0x10001}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) clone3(&(0x7f0000000d00)={0x800000, &(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0), {0x9}, &(0x7f0000000b00)=""/193, 0xc1, &(0x7f0000000c00)=""/174, &(0x7f0000000cc0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000004c0)={0x7, 'bond_slave_0\x00', {0x100}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="cf19df64c91fc3f17800588bc252b22f83930ceecb313536d17faf6818e25a8343cf1ac44c3216e45824da4b9f13a8d7b755bba811", 0x35}, {&(0x7f0000000180)="f05b4661e4", 0x5}, {&(0x7f0000000240)="531187f6a19cfd5acb9a477a2cd3f5ace39d1e04cc3df74227b405247bf5bd6dae12e9dea955bcf7abb28ff962b2792cb6c33228a470285c109f0725d41f4ba43d72d508e9f5f0b771787d80572a4f741b787f7b88fabbdc77e04d637371a3b016e190220277b29c0c83501f4f6cfcb8f81fcbb4f040a60ef759a25e1fd91d2d55631cd14ef2126d7a2ff423e662f192a96ba170189ca8374cee1b109e7cab5eb42a672cdc9a91611ef5be26a382077de4b4fc007a8d", 0xb6}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x80, 0x20008004}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000640)="a9b7044c4af3b8f92e005799e3418e0aaab4565e4b8aef8b171b25c839fe0101ab3040ca8b6221db04139dd0118d1f567b6999019a2753b4c277e22a112b685e69e2501218a7b1beb2a60b2056390b4cfeb44bfe8c26b1881ff4dcbd55a4d4797c3ab7b5607afd21fb43122f728929668a44043262f0382cd01ce4c1d60a6be52ad9e7bf5c68cfbe741c42ef97dc69bc3987f75af622a476540748475ffd104b2a57841bf74d5df850a2a0843cd93bb2f012b3e88fa7ecd3db63c5", 0xbb}, {&(0x7f0000000700)="84815daf1ac7157d7a2f5861f6b7859ca32c97cafd365683e7df71724356049b056a1e1ec402706061a21b53c5d3021432b2391131ceba44cbac96f69b9cbc6d5b", 0x41}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="6333ad7cdf6fb802752eda80c11889a072252662027a5dd1e94e75e585f1f3b7084fb85e42b721", 0x27}, {&(0x7f0000000800)="3c1eb338d341b61c8e531706689c7c85cbee31bbca04c5d834eef8b5817cc8b1677d334ed6f10afcc1b76c83f0e845322049a624c8fea1798240b0d2e75f5e5eb1874f164b8251ac0f0ac725b0661d9403e5bc1a9e829765eba1460fe30050befb8ba84ca5a1037d437546ccb58a4cd5781522dc5692c8fc2222c5b16cb3047ad41bd1e8522a1376db1e61ffb6f6df2c", 0x90}, {&(0x7f00000008c0)="338d30b103cf0717e6f64d52632e0aae13fbdb75e349fda51c7e89623b73ce6855a055e87d144da109124feea44bd25ea2b646e4ec084fb09905aaaeb2c3147b4a64c98f3e2262973375cc07d23c6ac733f767decb5d8743c08fc72949d3f21497e083fa1a4e01199e35567d24a09c6cf188101e7945deb111c19c1128709dc8d2033a08234ff975a920d7cd315dd093515970da306fb69d8d529058835b1e818098c9aa032bc10f066632774fddd5a0056f52ed2d909e65780be5615f0ae2c819a2ada32cb023a897373e8574106d7ebeb5c5d54c27638471210e68af28dddbba644c53c22fe9816622ee9698d42d6120687d44511b", 0xf6}], 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32, @ANYRES32=r5, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x40}}], 0x2, 0x20000005) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000200)=0x3) read$eventfd(r7, &(0x7f0000000100), 0x7c) [ 2150.615575][T14754] __x64_sys_io_submit+0x3f/0x50 [ 2150.620624][T14754] do_syscall_64+0x3d/0x90 [ 2150.625039][T14754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2150.630926][T14754] RIP: 0033:0x4665e9 [ 2150.634809][T14754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.654447][T14754] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:13 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2150.662878][T14754] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2150.670920][T14754] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2150.678894][T14754] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.686858][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.694828][T14754] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:13 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:13 executing program 0 (fault-call:6 fault-nth:14): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xc00, 0x0) 10:52:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xd00, 0x0) [ 2150.914847][T14820] FAULT_INJECTION: forcing a failure. [ 2150.914847][T14820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2150.928093][T14820] CPU: 0 PID: 14820 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2150.938264][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.948335][T14820] Call Trace: [ 2150.951613][T14820] dump_stack_lvl+0xb7/0x103 [ 2150.956203][T14820] dump_stack+0x11/0x1a [ 2150.960380][T14820] should_fail+0x23c/0x250 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xe00, 0x0) [ 2150.964799][T14820] __alloc_pages+0x102/0x320 [ 2150.969395][T14820] alloc_pages_vma+0x513/0x680 [ 2150.974166][T14820] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2150.979800][T14820] do_anonymous_page+0x16e/0x8a0 [ 2150.984731][T14820] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2150.990620][T14820] handle_mm_fault+0x98f/0x1a50 [ 2150.995466][T14820] ? follow_page_mask+0x93f/0x1040 [ 2151.000575][T14820] __get_user_pages+0x32b/0xbc0 [ 2151.005427][T14820] get_user_pages_unlocked+0x175/0x630 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x1100, 0x0) 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x1200, 0x0) [ 2151.010915][T14820] ? gup_pte_range+0x429/0x620 [ 2151.015709][T14820] __gup_longterm_unlocked+0x47/0x100 [ 2151.021238][T14820] internal_get_user_pages_fast+0x763/0x860 [ 2151.027459][T14820] get_user_pages_fast+0x5d/0x80 [ 2151.032474][T14820] iov_iter_get_pages+0x199/0x7e0 [ 2151.037495][T14820] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2151.042580][T14820] ? mempool_alloc_slab+0x16/0x20 [ 2151.047607][T14820] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2151.052991][T14820] ? bio_alloc_bioset+0x402/0x480 [ 2151.058041][T14820] iomap_dio_bio_actor+0x673/0xb50 [ 2151.063261][T14820] iomap_dio_actor+0x26e/0x3b0 [ 2151.068029][T14820] iomap_apply+0x1df/0x400 [ 2151.072450][T14820] __iomap_dio_rw+0x62e/0xa60 [ 2151.077219][T14820] ? __iomap_dio_rw+0xa60/0xa60 [ 2151.082070][T14820] iomap_dio_rw+0x30/0x70 [ 2151.086396][T14820] ext4_file_read_iter+0x21a/0x290 [ 2151.091509][T14820] aio_read+0x1c1/0x280 [ 2151.095727][T14820] ? should_fail+0xd6/0x250 [ 2151.100334][T14820] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2151.105362][T14820] io_submit_one+0x7fb/0x1350 [ 2151.110058][T14820] __se_sys_io_submit+0xf5/0x260 [ 2151.115081][T14820] __x64_sys_io_submit+0x3f/0x50 [ 2151.120019][T14820] do_syscall_64+0x3d/0x90 [ 2151.124436][T14820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2151.130337][T14820] RIP: 0033:0x4665e9 [ 2151.134228][T14820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2151.153832][T14820] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x2500, 0x0) [ 2151.162266][T14820] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2151.171202][T14820] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2151.179171][T14820] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2151.187137][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2151.195249][T14820] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:13 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:13 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:14 executing program 0 (fault-call:6 fault-nth:15): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x3f00, 0x0) 10:52:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 10:52:14 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:14 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x1) close_range(r2, r1, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4800, 0x0) 10:52:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 2151.712740][T14875] FAULT_INJECTION: forcing a failure. [ 2151.712740][T14875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2151.725990][T14875] CPU: 0 PID: 14875 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2151.736138][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2151.746190][T14875] Call Trace: [ 2151.749502][T14875] dump_stack_lvl+0xb7/0x103 [ 2151.754158][T14875] dump_stack+0x11/0x1a [ 2151.758314][T14875] should_fail+0x23c/0x250 10:52:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4c00, 0x0) [ 2151.762729][T14875] __alloc_pages+0x102/0x320 [ 2151.767319][T14875] alloc_pages_vma+0x513/0x680 [ 2151.772086][T14875] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2151.777637][T14875] do_anonymous_page+0x16e/0x8a0 [ 2151.782594][T14875] handle_mm_fault+0x98f/0x1a50 [ 2151.787448][T14875] ? follow_page_mask+0x93f/0x1040 [ 2151.792671][T14875] __get_user_pages+0x32b/0xbc0 [ 2151.797555][T14875] get_user_pages_unlocked+0x175/0x630 [ 2151.803018][T14875] ? gup_pte_range+0x429/0x620 [ 2151.807833][T14875] __gup_longterm_unlocked+0x47/0x100 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x5100, 0x0) [ 2151.813212][T14875] internal_get_user_pages_fast+0x763/0x860 [ 2151.819369][T14875] get_user_pages_fast+0x5d/0x80 [ 2151.824306][T14875] iov_iter_get_pages+0x199/0x7e0 [ 2151.829342][T14875] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2151.834389][T14875] ? mempool_alloc_slab+0x16/0x20 [ 2151.839494][T14875] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2151.844874][T14875] ? bio_alloc_bioset+0x402/0x480 [ 2151.849992][T14875] iomap_dio_bio_actor+0x673/0xb50 [ 2151.855167][T14875] iomap_dio_actor+0x26e/0x3b0 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6800, 0x0) [ 2151.860026][T14875] iomap_apply+0x1df/0x400 [ 2151.864444][T14875] __iomap_dio_rw+0x62e/0xa60 [ 2151.869181][T14875] ? __iomap_dio_rw+0xa60/0xa60 [ 2151.874037][T14875] iomap_dio_rw+0x30/0x70 [ 2151.878369][T14875] ext4_file_read_iter+0x21a/0x290 [ 2151.883478][T14875] aio_read+0x1c1/0x280 [ 2151.887635][T14875] ? should_fail+0xd6/0x250 [ 2151.892179][T14875] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2151.897209][T14875] io_submit_one+0x7fb/0x1350 [ 2151.902058][T14875] __se_sys_io_submit+0xf5/0x260 [ 2151.907056][T14875] __x64_sys_io_submit+0x3f/0x50 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6c00, 0x0) [ 2151.911996][T14875] do_syscall_64+0x3d/0x90 [ 2151.916421][T14875] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2151.922320][T14875] RIP: 0033:0x4665e9 [ 2151.926205][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2151.945980][T14875] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2151.954417][T14875] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2151.962384][T14875] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2151.970351][T14875] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2151.978394][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2151.986356][T14875] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:14 executing program 0 (fault-call:6 fault-nth:16): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7400, 0x0) 10:52:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:14 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:14 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @tick, 0xfd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000180)={0x7, 0x0, 'client0\x00', 0x0, "6355ac0f4786f375", "f183d8f423ff289b475604cd8e89c39e901881cdccd923d0d56c0d7588adfd91", 0x1940, 0x8}) tkill(r0, 0x7) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7a00, 0x0) 10:52:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2152.193567][T14920] FAULT_INJECTION: forcing a failure. [ 2152.193567][T14920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2152.206887][T14920] CPU: 0 PID: 14920 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2152.217038][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.227117][T14920] Call Trace: [ 2152.230392][T14920] dump_stack_lvl+0xb7/0x103 [ 2152.234985][T14920] dump_stack+0x11/0x1a [ 2152.239220][T14920] should_fail+0x23c/0x250 [ 2152.243651][T14920] __alloc_pages+0x102/0x320 [ 2152.248236][T14920] alloc_pages_vma+0x513/0x680 [ 2152.253054][T14920] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2152.253082][T14920] do_anonymous_page+0x16e/0x8a0 [ 2152.253101][T14920] handle_mm_fault+0x98f/0x1a50 [ 2152.253159][T14920] ? follow_page_mask+0x93f/0x1040 [ 2152.253180][T14920] __get_user_pages+0x32b/0xbc0 [ 2152.253200][T14920] get_user_pages_unlocked+0x175/0x630 [ 2152.253225][T14920] ? gup_pte_range+0x429/0x620 [ 2152.288740][T14920] __gup_longterm_unlocked+0x47/0x100 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xbe00, 0x0) [ 2152.288802][T14920] internal_get_user_pages_fast+0x763/0x860 [ 2152.288828][T14920] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2152.288848][T14920] get_user_pages_fast+0x5d/0x80 [ 2152.310853][T14920] iov_iter_get_pages+0x199/0x7e0 [ 2152.315883][T14920] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2152.315945][T14920] ? mempool_alloc_slab+0x16/0x20 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xee01, 0x0) [ 2152.315967][T14920] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2152.315988][T14920] ? bio_alloc_bioset+0x402/0x480 10:52:14 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc05c5340, &(0x7f0000000140)) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) read(0xffffffffffffffff, &(0x7f00000001c0)=""/90, 0x5a) [ 2152.316005][T14920] iomap_dio_bio_actor+0x673/0xb50 10:52:14 executing program 0 (fault-call:6 fault-nth:17): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xf600, 0x0) [ 2152.316068][T14920] iomap_dio_actor+0x26e/0x3b0 [ 2152.316085][T14920] iomap_apply+0x1df/0x400 [ 2152.316117][T14920] __iomap_dio_rw+0x62e/0xa60 10:52:14 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2152.316172][T14920] ? __iomap_dio_rw+0xa60/0xa60 [ 2152.316190][T14920] iomap_dio_rw+0x30/0x70 [ 2152.316217][T14920] ext4_file_read_iter+0x21a/0x290 10:52:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x100000, 0x0) [ 2152.316294][T14920] aio_read+0x1c1/0x280 [ 2152.316316][T14920] ? should_fail+0xd6/0x250 [ 2152.316389][T14920] ? kmem_cache_alloc+0x1fb/0x2e0 10:52:15 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x800000, 0x0) [ 2152.316508][T14920] io_submit_one+0x7fb/0x1350 [ 2152.316532][T14920] __se_sys_io_submit+0xf5/0x260 [ 2152.316556][T14920] __x64_sys_io_submit+0x3f/0x50 10:52:15 executing program 0 (fault-call:6 fault-nth:18): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2152.316584][T14920] do_syscall_64+0x3d/0x90 [ 2152.316607][T14920] entry_SYSCALL_64_after_hwframe+0x44/0xae 10:52:15 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x1000000, 0x0) 10:52:15 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x9, 0x7ff, 0x0, 'queue0\x00', 0x5}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r5 = pidfd_open(r0, 0x0) writev(r5, &(0x7f0000000240), 0x0) [ 2152.316634][T14920] RIP: 0033:0x4665e9 [ 2152.316690][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.316707][T14920] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2152.316724][T14920] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2152.316736][T14920] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2152.316747][T14920] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.316759][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.316770][T14920] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2152.535091][T14950] FAULT_INJECTION: forcing a failure. [ 2152.535091][T14950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2152.535116][T14950] CPU: 0 PID: 14950 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2152.535138][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.535192][T14950] Call Trace: [ 2152.535204][T14950] dump_stack_lvl+0xb7/0x103 [ 2152.535224][T14950] dump_stack+0x11/0x1a [ 2152.535240][T14950] should_fail+0x23c/0x250 [ 2152.535265][T14950] __alloc_pages+0x102/0x320 [ 2152.535286][T14950] alloc_pages_vma+0x513/0x680 [ 2152.535387][T14950] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2152.535409][T14950] do_anonymous_page+0x16e/0x8a0 [ 2152.535426][T14950] handle_mm_fault+0x98f/0x1a50 [ 2152.535441][T14950] ? follow_page_mask+0x93f/0x1040 [ 2152.535465][T14950] __get_user_pages+0x32b/0xbc0 [ 2152.535489][T14950] get_user_pages_unlocked+0x175/0x630 [ 2152.535518][T14950] ? gup_pte_range+0x429/0x620 [ 2152.535599][T14950] __gup_longterm_unlocked+0x47/0x100 [ 2152.535624][T14950] internal_get_user_pages_fast+0x763/0x860 [ 2152.535651][T14950] get_user_pages_fast+0x5d/0x80 [ 2152.535692][T14950] iov_iter_get_pages+0x199/0x7e0 [ 2152.535755][T14950] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2152.535777][T14950] ? mempool_alloc_slab+0x16/0x20 [ 2152.535911][T14950] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2152.535938][T14950] ? bio_alloc_bioset+0x402/0x480 [ 2152.535960][T14950] iomap_dio_bio_actor+0x673/0xb50 [ 2152.535981][T14950] iomap_dio_actor+0x26e/0x3b0 [ 2152.536074][T14950] iomap_apply+0x1df/0x400 [ 2152.536097][T14950] __iomap_dio_rw+0x62e/0xa60 [ 2152.536120][T14950] ? __iomap_dio_rw+0xa60/0xa60 [ 2152.536189][T14950] iomap_dio_rw+0x30/0x70 [ 2152.536214][T14950] ext4_file_read_iter+0x21a/0x290 [ 2152.536234][T14950] aio_read+0x1c1/0x280 [ 2152.536258][T14950] ? should_fail+0xd6/0x250 [ 2152.536282][T14950] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2152.536373][T14950] io_submit_one+0x7fb/0x1350 [ 2152.536396][T14950] __se_sys_io_submit+0xf5/0x260 [ 2152.536465][T14950] __x64_sys_io_submit+0x3f/0x50 [ 2152.536491][T14950] do_syscall_64+0x3d/0x90 [ 2152.536512][T14950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2152.536561][T14950] RIP: 0033:0x4665e9 [ 2152.536574][T14950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.536590][T14950] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2152.536636][T14950] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2152.536647][T14950] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2152.536659][T14950] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.536721][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.536732][T14950] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2152.778156][T14968] FAULT_INJECTION: forcing a failure. [ 2152.778156][T14968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2152.778179][T14968] CPU: 0 PID: 14968 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2152.778307][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.778353][T14968] Call Trace: [ 2152.778359][T14968] dump_stack_lvl+0xb7/0x103 [ 2152.778380][T14968] dump_stack+0x11/0x1a [ 2152.778396][T14968] should_fail+0x23c/0x250 [ 2152.778420][T14968] __alloc_pages+0x102/0x320 [ 2152.778441][T14968] alloc_pages_vma+0x513/0x680 [ 2152.778461][T14968] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2152.778536][T14968] do_anonymous_page+0x16e/0x8a0 [ 2152.778555][T14968] handle_mm_fault+0x98f/0x1a50 [ 2152.778573][T14968] ? follow_page_mask+0x93f/0x1040 [ 2152.778597][T14968] __get_user_pages+0x32b/0xbc0 [ 2152.778616][T14968] get_user_pages_unlocked+0x175/0x630 [ 2152.778699][T14968] ? gup_pte_range+0x429/0x620 [ 2152.778720][T14968] __gup_longterm_unlocked+0x47/0x100 [ 2152.778752][T14968] internal_get_user_pages_fast+0x763/0x860 [ 2152.778774][T14968] get_user_pages_fast+0x5d/0x80 [ 2152.778794][T14968] iov_iter_get_pages+0x199/0x7e0 [ 2152.778814][T14968] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2152.778947][T14968] ? mempool_alloc_slab+0x16/0x20 [ 2152.778967][T14968] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2152.778993][T14968] ? bio_alloc_bioset+0x402/0x480 [ 2152.779022][T14968] iomap_dio_bio_actor+0x673/0xb50 [ 2152.779043][T14968] iomap_dio_actor+0x26e/0x3b0 [ 2152.779131][T14968] iomap_apply+0x1df/0x400 [ 2152.779150][T14968] __iomap_dio_rw+0x62e/0xa60 [ 2152.779210][T14968] ? __iomap_dio_rw+0xa60/0xa60 [ 2152.779230][T14968] iomap_dio_rw+0x30/0x70 [ 2152.779248][T14968] ext4_file_read_iter+0x21a/0x290 [ 2152.779265][T14968] aio_read+0x1c1/0x280 [ 2152.779288][T14968] ? should_fail+0xd6/0x250 [ 2152.779356][T14968] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2152.779377][T14968] io_submit_one+0x7fb/0x1350 [ 2152.779479][T14968] __se_sys_io_submit+0xf5/0x260 [ 2152.779504][T14968] __x64_sys_io_submit+0x3f/0x50 [ 2152.779584][T14968] do_syscall_64+0x3d/0x90 [ 2152.779605][T14968] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2152.779629][T14968] RIP: 0033:0x4665e9 [ 2152.779642][T14968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.779659][T14968] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x1ee0000, 0x0) 10:52:16 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:16 executing program 0 (fault-call:6 fault-nth:19): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) gettid() preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vcsn(&(0x7f00000018c0), 0xec, 0x428000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0xc9ab) io_submit(0x0, 0x9, &(0x7f0000001a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="2143f9b3c7af5ac7410fd89b2e34d7102760088176aa9cc139cff45668d050232744198871d8ab918d3cd5aa6b98937add02b56526f3fc47c01348f681b026b0ac7956a7f1366dc50e8a40d2e9af1bcbacdc68b96b543b56c487ad270ae0aa289d7c91881c991ad6", 0x68, 0x6a2e, 0x0, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff, &(0x7f0000001ac0)="cc0550ca4996c363fb68d564e2247e87b3dbc2505f347638c12cff4b17faf077eb2eefbd7965610958f4f5b764bcabc6c95d99c06a110dfeb1b25f25d6aee67a33d6a999c139f84ac3c4151f78ef30eed0da13ccc4baa606ae7b10efd458797f3a26467f35d54cc94134f528f42c78b67cd542f99983e299dac4e7ceb46de84105e7ead8d715fb6b62466207f6356fd00e8bb8b4d535d8032542659a685ccd928d63eb6c2b6c7d44608da9a0eb359456360c65cfbafb3f1ccab771957ddd5a2e4111bc29bc811d129b34293a737b617a9dded3ef17f64b12ccde0acb587bc4f8efa7985cc56a392c20ac4e3c9ab64834241a3812ac283b6b45a5d789e93f224271b0c94f56fd8a974591ca0b74c0ac7dbe7a499891b4592f007a79d3f97e6fcbc55791198e1e3cebe836ff513055312cc9520d478917bb3fb7bb7e2c0b8123c6fd4a8e09e4ecef67b8e9a2119a737d268c70946f23886b152b98c46c9a79583e07a84cd414e8c819ef9263df3b07c85c9d380d2fa490bc202ab7f297197c6a5297b115af3c4eaaeeac70534e044f68cf374da61879128cdbe4de26f061dd910ecbb9476acde56196bf772008028a9fc745551346336c7c55e08fc280b012969dd8acb70291f3cb33733287c1b8a52174b7b3ea68ba4abef3bc06cdbdb4507d17e0c3d1d036d80a94084e8f307b05f51b9fe0de0621d4f47afe0a5c6a084692b1ed8f6f746970b0e893508682b187bbb3cb8e49e4254fd8314216f53fc368a283314e462a5f7b28c1bf0b0bd2e415d9a67202d3f8e703672a671d73000ac8f06ce0ac15be6c63387b136cd2dcbed1908d08ded558084da6fbc3bde7eb4459c74a2bdd3ade06e6ec667d00fda79019010c19c9f9ab088a218945efde7bd92b7fb48a8df68795069914141f6f5753c54333b030717fc1494c5ca00c952afdeaca9ba6e0e66751725c4fa0fafd9edf92cc61e9df860b2474ec0f12d066f4607c0ad9ee8cd5481b8036bd89d6b8b6ad28c913721ba65086738da5f85b003c2fa1e7275ba18bc17eb6b6203a1f0dc3f224208ca29978a6060fdb2fd66de8f88d4997827e8b4d09729e185507a7aa48a09c9cc9bd535e2a70a88d7aa005e504600bb6fcc487b70666436274656b5169ba25e33f61053d5d21aa8df5a0cad6634ea90dc84e0b5f9962212f88d7b5590db753fc148719bec2e6a7cf7e20ebf5bc1ce014023dd12e2c5593e5eb8d8ec85cacf0d786c47476cc925f16ece1f7d4f62500e5c764abe287c944760ac045410ed00a57480798d47f9e504550d0934b7bd8778c417e3e39566cb0b10546431e2f9d7a10570b3a500af0bd8787e86567981838d0d30935b39af4ec8ddba275afa2fb29d9a712fbbb79d8d7a060757c6dd233177b60c488cae29f31613a154ba9058c97701e7401b905d30a929bff600f6fa18332ec45e903458c68a59aa7f676eb832d10ddd792d18176eff4f9e5c9285b5b373975767555f01e3bdc00ad27c79da9817f6db0aef0725024371f7a322805b9383dc30333d673352b3e96432ffb516843c4aca92c11806d579b2e92341f61534a04eaa3f78d2833979063cea76ea643d793df9187b6537c2ec5270282cd8cc44e7409d40a9fd547bb21d6f8edc9b90bffa757ca38a3ca8b316fdd2734464cd6c07738f41c5741e3d7cb59bca370094c6905941f539742a413ac75c22e2e638964c43c34461856f1dc240588e50cf7b11a45ea9c03e0bc241576d3ca80f089cd7bdd64350883518072ecb580e4d3c198764b2b9035088c2ceb8d0247aa76a6ef573216fe5a690b77305a3295fcffef016de51bcbcbf527b97877b76a0debd6678d07fe69addbec01acac7ecf9d7fd584244aac901dc5db64ace0d45bad64f63e91a8db0e3b706e290745713e88f51b2adac5df5c7cdadd82115b14042b28899affc64337f735831f86aca2d63c7cc0fef014c23d0221fdd1c0113068b3acceb2fad45866498e1c97dea22a9354eb88b2a88ed60f1168c07fd5b0c1a0ce50186219c8f56229d105ebbab947928041fd9fd3d4fe51b3df3ee9b255ec45b25f8cea616b43654d7fecd689ff39038b8adb5460eb88b0aa12abb607c906fc5cdc32f897e1a9957e8aaa019a1f37180b8fc09425c3e4fc098822a2c6c3bd48cb5fab3924b7c96aca8b743cddf1d44566da132100ae3e504f6559c9feb74297fc941728d240ef507f65e91447541a2d19afe7ff403519fa2526b4c4a20d21fa3d6fb3edff840e345bff640cc6e6f52005b2f18dafaf1dddc7414478bba244d24ef7979e5cc60ac960c2664528ab020b7a16acb6aadd9ed50979ac731380916bfe98d7f738658a3793f34039adc1be582f5156503167840757bbde40cffe1d5dbb5aa5c1ef6b9109e5859eebbe6cf3f19c1fb95c26c5722273aa3f5c86e94b7bb2e29448a4be78f5dfdb12d579152394b358a3647d40fdca1ca1fc1a9bb001bcd1174f29c86abf9350805967d7ddc1f3c516e7319feeabe1394815db7178466b5e5766800b5eb801544b6bf96e1f8060b8d5ac153eb8d71d010d2f88e953b40274c96378e53ce38469a55636ed034028a3f446316dbcdcf2313c8afe8a1a1f9a1ea27d62dca46a227e76a726b1588d06cdfe0729392b15433ce72c509ac82ea096aba248c0c5ae7846d3b874d3ed3740d13ef904847892d6be877cdfbddf1610f6517e3abda9464bb0f57a591f92502febd41cfc41e4f6a7fd6e57ec19811c6cbd2590e7f90d75c077c5e5e586413da553d7848086cfc80ee3c307af47d3701f1925b9b92269fd6958f7c9c60929bf88f873e0855c67fb7b17ddacd2e7aa7ed740820a9e38d5a746583939dbbdc64355a859caf7b79f79d1fc10002f18987e8f44de7800f99551d4b33e33d095b80bc7ac5cf739550aaf6be092341e4f5b6532c045bf0d80811e259deee3b88723563f8d4f1dc4636eed8e97155c5dfff4ff9d04d5ecdd1317525b7ddc3d251ec1322b29de36a325c1a174aba0186dea6ea1596679372be10396dfceb1240a426e0e947aaacda3f7fe16fddda09cb62c158533d5e966cb4473c9113ca79bc333d70d30c0dd50bf6fd7a36c7264ba1d66418c8d9e9fc21b804f1952a7627b1dd30fa2221faeb33f9616ea3d01bb3ea087ca138b9dea75e046909929d04908305b49deeb35c6db6496c13f06e2046add469b95be21d06a19ebe79e8e6e58165a94a502ad2997d23c05bdddfe02377a08d9da23ffaf4e1ab96349a85f569afcbe9b0c891aaefd3a9fc66bb7c57ef39bbab9e134bda941a49bf7cdff8f47f368ae3473ef198b64a93d4e7e4c3ac699087f6989df2856dc79e62e23023d0ef17c343ac1e7c5b3ec078bcbbef98ba492b7af9d652c91828f5f4201dec2f5bf179a868d6ace5a2f128e76e3b82097edfd390d5df671835ede23b2dfda8380a333d68aba6c3d29281b1ad4872165fa4dc6a626dd52722bd33e3f2d64daf922e21a8b6b75f4475a8ca6c8fb4795935639d4b315e602af38cec1f77305458e3110ba30118ebf0be5ca96eef959d86757b14c29c6107159d43cb300990edd0ceffc5d5d8a6f96ca81923dccacfde18f9cfdc54530dcb012c0d3ba7ecb4a7b7e54c4e71d0049168077d634cea1892c588b225e4943910c2ba34068b75c09c4d50fbc48b9a5e378692d318ac60102f349176df4c54f58b24a309b9502e213f5c4a4730074c645addf888220d43185a8f4fe4d0e2095ccb9502ba42ced00211d93accad8634d68a82cd9ed7ac9b54cb14aa388f435e9e1f29c8f9fef200ff702ddbd85d1b6c130b435fed37ba38721cd691a950090d67eba0942ff14f82debda7ce2d78becc5e7107d9c0a09e165ef054fa4c2fb8775da164daed4c3d1aaffdd7561075edef584f5962ae39b65ee711b436bd2ad715c2713f3e0cf3062336c22eaa3ff4d0f5c9e1da21ab28d727070b2497f54b77bc4cbfc24692055594dfb173337fe79e3183f7ed3316e86fa15e234b880100288a5ca5da21e614c141432225528d52a8ea58c6ff7616a1ccd4d1d48cbb8142726004079368afd9ba3b1e8a182b770844f59f55b6074c76ed207a0f0f4c7dced084da169ad8fd69cda377b2e074b9849cdbca156d3ff29deccb36cd8e212a065921c2e9d66d61a9216c1834c419196f0a26a5cd10b27f3492c6e8e433ca4578e50204a10dc8cdb4c62d1aa230a770c1234cb986580bd2e06a0c4ece46521758f3a892a14a1002c694ce344b1fb0fbc5d8215e0a8717dc06339b5632075635f416c3cebf678f409064d44c9f59be69ea9372bc8653d1bfbe904ea54d21d376aa673edaf11487558f2bbd64b6ad42c99e023f1b81356b00fe950a0e28e6d6d0bb18fc91aefb7a1f366f9ff5a7066c93a40131664d6436cb550466eed997a0674fef19e17e64434146ab5db2a2a38c71672b196970bfac9c8c947a193783e807db5b42b0a071b332e463a1c831e44b8aefaee526422e083c3a43e6464d3ba29a9e28d5ec8ccfa1368e03bd57842e89e5b590a769598ca9761e19319b5cc64ae865c3ffa1da702a7bdf52b3f6453e8b0a4cc5595cd29995eadaf7ee87a9f2158862da70184e89124e91b07c1e180912ff9d8dca23257ed8f7af61f98958e558303f14664087c37106ce17231b741defb3416029cf020f44b70ac8d6f12321031e62f80b5e6d2a73c30f417f0c4d1b4f4c2576c5bfd2cad527f3a57aadc9a0f96282156fd0806c12a74e093507e58f074cbeaa614beb11a9a3c58556b1b9ddc3877ab9c3b2a58b6129c1783b390d73d7a53835b8fbbb900f7c187db268d74a98d7f91367d92bb741a1e211643b8c7af3cf960cef4aadd388aba285b1c513b9f55ba369fb8b0064041d0d8b97086b9fb9054388719cebf2d642f352e591e43fbfdc5815a4befcc22c83305937cba3784d432d5b634567d1bc91590fdcc30581ac59ead19f6ff7ab96ffb87e7f91681eab9a253e9495858e8bb02b6cf749ac39232958cf50a3f992e082191b7a2e4d61fec73a55ca23514a42b5998500174f4e5358a84364dadcdaccf98d37e38921caa1c441afb181b668fd542d1b804d529f32a83fde1966f9e2ddabccb1d9c5cd7a9cbf3aa3636a67983828ead96f670f3bb50b63726920a36a623a1899d1e60b7847be2aed765a06774b2fca101d885ad0fa821c7700aa0042e59e97c5e269061a1436ea283ef90e96b83036fc2f9d22635bbee892ae9e3617e2cf0b327b68cb805d995ce4d048ef372f5921646a70901c0708e45d69e0013f442cfe5115983560b116f7717f157ea95eb927ba727f4f9b80189e700c13b71b1490f4fad80ea7510c8bf8c007d18dffe7c1439ec4bccd0aa949c2fb2b115526c519c3e8b47b68361ed8ca0028ba20a308feab5aa6d6e4885a548b3a0794a37bb622085d8b4545da58a01df1a0377462c5a7f16bbf8d7b3753049eb1b8000ac8b79f04a9299846659ec025f9f13ee5d2ea8d0db63b32ab15bacbd3a0e3fb3dd89ef6301df4e374eeef066b8d417b2fe8217cf2ff9af5170e86baa6263bd3747a4a4a61491c6aa3aa1d2ff8d226e374e56ad9341273ac09ff8c964c49f8bf55214df6497bf4052c29a00a5959de89afefcbb85451f435469f17c853209775d45060e0d15c9d67f467b13f4ead59258010ab6c9aa0b9ece2de48aa3a6f4aaaccb04b40da8be60eea436b26157dbaa9e74fb6b716b6bffbc8acacbff5e45b0845921ce54cea97204c860ffcc2349807143b79c87ca97a98ab180276ee6ebf258c5d263957e3165a4f31c", 0x1000, 0x5, 0x0, 0x2, r2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f00000013c0)="323474d9e9688e2fbfbe2d5c1699ee78f869dfac1c664f39887d48894a9dcf5219dd44535709e388b40253431d8478749c0582e55fce1aea4d678bccfb8c2c86a67a7f24c71de7755e1866ef9d6425cfe024910d64281379b1dd83126a6bec749bfb450579d4a28dfb8e30330e125138cc28a71f40219e4522647ffad8e4d32b5c97aa", 0x83, 0x7}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x20, r3, &(0x7f00000014c0)="1288ded32d40405853f33b9bb24ab61befd97fd7af7a6efd74a3d18fa1e5ccc72c62795dee2bf7b0e0b8841e9ab33aa6bab269a62dd795b68dcdc587e0f4bbd98124da61c36aa2a3341ebde479586e42201b3ff5ac981a0397681877593458b7b83aae132c9044bdd50ea03a4310499075f47d4e6ab83c588e5ac1deb714e540e25f7d696689a0150957333a37d9776e6c0617b4ac4850a94d81d64db8e91f5e1aa3", 0xa2, 0x81, 0x0, 0x1, r2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x7, r2, &(0x7f00000015c0)="6d37b75f47301a4c2482bd4a8395c67f61ac8eee3e550dbd9ee2c122a5bfe38af9cba81f94c702bab9e4f4f92784415d3c5dbf9035e59f4add0469477f6bc007afad99edff", 0x45, 0x7, 0x0, 0x1, r4}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x6, 0xfff, r5, &(0x7f0000001680)="45a19a9c5c9df9721a4d0e30fb936782275e3bad8ad0667aa0fdbfff4d5a8cad57ca7b1efeba2c62b64b46a3735d0f8d135e85c9a57baf79f56d83cb89386e25a4de215a136aec2797cca56d8d55b92231a1a7bcf7bbd33ba7cb155d2e6946002933195b8fdf88c8969e180877f99453c407c07b561c596c44592f7231ef57c14a6cbc16f1ff7777ed0c6b2eb06435e2c120ca8f7ccc8c557dd4645439078a3bc18b4e1cfeaf60df763fb2bc1470fd1c8525a7e60286560850bbbacfe27ca8d5b2e2b207542e662cef11274340af76626fda905a507143fcbaa3ffa536be964c5dfd5b62fc0cadfff49e22235c", 0xed, 0x1f, 0x0, 0x1, r2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000017c0)="ef704cba5c84cf314248323e5e874f31ccfaa35b35ca35c23b690fa2f68c5da2867d2d70978c9a7ec82998d0ddb34487daa507cd58bbdba5c048ba57f28b97eb3454e6918bcf5c97307d7c21450ee0e27bd6159f906c5d53925cb2f5383c00aa5d6fd14841056157313085e1717b459ba76530b840334a16e42c51209e7060100e50965b92637e7b00a6c89cd1df2dff239ca9e951cdf52f90272601300273e37982fa196190c9b360ba935da5f2564ea2256eddcb83ae5a0451fd83fc00f20d6872a9373570a7c3d14ff6fbca1f8a70b1e2431b7eb730b903e72b381c2094bff4562b", 0xe3, 0x8, 0x0, 0x3, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0x1f, r6, &(0x7f0000000340)="7f814074791a8f0061b1d65f5b63d3430fa564e53db9bb80a6d923bac9ff5b28e420de896ca4ea830e5b96bfcff75b46b12cbeae0744aea221ac0d8385493459703f2edfb2b94ac12a4413b3efc70fbeb884189f21a32ec0e81bc79843150d0d10ba71c2780138515aa0af659169ddf4c846e345fa12727b8004a9e11f08639bb820e8bb", 0x84, 0x0, 0x0, 0x1, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xe36d, r1, &(0x7f00000019c0)="11a770", 0x3, 0x0, 0x0, 0x0, r2}]) tkill(r0, 0x7) 10:52:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005bf80)={r4, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {}, {}, {}, {r3}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {}, {r3}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {}, {}, {r3}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r3}, {r2}, {r2}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xe0, "0151f7352cebe9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005d240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "f30fdc0d97ae4c"}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f000005bf80)={r12, 0x0, "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", "3659be393952f0e0924843f980dc972675d4d9c940bcd19e82ee45da25fcb6be53ae4c20157dd95a53209850931ed82cfd4f451aba63306e2cfab505796b97699ff4659bb8ff00d20c597d72c3447db0ef476792f95c28675e30c6aa893772b7f17e74e8b021debc385ab6346ca7462243b09ae250fc74b692f1450d68e78aeb31765cc0715135d4cdac94063522d3f446bc6fbf4a55dd8231baf0bd1a0dae45eeeb3aef00dac22eeb23a0dea8bc8e6a03932cd33ab9a463646f59b18a1c304b94c5b4ae07445eecc293c33faff92420b79a84dceecc1020d6bd2e9e531c0b8767fa62a4d807934f1e08d952ed0b2d9ac739738977fefefd81b137047ce2fba3f4e02d7093be8944a21ecc9937454ae10394bd70a1716611e1b1ab25a44f1438c870a607ef96d56d61f6dd3273e299716e456e7ba3edcd5b1c5fd9e853fccea038ad0367eee35866139945017cde83ee133e54b1a0a9741bd174afb939bb0649d589304321a7f8b16b72c1541937898e7165f582c3ec999fed8c6c937d535ef7261b30ae1dc3632f4f3c406badb70ca4788a411b26d02f25d6edaac0c3b280521f50b8a4fcc715e550c0236d80411bfb356213e5ea849dfdd26d7d4f6bf4c25d68953c3e32e1249589097ed9c11c7cca35c2d2709d42a97849413a09991ce97fc026da7de67f2d64e5f18288bbefd5532bada44e658f9ca10d277cf7edba97488d48fa5da398323229a120df546e5e6c913c96e83b8400a01a11711b760dae7205f1b7bb1cc11fab8c7239ac008b11a013c6b23a003e59cd011bfb2381eb3211af45b309984b6c02a2965c87a1cde5ed3c20f8ddf74cb86bc114af674ee447b948d2788e0391890663146d3096d0e27b1daf527100f2457ba0b14ce751d0f5dd3dbd860bff9c47edbf86ddffb256805c466c35eb114e318f290442b9d64520ab99dd26fa1b26a33b7f545f6d0541626f9a86e3b101242f7316166aaca4f3f80c7aa94bc407c941d65789a1eaf7b116050d02778c3ba798b786cf17e7c04b08ae41918343c1d3177724dd48702b6c112f3c30e524d2c4015e1fd6ae9d956a34c33e669ca52928be87c4ad0525b47b259bdcba1b341647fb96a28352aafc84baf23145ea9d2c9a70c333de5021149b2d660c89cea6872ce1f669ba118cc90b13789a756a8a42938d77d5db6ee92eae86f94b23cf2a079648edb3da9bd86a9d71d9ce69908c9c80905b8a8daee6ad98c54b4d054319ff6aa36bb80f39127faa08aaebc4b64207d560a6717ee4c0c9ea416423ab3929f8cdf7634c996e30fc81f7b8094ad324ce69b445286f06bf985a3434e9ed8fc7a38f4174b02e0e98280c8a38f8caca0559f9d69be5d86b84e32e826a726f2c0eb1a1682e63c31c1f3d56a93d203eb095509ed6e7f3c63ac59ecdf0803883ada914f1f8ee64ce9e0c22abbf3180f4d5e1ece8a9521f42432fdeb0656a26524c872ac62590f442fd701976d98d3018f94e153bdd85a0215d13c7784ff0b503b588e0d613b9056ee7e93efd1bee8ce606b425b591c7e7eb43cc7c9e5f3e263fc4d019de359a9e51d35ca4c5f71341458073c239c9728fd3b9ef47c80902166451cc109d20ab6cfca825f35b0aca3d05c05fda1e162fdef2bc3a9d914a1c719effb68060a262c26da165acfcfcf1aad6b4d27564cf99f9a82010fde16e33d80128cb7187d57659d7d754a3e0147c06627b93582d96a5891d5fa4690b87a8e74b3bcaf89e75764d32bfbc54d90bbf28f87b2caaf88e28b440c2ce76bdb2f0a95629c2e3822effec3680110abf78895e5f7ec9cfb82d7842c43ca34d851b59b863a6d6061c5bc0688aeee823d7bde013711753506b9d7c19962cf422307be68fa7a534f5adf26355b8081e5fcf2791813847775bf74d37974dde12564f2d571f720bd9792714b09d9588d837b1629da4c2e5edf8d866f948a47787d8c961d3ce5d7997babed06cf6e17eb57402bb3a4700017e678161548abc1dbdc021c116530bab488cbb157feaef7e8545b10ae592dc2942490ed7783e3056cf1432f647147901bc69be52837395818bad6fbb3c9d698ec54c02e3600308be84ec682c6281497b7afefb984fb4c22fdf4e72b5736d9e8d439f5945e6f431f289a7963d2e6b612273f9a15bdbc12370bf4f6d75bb3a7d7af82b98c7576ef2f5186b3ef36277ed262159112cdda7505d65afd8bd14248269ffcfdcb74198d30fd216a5412f4f407fc8f4b999003f35b6694acb6d9c24403cf5d3cb95e52a8f7ea7eb504f60152fe15b6854e5b206355901be1581ad4cf454f7c2237934f3e1c567899d1b88f0f14a0fb41d685b3c451490feb15691ecc7ab8fd29744718d53f5452ec4f2713efc89e2547a3a66c271a65bbbdc0f4efd5ac0d1fe1d83fc6a2dbcfb24a4ef302556ac42207fa976ca128dfb950b46388d95ecc4f53230e1572d84c854b772d1a0ef369e626dad505cac2db2e0f733696742a85699142b764171fccd70998e27126c550ea342bc075496979e85a387e705203398d8c93b5584e2336ea0bea14ebd6349eb80010e212f464798f97fbaf9c4f2817e4eefb6b6fb06f5c6703781a5605f4c619e45520473588f64ab21656a28cb6c2ac183e14e4002042c26fcbb17f24e02207701cb811baba1886663daaebf93f8b11495cc287742d9a786da6e3911f2ca5a141de3e2bee1cae83f467d2ffa08449a7a519a81f1683937c07a98e53991fca13dc4fb992995725514565574a98574e4d9a2b2d2b4a084fcabe8332fc1083439f912ce2192f306f3ad864294f30a44a41b8778f11b419965c4f6df1495062ca783c69f26c3d5e3f9cb10f1b9d2a26d9e1fc3c1380c7969eed3a20d8775138b3412ae931566c0f6427e7b7e20033bae9f1d7bbbfa38ab65abd07beb9c6106dc9c562b4cafea056de1dd5cfa3eb74b2895ee63611129edca330125e13c42406d7f7ae73e6b782ae5433826abee44eea2ecbae32b473566e137fae850d0cb4b3e65cc1c5ea371b0c1549a9cb7f6946d462eb83f583a7411c40dc759c6519ce5b451c241737379d4a7898044ef92bb7af29a37cb5f7cb5cdb3e18d8075cd6f7ad139541452dab7a8d283032d16bc267686cf6dd2aa2629a73d5da564b66aa38be1dc38bf55b9080ea143112c957f231600f65d7246c103575b9090c90f33853d19f9c283e2b5372fd297161a88cbdc4196ff3fc7372c7ab91a12bdbd812fb65c85c2195a2a83a9b3d524cae3f10ae236e5895295abfe4322bb1be76eaca477af7ecf1ec6f2860cc5a6fab617b478314dcbd2cf860ca3dc6fcec2984f2e9b2deeea8a029cb3bdbd579faa2a348f497feb960693a55e80dc75f856ddc74dbd5a99fc462e76ea80ddcd0467db82d055f0ffe3172f0772e285a51f62123bea7459dd59c62fc6618880bca9bd8c82538a441d64034179f76e7a6e9b17c101ea4ff208db90df8acfd3d445315f03f2ea9e98dca492bc366392dcbcd5f880be45090b2896fed03854c6d1ca30a3c17f1376fd9b3cf57205e8ccfbe1b6281d8065a772ee711414405405a3cd409ad60df80a3bcad8944b5c05d41d70679312af00c25cd8e3d3c43a6061c2ec0e2f6813322bb52a405e65cc2cde242eaf800cfe12b2131670de9c20b63ef24a1569a22a03a0aebc54995797b80dc7a62b6af1952b497f5ef54e986eadd079c06899d28909013e9a8c0a4dc4d4c0372745734d38bc045d0a20a8b427bbc440d3b877d25ce850f9093819c1e971222b4378d5e3c61e315ccd9c3a427bb75ce8f386fcbf0d79a2c08173472a90d78b754af0aae26ebf96cab19cdeeb80e470995fb2d43e6cef2e3d95f496730bd10539b67c2c4853c3b6e9d74170af1bd9d4439e106f9538b5d97751564e3d2972c9d795d7f7fd87d1af5cb2edfe36e57961a1a36b366d0c1321216489a8e073bd0ad357aecd1b4cdb68840d042ca89d36bc7ceff46ac0286c2738e2a750a66f618908ff49b4941e7ed5b69607791ebb8535ecc671c1aca27d36c8130dcd51e3e1b9964ddaa632b15e89ddc8b5161c394cef3d9a3e42857961088b155d3415d09b278a94d2255754b9c05dc35da66477487d730c4b10563e439e3a4293723d5f25ffe6fcef9fe67e005fff77d957e0b46f7de8d23d2fec973f4f7f279f6cc04f1f93ccb7b61e4ceea9a690aa0c76e3de4e95e215f51bdf71b83e8160b730844900c1e592b68f9b8b2a4ac83adc220d5d8bafd23e1d57ae18a8b4b6cdee707821fe5f7a630123aa7fad0eb7d01885149fb2f2868153647a511215cdc0b62e772e53f3d03cbb2c37575c0629fdf46832af46924f05b6b1c006eb7344289fc0620b30137851e874290632774fcfe17888fb36325339a30b34a7957c71f28c797f07878116a2ef8e421149f0243a28210da6e88487d6e7b1b42bbb9a53b65c0073210d6a60a42d50f1863cbde06ee9226f75315d1398c33a39897f6fea9e22c27291566cab238c580e69f156b5ab202f93f49d174afc6591cae91eae1b541030ee98c13724133c2fc518e1bfad747538db6e1f9854345188a856efe8411db45a3ab89f85bc288842539c761548a2096b57400d40959d0988eb83db235401539d0c7e80b7f24b13001ecd490481530730ec2f7ee6530060c13124216d902b184316ec2a273d762c35d239e7dcc66a9fa1ae5c9eed538310f9992786999b1d93677404b58048cc31fe0484bcd44a86994fdb3ce074b289c17daddedfa9c9a51e1fa2fac50dc82b31a0930556f12e5ff1c25ff869292581d95c9b55326b54aee20895cbb0bbdb36a402fe8f9340a757e3049eaade8a5a540eee795dad75a087be8f91d0ff3a5c5d4d5859b75f3505f217417df8c643331de439fb8c9fba6ac278711375ae346524a297432872fc76d16a2d6a3a88fed26255c2a926206cd40ba88b087695a92d265aa9dc62164cac9fc419d2823613920739df81973bb157dc1547cb7d3ff43c843df007ece3db9b2d5834527cfc6889307a00975e1cc92b21bfc87f0cc34a9e091eacafdacbb2179ca1fc2265810c3d32910ca78b77683d7d9a24eaaf1d837f0a12ac84c3714fd37740a1c500b488be6624e016ad3873a238f71270d99c5ad7b4ac6bfd5aec9779e12b32be54ed4b8f1b8fabf1a51a24b2e48d69f0b2ec3966e0ae11b4f75b5c69491615b8dc5d00c092e76408e902d86946184610cebd56dc42c938f4abd4fc448100478ac7035373ff6981ffee33d128916b96480579dde622ac274a457dc4f493e48617fbfa350a4cd656c2ffc2c6b3d2d2de4f77a4e8a2ffb24749e5e300dbbd2d17003ad3a942f06193335cd101eace6236aa28efe2361e60484872eef05c780ca83b699589f1a11507d9269aff2fac5e46cc13b4207cc65f3f19781dca"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r11}, {r10, r12}, {}, {}, {r11, r12}, {r11}, {r11}, {}, {0x0, r12}, {r10}, {}, {}, {}, {r11}, {}, {r11}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {r11}, {}, {}, {}, {}, {r10, r12}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r12}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {r11, r12}, {}, {r10, r12}, {}, {r10, r12}, {}, {0x0, r12}, {r10}, {}, {}, {}, {r10, r12}, {}, {r11}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {r10}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {r11}, {}, {}, {0x0, r12}, {}, {}, {}, {r10}, {}, {}, {}, {r11}, {}, {}, {r10}, {}, {r11}, {}, {0x0, r12}, {}, {}, {}, {r10}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r11, r12}, {}, {r11}, {}, {0x0, r12}, {r11}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {0x0, r12}, {r11}, {}, {}, {r10}, {}, {}, {}, {}, {r11}, {}, {r11}, {0x0, r12}, {}, {}, {}, {}, {}, {r10, r12}, {}, {}, {r11}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r10}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {r11, r12}, {}, {0x0, r12}, {r11}, {r10}, {r10}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {r10}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}], 0x3f, "4c69a69153a7fc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e240)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r6}, {}, {}, {r7, r12}], 0x20, "5e5d1a6362d13f"}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2152.779676][T14968] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2152.779687][T14968] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2152.779698][T14968] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.779734][T14968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.779744][T14968] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2153.859203][ C1] sd 0:0:1:0: [sg0] tag#2775 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2153.869573][ C1] sd 0:0:1:0: [sg0] tag#2775 CDB: opcode=0xe5 (vendor) [ 2153.876448][ C1] sd 0:0:1:0: [sg0] tag#2775 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2153.886027][ C1] sd 0:0:1:0: [sg0] tag#2775 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2153.895608][ C1] sd 0:0:1:0: [sg0] tag#2775 CDB[20]: ba [ 2153.901565][T14992] FAULT_INJECTION: forcing a failure. 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x2000000, 0x0) 10:52:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x1, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x20) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xdc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "4e1c177b23016dada0493b76e1f94929812cb9137f2854012a4e84423840faf19ad138b41816a6d97a2f4a8569ad4b832a3ea37c35f3e6d4573df7626cb721863c5820b733f0331b8260595c2c15590214ddd3e86aea2f351a884888f7c6b4d5656a972044086938beaaa37b8a23524f7d3e2cb380005e0d4392f6fc3f5585bfbdfb7331e4fb87bfd4190cd51b3cc81fb2bf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2153.901565][T14992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2153.914873][T14992] CPU: 0 PID: 14992 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2153.925024][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.935103][T14992] Call Trace: [ 2153.935114][T14992] dump_stack_lvl+0xb7/0x103 [ 2153.935137][T14992] dump_stack+0x11/0x1a [ 2153.935152][T14992] should_fail+0x23c/0x250 [ 2153.935181][T14992] __alloc_pages+0x102/0x320 [ 2153.935199][T14992] alloc_pages_vma+0x513/0x680 [ 2153.935308][T14992] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2153.935335][T14992] do_anonymous_page+0x16e/0x8a0 [ 2153.935354][T14992] handle_mm_fault+0x98f/0x1a50 [ 2153.935372][T14992] ? follow_page_mask+0x93f/0x1040 [ 2153.935393][T14992] __get_user_pages+0x32b/0xbc0 [ 2153.935416][T14992] get_user_pages_unlocked+0x175/0x630 [ 2153.935458][T14992] ? gup_pte_range+0x429/0x620 [ 2153.996532][T14992] __gup_longterm_unlocked+0x47/0x100 [ 2153.996572][T14992] internal_get_user_pages_fast+0x763/0x860 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x3000000, 0x0) [ 2154.007790][T14992] get_user_pages_fast+0x5d/0x80 [ 2154.007819][T14992] iov_iter_get_pages+0x199/0x7e0 [ 2154.007842][T14992] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2154.007862][T14992] ? mempool_alloc_slab+0x16/0x20 [ 2154.007918][T14992] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2154.008026][T14992] ? bio_alloc_bioset+0x402/0x480 [ 2154.008050][T14992] iomap_dio_bio_actor+0x673/0xb50 [ 2154.008077][T14992] iomap_dio_actor+0x26e/0x3b0 [ 2154.008097][T14992] iomap_apply+0x1df/0x400 [ 2154.008172][T14992] __iomap_dio_rw+0x62e/0xa60 [ 2154.008271][T14992] ? __iomap_dio_rw+0xa60/0xa60 [ 2154.008292][T14992] iomap_dio_rw+0x30/0x70 [ 2154.008311][T14992] ext4_file_read_iter+0x21a/0x290 [ 2154.008330][T14992] aio_read+0x1c1/0x280 [ 2154.008425][T14992] ? should_fail+0xd6/0x250 [ 2154.008448][T14992] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2154.008470][T14992] io_submit_one+0x7fb/0x1350 [ 2154.008495][T14992] __se_sys_io_submit+0xf5/0x260 [ 2154.008516][T14992] __x64_sys_io_submit+0x3f/0x50 [ 2154.008578][T14992] do_syscall_64+0x3d/0x90 [ 2154.008600][T14992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2154.008630][T14992] RIP: 0033:0x4665e9 [ 2154.024756][ C1] sd 0:0:1:0: [sg0] tag#2781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2154.028530][T14992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2154.028548][T14992] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2154.033910][ C1] sd 0:0:1:0: [sg0] tag#2781 CDB: opcode=0xe5 (vendor) [ 2154.038893][T14992] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2154.038906][T14992] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2154.044004][ C1] sd 0:0:1:0: [sg0] tag#2781 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2154.048717][T14992] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2154.048730][T14992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:52:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = getpid() ptrace$setopts(0x4206, r2, 0x399, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfffffffffffffffd, 0x50b202) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000001c0)={0x1, 0x7fffffff}) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone3(&(0x7f00000013c0)={0x2149100, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x10}, &(0x7f0000000340)=""/77, 0x4d, &(0x7f00000003c0)=""/4096, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0, r0], 0x7, {r4}}, 0x58) write$binfmt_elf64(r3, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x7, 0x4, 0x0, 0x0, 0x3e, 0xf9, 0x390, 0x40, 0x39, 0x7, 0x5, 0x38, 0x2, 0xffc0, 0xee, 0x7}, [{0x1, 0x3, 0x1, 0x3, 0xfffffffffffffff8, 0x4, 0x5, 0x2}, {0x6474e551, 0x78, 0x1, 0x1, 0x0, 0x49, 0x20, 0x4}], "80de47f7b4d529d8c7e633abf573b0aef12d5bc0d2f45beb5cb296c587a1cde9517603", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad3) preadv(r5, &(0x7f00000017c0)=[{&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001500)=""/198, 0xc6}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000000240)}, {&(0x7f0000001700)=""/13, 0xd}, {&(0x7f0000001740)=""/121, 0x79}], 0x6, 0x100, 0x81) tkill(r0, 0x7) fallocate(r1, 0x6a, 0x9, 0x3) 10:52:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x5) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4c0200, 0x8) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2154.053136][ C1] sd 0:0:1:0: [sg0] tag#2781 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2154.057772][T14992] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2154.219419][ C1] sd 0:0:1:0: [sg0] tag#2781 CDB[20]: ba 10:52:16 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c) read(r2, &(0x7f0000000380)=""/127, 0x7f) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, '\x00', "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0x1, "3bd99f4585082fa2", "8d377358bf88d615dbd860aee232dd3f75be6c900c120bbc3e02c4caf587a286", 0x5, 0x4}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000400)={0xc1f, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4000000, 0x0) 10:52:16 executing program 0 (fault-call:6 fault-nth:20): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x15a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000001600)="db1ccd82250258d15da248328c8c433d53850235dae467690aaa7794d156a7d6008400074646bd54bd37b44d41287d59e76016031b30183d4a2a2bbfeefa44925df53aac7f69cac5086b4110bbe178ec7113e63207e30122c524cd2f408548e1ea87ed7deb7a36504b04baf0b95027af775bd7e1e630a6aeadf6d2ba53c95b20d18f3ff991ecd90de1178d464424e7691722b7c85159df2667fe1abf89", 0x9d, 0x447) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000240)=""/131, 0x83}], 0x3, 0xa7, 0x4) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x102, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fedbdf250100000005008700f6f0711a0000060001004e2100000800", @ANYRES32=0x0, @ANYBLOB="1400070014000900fc010000000000000000000000000001060004000100"/48], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) read$eventfd(r0, &(0x7f0000000100), 0x7c) 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x5000000, 0x0) 10:52:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:16 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6000000, 0x0) 10:52:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) close_range(r2, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xa, 0x13012, r2, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) [ 2154.569742][T15062] FAULT_INJECTION: forcing a failure. [ 2154.569742][T15062] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.582444][T15062] CPU: 0 PID: 15062 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2154.592636][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.602763][T15062] Call Trace: [ 2154.606030][T15062] dump_stack_lvl+0xb7/0x103 [ 2154.610731][T15062] dump_stack+0x11/0x1a [ 2154.614881][T15062] should_fail+0x23c/0x250 [ 2154.619297][T15062] __should_failslab+0x81/0x90 [ 2154.624177][T15062] should_failslab+0x5/0x20 [ 2154.628679][T15062] kmem_cache_alloc_node+0x58/0x2b0 [ 2154.633882][T15062] ? create_task_io_context+0x36/0x210 [ 2154.639526][T15062] create_task_io_context+0x36/0x210 [ 2154.644836][T15062] submit_bio_checks+0x778/0x800 [ 2154.649770][T15062] submit_bio_noacct+0x33/0x7e0 [ 2154.654616][T15062] ? page_mapping+0x13c/0x1c0 [ 2154.659295][T15062] ? unlock_page+0x4d/0x70 [ 2154.659324][T15062] ? set_page_dirty_lock+0x157/0x210 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7000000, 0x0) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x8000000, 0x0) [ 2154.659341][T15062] submit_bio+0x10c/0x190 [ 2154.659359][T15062] iomap_dio_bio_actor+0x91d/0xb50 [ 2154.659385][T15062] iomap_dio_actor+0x26e/0x3b0 [ 2154.659408][T15062] ? __smp_call_single_queue+0x4a/0x60 [ 2154.688673][T15062] iomap_apply+0x1df/0x400 [ 2154.688698][T15062] __iomap_dio_rw+0x62e/0xa60 [ 2154.688717][T15062] ? __iomap_dio_rw+0xa60/0xa60 [ 2154.688785][T15062] iomap_dio_rw+0x30/0x70 [ 2154.688805][T15062] ext4_file_read_iter+0x21a/0x290 [ 2154.688821][T15062] aio_read+0x1c1/0x280 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x9000000, 0x0) [ 2154.688840][T15062] ? should_fail+0xd6/0x250 [ 2154.688940][T15062] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2154.725810][T15062] io_submit_one+0x7fb/0x1350 [ 2154.725843][T15062] __se_sys_io_submit+0xf5/0x260 [ 2154.725867][T15062] __x64_sys_io_submit+0x3f/0x50 [ 2154.725891][T15062] do_syscall_64+0x3d/0x90 [ 2154.725929][T15062] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2154.750688][T15062] RIP: 0033:0x4665e9 [ 2154.754579][T15062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:17 executing program 0 (fault-call:6 fault-nth:21): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7c) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000180)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x2, &(0x7f00000005c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000002c0)="3331c0972bbc99b116ccda9c192b8ac1", 0x10, 0x6, 0x0, 0x1, r5}]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0xc9ab) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1000, r6, &(0x7f0000000080)="6b547746e8fd8d25aa9d916205cd2f18af6cd08aadcda3faf38a9f3f830b9c14918bb42e05f68f64f6b39259977fda7ae59876d1bfe7362b1b91acedd0e3cabeb8b06be47449f91917bc6a87eaf56fb1b6ecb0797d370a44f69560f6ca013e78786d22b1ab8296725444278d5a0320f45fa07b76ad89516c436ddc63ed", 0x7d, 0x7fffffff, 0x0, 0x1, r2}]) r7 = epoll_create1(0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x440100, 0x0) io_submit(r4, 0x2, &(0x7f00000004c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9e, r7, &(0x7f00000003c0)="7d553c551bce43c999f2ea1a51674cfa61d502cb2f57d3d45d56f64481a62be0fb0e273463dfde76573a9825354df9043ce20c9c407f800b0c86bdb530dfae50d17bb8fb2aa29558740dca21be498dc7ea34b71501d7715bed494ea1e89be1b3e9c05fbc0c30c1089a69add2c888b9c06c08d6635c34121b676b3d8f31f58010a9a006ab77efc25b4e3ff47a5316650c240c312fd3aeefc5fc3dc6b14ca6a0b02efaab071f7b33853d8c524d1af71d0a12a2e1034fb8d62c83813b7cbba779c18ef8963c510be4e3af8005a2e48493c423aee86302d678c0a9f7694ba0370c415a54d226bce5", 0xe6, 0x8, 0x0, 0x3, r8}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x9024, r2, &(0x7f0000000300)="4d344dce0dbfc615694c3d0f3e7bdfe03e", 0x11, 0x8, 0x0, 0x2, r0}]) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xa000000, 0x0) 10:52:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2154.754600][T15062] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2154.754619][T15062] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2154.754630][T15062] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2154.754654][T15062] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2154.754667][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.754677][T15062] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:17 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:17 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x6, 0x0, 'client1\x00', 0x6, "bedb06d83bca197d", "8698eae445450d3d200f7f392552007cf189f9d351fe41109a5ff3e715ee7099", 0x1000, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xb000000, 0x0) 10:52:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xc000000, 0x0) [ 2154.979608][T15110] FAULT_INJECTION: forcing a failure. [ 2154.979608][T15110] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.992235][T15110] CPU: 0 PID: 15110 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2155.002381][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.012425][T15110] Call Trace: [ 2155.015703][T15110] dump_stack_lvl+0xb7/0x103 [ 2155.020323][T15110] dump_stack+0x11/0x1a [ 2155.024470][T15110] should_fail+0x23c/0x250 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xd000000, 0x0) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xe000000, 0x0) [ 2155.028917][T15110] ? mempool_alloc_slab+0x16/0x20 [ 2155.033941][T15110] __should_failslab+0x81/0x90 [ 2155.038695][T15110] should_failslab+0x5/0x20 [ 2155.043189][T15110] kmem_cache_alloc+0x46/0x2e0 [ 2155.047973][T15110] mempool_alloc_slab+0x16/0x20 [ 2155.052826][T15110] ? mempool_free+0x130/0x130 [ 2155.057500][T15110] mempool_alloc+0x8c/0x300 [ 2155.062028][T15110] ? percpu_counter_add_batch+0x69/0xd0 [ 2155.067576][T15110] ? ext4_es_lookup_extent+0x36b/0x490 [ 2155.073122][T15110] bio_alloc_bioset+0xcc/0x480 [ 2155.077882][T15110] ? iov_iter_alignment+0x13b/0x370 [ 2155.083187][T15110] ? iov_iter_npages+0x10f/0x390 [ 2155.088109][T15110] ? iomap_dio_bio_actor+0x469/0xb50 [ 2155.093401][T15110] iomap_dio_bio_actor+0x511/0xb50 [ 2155.098535][T15110] iomap_dio_actor+0x26e/0x3b0 [ 2155.103285][T15110] iomap_apply+0x1df/0x400 [ 2155.107790][T15110] __iomap_dio_rw+0x62e/0xa60 [ 2155.112451][T15110] ? __iomap_dio_rw+0xa60/0xa60 [ 2155.117296][T15110] iomap_dio_rw+0x30/0x70 [ 2155.121628][T15110] ext4_file_read_iter+0x21a/0x290 [ 2155.126713][T15110] aio_read+0x1c1/0x280 [ 2155.130853][T15110] ? should_fail+0xd6/0x250 [ 2155.135339][T15110] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2155.140400][T15110] io_submit_one+0x7fb/0x1350 [ 2155.145070][T15110] __se_sys_io_submit+0xf5/0x260 [ 2155.150014][T15110] __x64_sys_io_submit+0x3f/0x50 [ 2155.154934][T15110] do_syscall_64+0x3d/0x90 [ 2155.159339][T15110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2155.165213][T15110] RIP: 0033:0x4665e9 [ 2155.169080][T15110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2155.188709][T15110] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2155.197118][T15110] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2155.205074][T15110] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2155.213032][T15110] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2155.220982][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2155.229055][T15110] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:17 executing program 0 (fault-call:6 fault-nth:22): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x10000000, 0x0) 10:52:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',huge=always,nr_inodes=g\b61tgm19,gid=', @ANYRESHEX, @ANYBLOB="2c6d432f0723706f6c3d62696e643a78fd720000000000000080782c736d61636b66736465663dbb52eef9f1d4d1093100dbb1b13b5339594c86fe84ad78ca05283a1e8e93326b89ec75c7576e37feda0b6d631fc912bc0f34f0efb4c192881f05bd693d47a052"]) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x5, 0x0, 0x0) [ 2155.439872][T15163] FAULT_INJECTION: forcing a failure. [ 2155.439872][T15163] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.452511][T15163] CPU: 0 PID: 15163 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2155.462673][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.472785][T15163] Call Trace: [ 2155.476044][T15163] dump_stack_lvl+0xb7/0x103 [ 2155.480651][T15163] dump_stack+0x11/0x1a [ 2155.484783][T15163] should_fail+0x23c/0x250 [ 2155.489183][T15163] ? bio_alloc_bioset+0x27d/0x480 [ 2155.494253][T15163] __should_failslab+0x81/0x90 [ 2155.499131][T15163] should_failslab+0x5/0x20 [ 2155.503634][T15163] kmem_cache_alloc+0x46/0x2e0 [ 2155.508482][T15163] ? ext4_es_lookup_extent+0x36b/0x490 [ 2155.513922][T15163] bio_alloc_bioset+0x27d/0x480 [ 2155.518755][T15163] iomap_dio_bio_actor+0x511/0xb50 [ 2155.523851][T15163] iomap_dio_actor+0x26e/0x3b0 [ 2155.528617][T15163] iomap_apply+0x1df/0x400 [ 2155.533127][T15163] __iomap_dio_rw+0x62e/0xa60 [ 2155.537961][T15163] ? __iomap_dio_rw+0xa60/0xa60 [ 2155.542855][T15163] iomap_dio_rw+0x30/0x70 [ 2155.547174][T15163] ext4_file_read_iter+0x21a/0x290 [ 2155.552335][T15163] aio_read+0x1c1/0x280 [ 2155.556469][T15163] ? should_fail+0xd6/0x250 [ 2155.560979][T15163] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2155.565993][T15163] io_submit_one+0x7fb/0x1350 [ 2155.570682][T15163] __se_sys_io_submit+0xf5/0x260 [ 2155.575613][T15163] __x64_sys_io_submit+0x3f/0x50 [ 2155.580536][T15163] do_syscall_64+0x3d/0x90 [ 2155.584929][T15163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2155.591025][T15163] RIP: 0033:0x4665e9 [ 2155.594909][T15163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2155.614577][T15163] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2155.622987][T15163] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2155.630935][T15163] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2155.638891][T15163] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2155.646913][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2155.654861][T15163] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:18 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x11000000, 0x0) 10:52:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$cgroup_ro(r2, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = fspick(r2, &(0x7f0000000380)='./file0\x00', 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="8cdbacf639bd70a9bb38625837f32255b3f3707acf8616613744f9e304f5faa631ec3745769c01fb7a55f07a4f6388ac0c6992e349914da76899ed9cef7c5a0afa5d24d025470300e20d19c36da03b1f1e238353be14f369c6b814fac5422fd39eebc9a51e3b8a594e7ccde24ab97137cf7cec9754d71601af6a", 0x7a}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xee01}}}], 0xb0, 0xc880}, 0x20000090) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r11, 0x0) r12 = openat$cgroup(r2, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000500)='rdma.current\x00', 0x0, 0x0) preadv(r11, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2}, 0x6e) r13 = dup2(r0, r0) write$binfmt_elf64(r13, 0x0, 0x0) 10:52:18 executing program 3: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0xa10e, 0x1, [0xd3b, 0x9, 0x1000, 0x3, 0x7], [0x9, 0x6, 0xfffffffffffffffd, 0x3, 0x192f, 0x100000000, 0x800, 0x2, 0x7fff, 0x3, 0x1f, 0x3, 0x8000, 0x7ff, 0x521d, 0x5, 0xb50, 0x8, 0x6, 0x3f, 0xffffffffffffff4a, 0x7, 0x8, 0x101, 0x6, 0x1, 0x101, 0x7600, 0x9, 0x10001, 0x7, 0x800, 0x0, 0xf77, 0x4, 0x9, 0x8000, 0x8, 0x2, 0x4, 0x1, 0x3, 0x86, 0x3, 0x4, 0x7295, 0x2, 0xe8, 0x200, 0x9, 0x6, 0x400, 0xafd2, 0x5, 0x3ff, 0x10001, 0x80, 0x100000001, 0x100000000, 0x3, 0xfff, 0x9, 0x10000, 0x7f, 0x9, 0xffffffff, 0x5, 0x1f, 0x6e, 0x2, 0x2, 0x3, 0x9, 0x4, 0x2400000, 0x7, 0x40, 0x4080, 0x8001, 0x7, 0x80000000, 0x40, 0x5, 0x200, 0x20, 0x7, 0x400, 0x858, 0x9, 0x5, 0x7d, 0x3, 0x9, 0x172abc7e, 0x7fff, 0x5, 0x20, 0x1000, 0x25bf, 0x200, 0x20, 0x81, 0xffffffffffffff46, 0xffffffffffffffff, 0x5, 0xe570, 0xb1d, 0x2e25, 0xffffffffffff7fff, 0xe9f6, 0x0, 0x6, 0x1, 0x5, 0x0, 0x5, 0x3, 0x80000000, 0x9, 0x1, 0x1000]}) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:18 executing program 0 (fault-call:6 fault-nth:23): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:18 executing program 2: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') r1 = gettid() tkill(r1, 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x12000000, 0x0) 10:52:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10244, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') getcwd(0x0, 0x0) [ 2155.864430][T15196] FAULT_INJECTION: forcing a failure. [ 2155.864430][T15196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2155.877787][T15196] CPU: 0 PID: 15196 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2155.887938][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.897981][T15196] Call Trace: [ 2155.901257][T15196] dump_stack_lvl+0xb7/0x103 [ 2155.905842][T15196] dump_stack+0x11/0x1a [ 2155.909994][T15196] should_fail+0x23c/0x250 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x25000000, 0x0) [ 2155.914445][T15196] __alloc_pages+0x102/0x320 [ 2155.919027][T15196] alloc_pages_vma+0x513/0x680 [ 2155.923787][T15196] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2155.929376][T15196] do_anonymous_page+0x16e/0x8a0 [ 2155.934315][T15196] handle_mm_fault+0x98f/0x1a50 [ 2155.934337][T15196] ? follow_page_mask+0x93f/0x1040 [ 2155.934359][T15196] __get_user_pages+0x32b/0xbc0 [ 2155.934522][T15196] get_user_pages_unlocked+0x175/0x630 [ 2155.934580][T15196] ? gup_pte_range+0x429/0x620 [ 2155.959508][T15196] __gup_longterm_unlocked+0x47/0x100 10:52:18 executing program 2: set_mempolicy(0x2, &(0x7f0000000200)=0x7ff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa96b8caa20c64108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2155.959545][T15196] internal_get_user_pages_fast+0x763/0x860 [ 2155.959581][T15196] get_user_pages_fast+0x5d/0x80 [ 2155.959605][T15196] iov_iter_get_pages+0x199/0x7e0 [ 2155.959630][T15196] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2155.959654][T15196] ? mempool_alloc_slab+0x16/0x20 [ 2155.991047][T15196] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2155.991081][T15196] ? bio_alloc_bioset+0x402/0x480 [ 2155.991139][T15196] iomap_dio_bio_actor+0x673/0xb50 [ 2155.991165][T15196] iomap_dio_actor+0x26e/0x3b0 [ 2156.011739][T15196] iomap_apply+0x1df/0x400 [ 2156.011773][T15196] __iomap_dio_rw+0x62e/0xa60 [ 2156.011797][T15196] ? __iomap_dio_rw+0xa60/0xa60 [ 2156.011822][T15196] iomap_dio_rw+0x30/0x70 [ 2156.029975][T15196] ext4_file_read_iter+0x21a/0x290 [ 2156.035141][T15196] aio_read+0x1c1/0x280 [ 2156.035167][T15196] ? should_fail+0xd6/0x250 [ 2156.035222][T15196] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2156.035246][T15196] io_submit_one+0x7fb/0x1350 [ 2156.035267][T15196] __se_sys_io_submit+0xf5/0x260 [ 2156.058479][T15196] __x64_sys_io_submit+0x3f/0x50 [ 2156.063424][T15196] do_syscall_64+0x3d/0x90 [ 2156.063450][T15196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2156.063471][T15196] RIP: 0033:0x4665e9 [ 2156.063489][T15196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.063504][T15196] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2156.063530][T15196] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2156.063543][T15196] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2156.063555][T15196] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.063567][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.063579][T15196] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2156.146194][ T25] audit: type=1400 audit(1629543138.306:1928): avc: denied { dac_override } for pid=15199 comm="syz-executor.2" capability=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x3f000000, 0x0) 10:52:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:18 executing program 2: r0 = syz_io_uring_setup(0x550, &(0x7f00000003c0), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r3}}, 0xfffffffe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x2e, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r4, 0x1) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 10:52:18 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:18 executing program 0 (fault-call:6 fault-nth:24): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x48000000, 0x0) 10:52:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:18 executing program 3: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x5) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x200, @tick=0x80, 0x80, {0x1, 0x7}, 0x24, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2156.274318][T15196] syz-executor.0 (15196) used greatest stack depth: 10592 bytes left 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x4c000000, 0x0) 10:52:18 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000300)=[{&(0x7f0000000400)="ebe17f8b8566732e66617400028001000240000084f8018b", 0x18, 0x7fff}], 0x8503, &(0x7f0000000740)) 10:52:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2156.408882][T15263] FAULT_INJECTION: forcing a failure. [ 2156.408882][T15263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2156.422121][T15263] CPU: 0 PID: 15263 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2156.432309][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.442357][T15263] Call Trace: [ 2156.445627][T15263] dump_stack_lvl+0xb7/0x103 [ 2156.450212][T15263] dump_stack+0x11/0x1a [ 2156.454359][T15263] should_fail+0x23c/0x250 10:52:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) preadv(r1, &(0x7f0000000080), 0x0, 0xd9f, 0x0) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="240000001a0003041dfffd946f610500020c010a1f05fe060c10080008001000ff00c00e140000001a00ffffba16a0aa1c09000014000000", 0x38}], 0x1}, 0x0) 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x51000000, 0x0) [ 2156.458828][T15263] __alloc_pages+0x102/0x320 [ 2156.463413][T15263] alloc_pages_vma+0x513/0x680 [ 2156.468260][T15263] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2156.473975][T15263] do_anonymous_page+0x16e/0x8a0 [ 2156.479014][T15263] handle_mm_fault+0x98f/0x1a50 [ 2156.483857][T15263] ? follow_page_mask+0x93f/0x1040 [ 2156.488968][T15263] __get_user_pages+0x32b/0xbc0 [ 2156.493818][T15263] get_user_pages_unlocked+0x175/0x630 [ 2156.499279][T15263] ? gup_pte_range+0x429/0x620 [ 2156.504088][T15263] __gup_longterm_unlocked+0x47/0x100 10:52:18 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x68000000, 0x0) 10:52:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0x8400fffffffa) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 2156.509454][T15263] internal_get_user_pages_fast+0x763/0x860 [ 2156.515347][T15263] get_user_pages_fast+0x5d/0x80 [ 2156.520279][T15263] iov_iter_get_pages+0x199/0x7e0 [ 2156.525307][T15263] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2156.530402][T15263] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 2156.535959][T15263] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2156.541334][T15263] ? bio_alloc_bioset+0x402/0x480 [ 2156.546379][T15263] iomap_dio_bio_actor+0x673/0xb50 [ 2156.551527][T15263] iomap_dio_actor+0x26e/0x3b0 [ 2156.556287][T15263] iomap_apply+0x1df/0x400 [ 2156.560773][T15263] __iomap_dio_rw+0x62e/0xa60 [ 2156.565457][T15263] ? __iomap_dio_rw+0xa60/0xa60 [ 2156.570310][T15263] iomap_dio_rw+0x30/0x70 [ 2156.574643][T15263] ext4_file_read_iter+0x21a/0x290 [ 2156.579761][T15263] aio_read+0x1c1/0x280 [ 2156.583917][T15263] ? should_fail+0xd6/0x250 [ 2156.588503][T15263] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2156.593530][T15263] io_submit_one+0x7fb/0x1350 [ 2156.598217][T15263] __se_sys_io_submit+0xf5/0x260 [ 2156.603272][T15263] __x64_sys_io_submit+0x3f/0x50 [ 2156.608210][T15263] do_syscall_64+0x3d/0x90 [ 2156.612632][T15263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2156.618512][T15263] RIP: 0033:0x4665e9 [ 2156.622393][T15263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.642005][T15263] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2156.650397][T15263] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:19 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2156.658697][T15263] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2156.666656][T15263] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.674801][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.682749][T15263] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:19 executing program 0 (fault-call:6 fault-nth:25): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x6c000000, 0x0) 10:52:19 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x2d, @tick=0x4a0, 0x2, {0x1, 0xfb}, 0x8c, 0x1, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x8, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000180)="2719c0d901000000803a010000000900000000000600000000000000050002", 0x1f, 0x10000}], 0x0, &(0x7f0000000300)=ANY=[]) creat(&(0x7f0000000040)='./file0\x00', 0x84) 10:52:19 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x3, 0x0, r2, 0x0, 0x2}]) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000000)) 10:52:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x74000000, 0x0) [ 2156.919208][T15320] FAULT_INJECTION: forcing a failure. [ 2156.919208][T15320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2156.932469][T15320] CPU: 0 PID: 15320 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 10:52:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x7a000000, 0x0) [ 2156.932493][T15320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.932504][T15320] Call Trace: [ 2156.932511][T15320] dump_stack_lvl+0xb7/0x103 [ 2156.932549][T15320] dump_stack+0x11/0x1a 10:52:19 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:19 executing program 0 (fault-call:6 fault-nth:26): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xbe000000, 0x0) [ 2156.932565][T15320] should_fail+0x23c/0x250 [ 2156.932619][T15320] __alloc_pages+0x102/0x320 [ 2156.932699][T15320] alloc_pages_vma+0x513/0x680 [ 2156.932721][T15320] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2156.932746][T15320] do_anonymous_page+0x16e/0x8a0 [ 2156.932807][T15320] handle_mm_fault+0x98f/0x1a50 10:52:19 executing program 3: r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:19 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) close_range(r1, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:19 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1000017, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) tkill(r2, 0xc) [ 2156.932826][T15320] ? follow_page_mask+0x93f/0x1040 [ 2156.932850][T15320] __get_user_pages+0x32b/0xbc0 [ 2156.932913][T15320] get_user_pages_unlocked+0x175/0x630 [ 2156.932938][T15320] ? gup_pte_range+0x429/0x620 10:52:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xf6000000, 0x0) [ 2156.932961][T15320] __gup_longterm_unlocked+0x47/0x100 [ 2156.933023][T15320] internal_get_user_pages_fast+0x763/0x860 [ 2156.933050][T15320] get_user_pages_fast+0x5d/0x80 [ 2156.933072][T15320] iov_iter_get_pages+0x199/0x7e0 [ 2156.933122][T15320] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2156.933146][T15320] ? mempool_alloc_slab+0x16/0x20 [ 2156.933169][T15320] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2156.933196][T15320] ? bio_alloc_bioset+0x402/0x480 [ 2156.933220][T15320] iomap_dio_bio_actor+0x673/0xb50 [ 2156.933361][T15320] iomap_dio_actor+0x26e/0x3b0 [ 2156.933384][T15320] iomap_apply+0x1df/0x400 [ 2156.933468][T15320] __iomap_dio_rw+0x62e/0xa60 [ 2156.933559][T15320] ? __iomap_dio_rw+0xa60/0xa60 [ 2156.933639][T15320] iomap_dio_rw+0x30/0x70 [ 2156.933658][T15320] ext4_file_read_iter+0x21a/0x290 [ 2156.933675][T15320] aio_read+0x1c1/0x280 [ 2156.933694][T15320] ? should_fail+0xd6/0x250 [ 2156.933712][T15320] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2156.933771][T15320] io_submit_one+0x7fb/0x1350 [ 2156.933794][T15320] __se_sys_io_submit+0xf5/0x260 [ 2156.933867][T15320] __x64_sys_io_submit+0x3f/0x50 [ 2156.933889][T15320] do_syscall_64+0x3d/0x90 [ 2156.933909][T15320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2156.933951][T15320] RIP: 0033:0x4665e9 [ 2156.934045][T15320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.934062][T15320] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2156.934078][T15320] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2156.934090][T15320] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2156.934102][T15320] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.934113][T15320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.934132][T15320] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2157.132190][T15348] FAULT_INJECTION: forcing a failure. [ 2157.132190][T15348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2157.132215][T15348] CPU: 0 PID: 15348 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2157.132238][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.132266][T15348] Call Trace: [ 2157.132273][T15348] dump_stack_lvl+0xb7/0x103 [ 2157.132295][T15348] dump_stack+0x11/0x1a [ 2157.132308][T15348] should_fail+0x23c/0x250 [ 2157.132330][T15348] __alloc_pages+0x102/0x320 [ 2157.132349][T15348] alloc_pages_vma+0x513/0x680 [ 2157.132432][T15348] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2157.132455][T15348] do_anonymous_page+0x16e/0x8a0 [ 2157.132474][T15348] handle_mm_fault+0x98f/0x1a50 [ 2157.132552][T15348] ? follow_page_mask+0x93f/0x1040 [ 2157.132573][T15348] __get_user_pages+0x32b/0xbc0 [ 2157.132660][T15348] get_user_pages_unlocked+0x175/0x630 [ 2157.132686][T15348] ? gup_pte_range+0x429/0x620 [ 2157.132708][T15348] __gup_longterm_unlocked+0x47/0x100 [ 2157.132788][T15348] internal_get_user_pages_fast+0x763/0x860 [ 2157.132812][T15348] get_user_pages_fast+0x5d/0x80 [ 2157.132875][T15348] iov_iter_get_pages+0x199/0x7e0 [ 2157.132967][T15348] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2157.133007][T15348] ? mempool_alloc_slab+0x16/0x20 [ 2157.133028][T15348] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2157.133165][T15348] ? bio_alloc_bioset+0x402/0x480 [ 2157.133190][T15348] iomap_dio_bio_actor+0x673/0xb50 [ 2157.133216][T15348] iomap_dio_actor+0x26e/0x3b0 [ 2157.133238][T15348] iomap_apply+0x1df/0x400 [ 2157.133260][T15348] __iomap_dio_rw+0x62e/0xa60 [ 2157.133323][T15348] ? __iomap_dio_rw+0xa60/0xa60 [ 2157.133348][T15348] iomap_dio_rw+0x30/0x70 [ 2157.133370][T15348] ext4_file_read_iter+0x21a/0x290 [ 2157.133391][T15348] aio_read+0x1c1/0x280 [ 2157.133415][T15348] ? should_fail+0xd6/0x250 [ 2157.133461][T15348] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2157.133481][T15348] io_submit_one+0x7fb/0x1350 [ 2157.133544][T15348] __se_sys_io_submit+0xf5/0x260 [ 2157.133569][T15348] __x64_sys_io_submit+0x3f/0x50 [ 2157.133598][T15348] do_syscall_64+0x3d/0x90 [ 2157.133620][T15348] ? irqentry_exit+0xe/0x30 [ 2157.133649][T15348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2157.133671][T15348] RIP: 0033:0x4665e9 [ 2157.133682][T15348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.133697][T15348] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2157.133712][T15348] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2157.133723][T15348] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2157.133733][T15348] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xfeffffff, 0x0) 10:52:20 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:20 executing program 0 (fault-call:6 fault-nth:27): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:20 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000001c0)={0x401, 0xd0e, 0x7}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)=0x0) ptrace$setopts(0x4200, r4, 0x2601, 0xa) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2157.133745][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.133757][T15348] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xfffffffe, 0x0) 10:52:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0xffffffff, 0x0) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2157.784102][T15378] FAULT_INJECTION: forcing a failure. [ 2157.784102][T15378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2157.797356][T15378] CPU: 0 PID: 15378 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2157.807500][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.817570][T15378] Call Trace: [ 2157.820838][T15378] dump_stack_lvl+0xb7/0x103 [ 2157.825448][T15378] dump_stack+0x11/0x1a [ 2157.829640][T15378] should_fail+0x23c/0x250 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x2) [ 2157.834124][T15378] __alloc_pages+0x102/0x320 [ 2157.838708][T15378] alloc_pages_vma+0x513/0x680 [ 2157.843466][T15378] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2157.849009][T15378] do_anonymous_page+0x16e/0x8a0 [ 2157.853962][T15378] handle_mm_fault+0x98f/0x1a50 [ 2157.858870][T15378] ? follow_page_mask+0x93f/0x1040 [ 2157.863971][T15378] __get_user_pages+0x32b/0xbc0 [ 2157.868821][T15378] get_user_pages_unlocked+0x175/0x630 [ 2157.874279][T15378] ? gup_pte_range+0x429/0x620 [ 2157.879120][T15378] __gup_longterm_unlocked+0x47/0x100 [ 2157.884554][T15378] internal_get_user_pages_fast+0x763/0x860 [ 2157.890507][T15378] get_user_pages_fast+0x5d/0x80 [ 2157.895492][T15378] iov_iter_get_pages+0x199/0x7e0 [ 2157.900525][T15378] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2157.905702][T15378] ? mempool_alloc_slab+0x16/0x20 [ 2157.910709][T15378] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2157.916174][T15378] ? bio_alloc_bioset+0x402/0x480 [ 2157.921187][T15378] iomap_dio_bio_actor+0x673/0xb50 [ 2157.926298][T15378] iomap_dio_actor+0x26e/0x3b0 [ 2157.931069][T15378] iomap_apply+0x1df/0x400 [ 2157.935464][T15378] __iomap_dio_rw+0x62e/0xa60 [ 2157.940225][T15378] ? __iomap_dio_rw+0xa60/0xa60 [ 2157.945056][T15378] iomap_dio_rw+0x30/0x70 [ 2157.949364][T15378] ext4_file_read_iter+0x21a/0x290 [ 2157.954463][T15378] aio_read+0x1c1/0x280 [ 2157.958723][T15378] ? should_fail+0xd6/0x250 [ 2157.963282][T15378] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2157.968300][T15378] io_submit_one+0x7fb/0x1350 [ 2157.972979][T15378] __se_sys_io_submit+0xf5/0x260 [ 2157.977908][T15378] __x64_sys_io_submit+0x3f/0x50 [ 2157.982856][T15378] do_syscall_64+0x3d/0x90 [ 2157.987289][T15378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2157.993160][T15378] RIP: 0033:0x4665e9 [ 2157.997026][T15378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.016661][T15378] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2158.025156][T15378] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:20 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setns(r2, 0x40000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0xfff, 0x0, [0x3f, 0xd72, 0xffff, 0x7, 0x3], [0x3, 0x9, 0x1, 0xd1ef, 0xc643251, 0xffff, 0x5c, 0x5, 0xfffffffffffffffc, 0x10000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x2, 0x0, 0x9, 0xffffffffffffffc9, 0x5, 0x5, 0x8000, 0xd00, 0x9, 0xfff, 0xfcaf, 0x8001, 0x7fff, 0x100000001, 0x1, 0x5, 0x80, 0x400, 0x1, 0x100000001, 0x200, 0x8001, 0x6, 0x81, 0x5, 0x40, 0xb7, 0x80000001, 0x1ff, 0x3, 0xe3a, 0x401, 0x5, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000001, 0x6, 0x4, 0x5, 0x6, 0x6, 0x238dec00, 0x3ff, 0xfff, 0x80000000, 0x8, 0x5, 0x3, 0x400, 0x7ff, 0x80000000, 0x1f3, 0x5, 0x7, 0x2, 0x101, 0x2, 0x3, 0x6, 0x620, 0x3, 0x1, 0x81, 0x6, 0x80000000, 0x1, 0x2, 0x9, 0x0, 0x6, 0x4, 0x1, 0x80000000, 0x9, 0x2, 0x1ff, 0x5, 0x8001, 0x0, 0x530, 0x6, 0x8, 0x3, 0x10000, 0xb49d, 0x6, 0x5f, 0x7, 0x1, 0x3, 0x9, 0x3f, 0x8f, 0x5, 0x3f, 0x1, 0x1, 0xfff, 0x20, 0x5, 0x2, 0x40, 0x100000001, 0x0, 0x69d00000000000]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000005c0)={r3, 0x200, 0xffffffff, 0x1}) syncfs(r1) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x3) [ 2158.033224][T15378] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2158.041350][T15378] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2158.049307][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2158.057277][T15378] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:20 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x9d3b}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4) 10:52:20 executing program 0 (fault-call:6 fault-nth:28): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:20 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x5) 10:52:20 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setns(r2, 0x40000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0xfff, 0x0, [0x3f, 0xd72, 0xffff, 0x7, 0x3], [0x3, 0x9, 0x1, 0xd1ef, 0xc643251, 0xffff, 0x5c, 0x5, 0xfffffffffffffffc, 0x10000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x2, 0x0, 0x9, 0xffffffffffffffc9, 0x5, 0x5, 0x8000, 0xd00, 0x9, 0xfff, 0xfcaf, 0x8001, 0x7fff, 0x100000001, 0x1, 0x5, 0x80, 0x400, 0x1, 0x100000001, 0x200, 0x8001, 0x6, 0x81, 0x5, 0x40, 0xb7, 0x80000001, 0x1ff, 0x3, 0xe3a, 0x401, 0x5, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000001, 0x6, 0x4, 0x5, 0x6, 0x6, 0x238dec00, 0x3ff, 0xfff, 0x80000000, 0x8, 0x5, 0x3, 0x400, 0x7ff, 0x80000000, 0x1f3, 0x5, 0x7, 0x2, 0x101, 0x2, 0x3, 0x6, 0x620, 0x3, 0x1, 0x81, 0x6, 0x80000000, 0x1, 0x2, 0x9, 0x0, 0x6, 0x4, 0x1, 0x80000000, 0x9, 0x2, 0x1ff, 0x5, 0x8001, 0x0, 0x530, 0x6, 0x8, 0x3, 0x10000, 0xb49d, 0x6, 0x5f, 0x7, 0x1, 0x3, 0x9, 0x3f, 0x8f, 0x5, 0x3f, 0x1, 0x1, 0xfff, 0x20, 0x5, 0x2, 0x40, 0x100000001, 0x0, 0x69d00000000000]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000005c0)={r3, 0x200, 0xffffffff, 0x1}) syncfs(r1) 10:52:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6) [ 2158.349200][T15435] FAULT_INJECTION: forcing a failure. [ 2158.349200][T15435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2158.362513][T15435] CPU: 0 PID: 15435 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2158.372771][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.382819][T15435] Call Trace: [ 2158.386094][T15435] dump_stack_lvl+0xb7/0x103 [ 2158.390685][T15435] dump_stack+0x11/0x1a [ 2158.394835][T15435] should_fail+0x23c/0x250 [ 2158.399246][T15435] __alloc_pages+0x102/0x320 [ 2158.403814][T15435] alloc_pages_vma+0x513/0x680 [ 2158.408568][T15435] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2158.414094][T15435] do_anonymous_page+0x16e/0x8a0 [ 2158.419011][T15435] handle_mm_fault+0x98f/0x1a50 [ 2158.423854][T15435] ? follow_page_mask+0x93f/0x1040 [ 2158.428954][T15435] __get_user_pages+0x32b/0xbc0 [ 2158.433782][T15435] get_user_pages_unlocked+0x175/0x630 [ 2158.439217][T15435] ? gup_pte_range+0x429/0x620 [ 2158.443961][T15435] __gup_longterm_unlocked+0x47/0x100 [ 2158.449378][T15435] internal_get_user_pages_fast+0x763/0x860 [ 2158.455260][T15435] get_user_pages_fast+0x5d/0x80 [ 2158.460308][T15435] iov_iter_get_pages+0x199/0x7e0 [ 2158.465308][T15435] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2158.470324][T15435] ? mempool_alloc_slab+0x16/0x20 [ 2158.475579][T15435] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2158.480942][T15435] ? bio_alloc_bioset+0x402/0x480 [ 2158.485942][T15435] iomap_dio_bio_actor+0x673/0xb50 [ 2158.491030][T15435] iomap_dio_actor+0x26e/0x3b0 [ 2158.495838][T15435] iomap_apply+0x1df/0x400 [ 2158.500322][T15435] __iomap_dio_rw+0x62e/0xa60 [ 2158.504973][T15435] ? __iomap_dio_rw+0xa60/0xa60 [ 2158.509960][T15435] iomap_dio_rw+0x30/0x70 [ 2158.514278][T15435] ext4_file_read_iter+0x21a/0x290 [ 2158.519382][T15435] aio_read+0x1c1/0x280 [ 2158.523546][T15435] ? should_fail+0xd6/0x250 [ 2158.528032][T15435] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2158.533035][T15435] io_submit_one+0x7fb/0x1350 [ 2158.537689][T15435] __se_sys_io_submit+0xf5/0x260 [ 2158.542627][T15435] __x64_sys_io_submit+0x3f/0x50 [ 2158.547684][T15435] do_syscall_64+0x3d/0x90 [ 2158.552115][T15435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2158.558116][T15435] RIP: 0033:0x4665e9 [ 2158.561988][T15435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.581588][T15435] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2158.589982][T15435] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7) 10:52:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:21 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x1f, 0x2, 0x2, 0x0, 0x7f, 0x5107, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8000, 0x81}, 0x0, 0x3, 0x1000, 0x7, 0x400000000000, 0x8, 0xcff, 0x0, 0x0, 0x0, 0x8000000000000000}, r2, 0x1, 0xffffffffffffffff, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) tkill(r0, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) wait4(r5, &(0x7f00000004c0), 0x4, &(0x7f0000000400)) [ 2158.597933][T15435] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2158.605884][T15435] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2158.613972][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2158.622145][T15435] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x8) 10:52:21 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:21 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x8}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:21 executing program 0 (fault-call:6 fault-nth:29): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x9) 10:52:21 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:21 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000002700)=[{&(0x7f0000000340)="8cd68593cb497c0e58253d4aef7abba62401a7e79940b3ae508521b5be392ada80d6a9b3c5e363e1f655edc941060e4695993610a326fe74c4edfc3068e293d5bb4122beea3875f652529cccc35d91c644783496f82c06d79aa0bfed6620c4a711b7482dc7c1d783847ef43ae24c3196919296dc6f735268c416119d75502a8111865b8a67714226f199deef9c99e856262d421a0b71c0c79fcd7f4e32974a9228b06997", 0xa4, 0x2}, {&(0x7f0000000400)="f9d05fcc7f9d58f7ad98c73b6d7f59e9ba813ffb4f849b21014decbb777e26ca970003b13bbf7dad0fb8fd935f3b24fc6e204936bcb6c123c1180b1f48cc47b6d73272189d91ba6a815abf298f5893053d49ecc6f96b36a63da497ac5f4675ed19c9f56cebde105d87c89a16176985b05ca32b528fbb6abb6d8a1e40474ffdd998ec34b94dff095dfa3a3b01fc21aa462ab646c074c1989e898177c5fa2dab3309ff980737a4649d41f40d9ae03a869b1cbc6757a8c8c0eb09a140203765a2c8", 0xc0, 0x20}, {&(0x7f00000004c0)="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", 0x1000, 0x1ff}, {&(0x7f0000000200)="9c06f0a5fbb45397a0c387df771d4ff93dbbc0a3faac2275af9f7e284641f8e4d214337c017c20a0f602d8e6724b5a30ea77d0f76d6461a4b4efd5f84e8879ff20813ec604ea9fa770e35d1cc6150281d921", 0x52, 0x8}, {&(0x7f00000014c0)="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", 0xfa, 0x6744}, {&(0x7f00000015c0)="8ed55880ef1c89553075884cdc893fd88a6243f6fbbf1aafbede00b6f1945da337369936b746c952e81e", 0x2a, 0x5}, {&(0x7f0000001600)="8f9eb173d7440e39c4b3545591bf7fabc87ed2128953f5a21d446971dbc64359156239345ad35e11c3d84ab805e0cd4d0a375933785d1669810cea9510926610f3ad4222435cf24bcb4daecd957ae7d8d9ba9dc588712ce081a7dc664b0b19", 0x5f, 0x4}, {&(0x7f0000001680)="7b8e302112dc94ca4e20752c6251eba3bf5d083e9ed5781b4513379eba051495", 0x20, 0xff}, {&(0x7f00000016c0)="a73e5dc42f1421534b0b48d57312ab", 0xf, 0x95f}, {&(0x7f0000001700)="f26ad8d1cec7563dd2647fadf58e5f256526cc96d313709b515bcc6cc6028abc872d442fa7cb2fa3a6daedeca4ec5064de1b88435709a123cc901824e9c9accae015067522ca38bd5d777673fc3b3a4fb5e0d99c64dfb8d422ae692d24ab2bf69c0e3dba8c16a9ca7f10dc7777c1e3b6aaa711711ba6c20085ea85f551fdd08e9cfb2693abbfd9e72f6e325e27c4e88c87029b5c6e34d5502ea35e5a38212e0c0b259ad7db592a7027be5de4785c23baf6ca14d3f775c0954ef64f184b52a92a90b1844c31e6b95f96da09f1e1371ce040bd848c272293b247eed473e122bcfe8c442e4ffd3d69b916df2e6f54b9e3fb0465cff6d9d1d18133594a50e035a98068de99f5e14cf12a1ad0932420404d60361dbfbf14d13a4dcdfe4c5d5d3f57b9caa3d06cc4fe7ba00c61fba75f7ea22128bfc13ae6d6976c58283ecf7d5c6161331204037db587e317861355d02cae261a68aa544be01c8d12b66c4b7381699dfb85ee5b38135b9c1e9ea0c5ccc58b644f6eb6255fdc207dc7c7b9137544ff3ab80e87fdc34535975905d9a27fa72d4516e9d7afd3844a3b2a2669f278d683c78d3df42fba126b0be9655aa5248a0a4d74cd632807a6b9b90ed93234288795e76d4a1fa593762088142108d86c40f5c66ef9236013743fcfc1cf0f63c53f48dfb88a75896df5709eeaa0214cd0f78c3d0b76da3ee1634e5c67590171cc4604ae49b2336470c0a9ab3cd11ed2c10d162a274444e400fbe4f1e6700604459cce7e8149fa548963f2af79304f38011c9c60f8697849870a12b33ec667103dba6d0ebd63613cfff57dd6ca1d5752f0d1a86da9088516af42cb0e4a521190c7a562a091f33a791ba11eeef1926461d9d2a7cec3c81bc16fa9afacf8eb0b67c857821392949d5ef08e7fc658b4b35effc5a9de564152df0665690128722ac36b2c710e5b1d5efa7a0b42a7b2a199662eb32638a766da580e72e68eb953937e504f81a65bb288f03fb07139caea51a9f60c3e408f7ebc3a4c5677a57399175ad53cce91c2948dce20ec5b6f3df42d3627adcccfe254e7e4bd42459f4148fb5a6eff039763a54eb6980bd4761bc43d7acdef00fa785e862ada3156f8a18cea6a256b37a6dcac9075caba5a7bcbef62e73b617d0f3b06d622761d15399e4ea4315abd1b28a426b87687f0c328926c36bbc920b671748c593a0ed177b130146e37889a52104b42fe6763a16ce6dedd7732d1140698be51b24e4a55eeebec3eefc1a1308c71719434e0c0eb49bb0df3926ae56b78aad253ce843488fad8ee978431ba6127dcf15a45d0958e4881873cc7faf019528c770571aadb9699545e1fec0de7975121bd95c2126b6a0f052d59185f44dcb3d11512d7e7cd5f2e380084fec6eef647f64f177b7f8081edd0ab4c3c96010382e57a9a4461536a288696a6e6a60caa75590dd683a2f7294e2f049ced1fe5784c7765c7ce555c51c5e24f4df9660263d76e4597031aa1faba6a19aa6456aa1a32a5a0ff0da4e90a891c4bdb52272784403699b18f4317e6bcffdabf9b7428e6fa269f7e6499dad54d2b8294dd0201ceceff23a7f1cafbb87cb4824ee730449ec57a558f27ff6248925356e4e2bccf9f9288e2b9a53cb13c05681b3c76f0dd3d9084daeaddbcead29e87827404cf24537a360e3490ce7ab15ec5f645ea750363ced1e57770f412609c93d399cc8fa052bae47fb17f8d4cf9858ae6c281c5e08e6615e9d95731bb1b1607f038c0e1b6c7f04665b270c7764d2687edb4e2fe8c97d49d38a1f682e5e9831642d510a8c27312dd03d994bf6d9512db27300c155a32e31cc0e82f9215ddb80782971a3e6f671fa72aeeb70e06ce8a90cda0f7f07340a367ec01d2507019a02d043104399279acf53a2dce2d904579c71079117ad5f453238a81964d865d86fe48d51a09742c7e5dcced34fda5ae4c69efc00faaf202c8475daad1cbfb51b01e406cb90d9b7b45a126e504f2b9bcc45e42b9cc1d1d4cafce8eb8db1c59c776a3b6bf6dd1adf86635ab926164adaefb30f4b82fcdf0dac4eec2676e9e9ff2628fd9647d720f55741914e3ded4957f467a704bcc9ea4a7eb79353100c9e23ae471c8d68322f66dffd8a91db9181c05d624fb83a3a64c2f71c3993437a5507026151e71e59d5fb374c6f77d718b102d6a0a530ad000c115ff89e374846f5606e970fa133df3acab54a1b283fa9bfc24e3e6619bf75f1b223834ba01d5856e35068b14cc66e5e6ba37f27f678152d15ee94c7a41c8053c155e268f7f8f2198b9cb0f6df7201e254a4d61f90d238d77d48d8a9a36f50082c0a3e3249b43914e6b919bb6e926110eca700ede61c473c6b6bccac8a5c36327ce21e5a03489eefc43d80f3995e1f3a15e8249801efbf20316c75063513496b8a81e06b4102c3b3afad97dc5d1ba319bbedae795b33269561ca6e5dec195c211d5cfc9a93be2411c27d29d5f52079b3d372fcd32da6eb106e7a200ae3fc6616087f1dac287daa4ebbb8d58990053c8f9c7667ff72a02b156af351c5b08e6e9012e84593d687184ecacc03ea4209971537cf97e3a6202d069db91d0327bd91e8212c03d7a0ab4b6b6132cd31e217dad260b699ee72ac94bd294bcf33ff7caf27dbb576f9476ea663c55742c218be98a784ef26200243ffcb7aa94f240790c7a5108670e4a299f386b30dc0f21b5756467a268ced2dca94a5fd9fb5f3caed99952b1315d0fb0b1348c66e3c1fbcdde56ddd4c35c126e611a33760ae9894a0fb6e7f5810cca166c825089140f257d5ba8c23605ebf3e90dd1ea8663c93dd47cac3464053791677f2ebb073be75197ce313e5677f6afae2e9cfde08614562b7025e8ed05bd850ef6c8797c8b59bf1b107459c7bc9d6d23eb8752e6eb8110c8cd43a2beb528e765c9a2a3b93e0f81d87bf63e7648983c1c3c07033327318971be3e183ff62eb03b2ce40b4d4d59a6b69ecf8b82ea6a5b3423d1bb8d372857c2c8c9dd98cf02d21ecf19bcf8a9db6424942aa6f1814fec0602fa94a660c836f28baba078d8d6d684949502a11a8e067d6db926a5aa1a9144c49c5d4e163dab18149087a0d722cfa761177f6665102ba394c05489a4b1c59103839276b35e02c4d21b6b3cfa53dca190f9d3fe8678e1a969340135577b1aeea3e356dd13ae451a7dde69661a2a86377b5c3c7b221ab264e58b76a572e49956da45e477d2038c15fbf6ff5f3b172b399c2adfd6f0bfa9381f12846b3686db8100f9de40cceeaaf4b1c91c78cd71ad995f26812b64b153cbfa69027da54adc1acf1fbe4a9e1cd1179a8dcb0e3ff1d41f5d592fd5d08784910dfc75470c28091eec32ccad4dfc996d17fe567d5cadf135d80e8c49e6d028aa8ac2904318c62dd4d026c8f21505e44b0e95582b4bbeb75d8aeea755e504e8d063df279af71338d955fd7193714d0adf9befcce7e3252546fb7baf8a21355f28c63a9cf03fbe4d99f333ab3c5aa407f695117babf83827aff83fd807a2d4e9eb4e4b6a5e9efb771b9e47a468f1c6f1ee23ba3d6944a1a4ba270e1432ed3563ba7fe580d134ec062f81da3638db5ec98cfe373ca80282954b8a67acc838ced06b6bd8cac3bc4e868d54cfa1eabf790ab9ef07070678009c47035182f24ff26b069d74ff2263c15abb6b49ace5f4a285d0782fcd07b537b25b488a27f931f0b39f48d9e34205ef9f02bb5a3ab5ea27b3f5b7f5e97b049236ffe766ae57070d18aae171c5131acad1ddbc2af478caf799f6ed2d80466cff2cf67773df070297de5f414d0ca1c388daf4658d22cf876f75a60e7b1e1dc9a84e64bd604abfed1804a8ae2672b7513e594818b708e6b279f727f2a4d36bf311dd1db3b02c5517bfc99c203c03fcfbe53e29a98ce538cfd8c77596efc3423475800bb1a1e8bef7f8445fa74a60e884d5e66956845d2a6f994e774b068657f40394674601419b4806015d4c52c1e15ac81398ce1ddd5f263b92a386d614c51698f0178628ce2862a12273edf03d5f8292ef402b5a2e96a0950de9e406da1a4ce9f8d517a7c5cf00a7066b5befd540ec4e8e8da12d02f9fdbe05ae9648381f5a30293c2d9b312a74945fd3073c601f01df1337f9c5a67b46b201ca73feea9284c76330033e5659291dc29460f0aa2691481afb1636bd7e23d3ae79ec0c5c4b9398a7384e9463f2560b0082a284c22b46d2c73b978a0d98bb87851ca705a3ce6442743256a400efb6db2381ea83e8eb3220e6ad437ca3415bfb0ad73279674ebbb343c81851e2cb3db7a92b54be8abb556d4ed50823345a0c01d7df4f7331430da91ce1e4050f7f60cec115b2e7f6c516429d889bf23d9b3f4ffd976ec7feba1981770bd7a7257f341026e1eff135b2c18eb38e5e2b90bfee548f462e2b5a8100264c164f3f8c1ccb04508ccf64d80e0653197ab04edfa02ec93305a29897d8c2819918f44df63ac8ce297187610bf46ee1bd7d0bce86f1a37f4d4fda0f42d8209e2617887cb7f56db2b89e3e73204d54df82ce79b0244afbaeee3ac32df85f5e43a462853d30ef6fd773f652d04f613b339a639388494e1a0901b8788bffc7bd7dd2aea146e215a6d332668e6d18be983620305d4b1dcbe650d211ae6aca54ea5e165d212383a5d8395b4c243e1b2bd796a7a8563a20693ab35eb7a673db5363a4d20c3552e2227211aa8606c12b838267f13499edecc1f857f6b4b98553ead6f45f5038c748555a08ec1dd472c4f99f57ab2198bddff558fb85bcd0b3336a284199653047e987b832b336908e13de57e790a39aac6afcb5197b9b9255bccd129bbb5f7bf1e928a6302780576479f2a0d6196836d1ac1d755a71af489b26228d5ff844a5d9f6e892c6f23b3f186ec46b0fde5171b712588b7a9c9ca5188d6d374cb49a763f7f24f2021a492a996ee4aeecd0459087372dad7485093e8af0a992646fc8ffc4b2bee27add08f4d9aa01a6d1b4cc7347c129c7a89da56578009d86fc66236fb3a446e9a8e4320159915b9d055a2d93dea2a67987b24858808aaec37fcef53cb92d76753b36003b699e22262adf699743eb9ea9f82d528caa908fc6f69947d999dca39d1bd9e138a171850abda1a3ccdb09a35165df1e973bc180ace220c3727a881dad0126da7a5b6e89d77616a18864a2f6898f1202aac2d2208773c975a9a92bcacb772e2e83891ad20faf235652b88d2978a4c79548561e927317e1f10f5c51e12d9c3b60a17d4ee8b040ee576f3599e53d210c21679a9a6febb8252d90fed3de5cdb066b017d2694c150c665e856dfaeee2507bce1c17130654705c49386c2fffcd6e50c6b4a7f5f8a50e17a9685b5563d30c9b81836b2ca9fcde93d482b3d2edb7f47db1985c6547c08cbe0d393fda0f5d7e3a85ff9b8ef9e4267e06ac3cd117dec7d0418a8e2c5e15ee2627e8507478076f3ae8b3b305c9ff9d880af7a589172db5fbbbfa46828c5e627f692f664c2f36f2d884b02f65ce4211bc2c74f81e2dcacb1045cb2669817548a77fe93e4c3d00bb8cd4d56aed12da9824cf46b871507331619c3d545548878a76263956b2322c22be8b4d673f1c66e005b1e9a0ee83164c19b080c50bdea1e397aaeef51a9ddb3590c14d4e777294aa51e9e59bc5118f0589db07a79f1567b5bc0dafbfa89f8d87699c1bd4a392f7cb04157d27e86de15a65f215ab411067faf3c9640a438596d862da8926d0cbe829487548d6e481c2f6c09d086fb1dd97d1e5af55b83c8a9771cecf4a6f3fda031a3411f53b7efa30f200d41cedd66dc6f", 0x1000, 0x9}], 0x2008840, &(0x7f0000002940)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786c6174653d312c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c61f4653d302c726f6469c453650b4b22c081fc3f396d653d77696e6e742c736d61636b66737472616e736d7574653d2c736d61636b66ad86c94f8a5599116465762f736e642f736571002c617000000000000003ff7970653d696d617369672c666f776e65723d00"/194, @ANYRESDEC=0xee00, @ANYBLOB=',mask=^MAY_WRITE,defcontext=root,\x00']) fchmodat(r3, &(0x7f0000002900)='./file0\x00', 0x65) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0xcab79000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00003b1000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0xa39c6000) tkill(r0, 0x7) 10:52:21 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x10}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:21 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xa) 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xb) [ 2159.056371][T15487] FAULT_INJECTION: forcing a failure. [ 2159.056371][T15487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2159.069603][T15487] CPU: 0 PID: 15487 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2159.079796][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.079809][T15487] Call Trace: [ 2159.079816][T15487] dump_stack_lvl+0xb7/0x103 [ 2159.097730][T15487] dump_stack+0x11/0x1a [ 2159.101881][T15487] should_fail+0x23c/0x250 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xc) [ 2159.106296][T15487] __alloc_pages+0x102/0x320 [ 2159.110885][T15487] alloc_pages_vma+0x513/0x680 [ 2159.115670][T15487] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2159.115700][T15487] do_anonymous_page+0x16e/0x8a0 [ 2159.115717][T15487] handle_mm_fault+0x98f/0x1a50 [ 2159.115731][T15487] ? follow_page_mask+0x93f/0x1040 [ 2159.115753][T15487] __get_user_pages+0x32b/0xbc0 [ 2159.115773][T15487] get_user_pages_unlocked+0x175/0x630 [ 2159.115861][T15487] ? gup_pte_range+0x429/0x620 [ 2159.115884][T15487] __gup_longterm_unlocked+0x47/0x100 [ 2159.156697][T15487] internal_get_user_pages_fast+0x763/0x860 [ 2159.156732][T15487] get_user_pages_fast+0x5d/0x80 [ 2159.156833][T15487] iov_iter_get_pages+0x199/0x7e0 [ 2159.156932][T15487] ? kmem_cache_alloc+0x1fb/0x2e0 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xd) [ 2159.156955][T15487] ? mempool_alloc_slab+0x16/0x20 10:52:21 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x1e6) r4 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x10500, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0xc9ab) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0xc9ab) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1, r3, &(0x7f0000000180)="e12bf3025f829b006520f1056a05c6c6002707f922db905ae853d302fae4fbf72aa5abeeb53fed2729e870bf98e821d1d595ce27abf77a1e4dacd904bcee73ab692951d3a46a", 0x46, 0x6, 0x0, 0x2, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000380)="d833254f8001289acdfcd5c91eb9726f7a74e6e7930db266ac4289fa48c84c38738ad0f1b59730684818ced48cc294e8717c0d6cf045472d7c2bf27218537761022c786d84ef6780813fa0ca2bd91cb80a1a0cff15df0c3e61a4512a82e03ed9fadc0a64d1db2a16548c68708ce0990a56577af745b7d7a5d723790d82549ad629e8882c0fbbd096cd57c8e9aef29d09cd2d5bec41b3fb06fcd84662621faeea92fe842ea2e2fc", 0xa7, 0x6, 0x0, 0x1, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000480)="6b61263c852ad653dbf90307430b7e0842d3565104134da9c78ac5b85d4ce9984941d2ee0a009f1942493bd66ba02cdb23745c28c57e572b465c56d9e7d005fced33763ac85cab73073df1931a575d0d07b41ed1bce9fdb66565fbf1dfeef31e273442a7767c77e62c8e1fc65af56dc8059c882fccfd3a6476a1f05d894703", 0x7f, 0x7, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f0000000540)="e6998841f8bbe7dec35d26adac9c35f2bedea258c5e0f1a598568fd81d7326dc24e8ee0f1b12801ae3a04995d60e2e5e2a942ea9d119a03eb15372af93aedc38cf6a4b69aa3f020c43dae26d57f66464e9a925d9e53442ad18f9ecb66a2f1d2c9ed1b7ba5a7da40ee780ecba2a1b571bd113e746bb1a106c0e5b336bd084d8dfdaec5461761aa05b633fe69994f0d1eb0a0c426eaeccb97281b6d4ced19dc029444c98d8341f1afe33aba259f934023a857db0dec64def8ad957d88ebf05423df89c46edab3153", 0xc7, 0x704dffe0, 0x0, 0x0, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000680)="b692c1878b8456c5d564105313ea808ba67243965f7377cfbf1296143519e850680c2bce57f86d1a9307630a68a8ac353845947bc73f8b2badf208141f23aa4782f3f9b3e5c88bef51f9086fe5de1d7b224a369dcc82ee8c748d4d1f7155c897a9809fad4796bd777c1fc71c726f4235fad9fdd485c51b9b295c25d4c1a70e09b30579a0701fdc2c8ee17d727a979f039d3df80fbedd3a81a63f52ef57a2fb5dc2f44225f7ab228cc047202aa901d4c3", 0xb0, 0xe8, 0x0, 0x0, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f00000007c0)="d2480ac2ea70d84a477c4151a10f5a61af07090331594435a54074a79682eb418e9e949edb9c790e7ee077b4b0398638d6841e30f8cc9140df5d8f82a6e211786af4529e9d246be49f525a28c816479726dfb31709a37ba9d888e2f11c676b0e5ccd3b7950fc00e586847758e366d19201c0c462635b94b235", 0x79, 0x5, 0x0, 0x1}]) 10:52:21 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2159.156975][T15487] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2159.157043][T15487] ? bio_alloc_bioset+0x402/0x480 [ 2159.157067][T15487] iomap_dio_bio_actor+0x673/0xb50 [ 2159.157167][T15487] iomap_dio_actor+0x26e/0x3b0 [ 2159.157186][T15487] iomap_apply+0x1df/0x400 [ 2159.157216][T15487] __iomap_dio_rw+0x62e/0xa60 [ 2159.157241][T15487] ? __iomap_dio_rw+0xa60/0xa60 [ 2159.157260][T15487] iomap_dio_rw+0x30/0x70 [ 2159.157350][T15487] ext4_file_read_iter+0x21a/0x290 [ 2159.157370][T15487] aio_read+0x1c1/0x280 [ 2159.157400][T15487] ? should_fail+0xd6/0x250 [ 2159.157424][T15487] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2159.157444][T15487] io_submit_one+0x7fb/0x1350 [ 2159.157498][T15487] __se_sys_io_submit+0xf5/0x260 [ 2159.157523][T15487] __x64_sys_io_submit+0x3f/0x50 [ 2159.157547][T15487] do_syscall_64+0x3d/0x90 [ 2159.157569][T15487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2159.157671][T15487] RIP: 0033:0x4665e9 10:52:21 executing program 0 (fault-call:6 fault-nth:30): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xe) [ 2159.157684][T15487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:52:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x10) 10:52:21 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x180, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r3 = gettid() ptrace$setregs(0xd, r3, 0x3, &(0x7f00000001c0)="5ed6058eb4b19092745cd1ac905c3807fe") 10:52:21 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x4000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2159.157702][T15487] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2159.157721][T15487] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2159.157731][T15487] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2159.157741][T15487] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2159.157751][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2159.157761][T15487] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2159.533412][T15528] FAULT_INJECTION: forcing a failure. [ 2159.533412][T15528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2159.533438][T15528] CPU: 0 PID: 15528 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2159.533496][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.533505][T15528] Call Trace: [ 2159.533511][T15528] dump_stack_lvl+0xb7/0x103 [ 2159.533531][T15528] dump_stack+0x11/0x1a [ 2159.533548][T15528] should_fail+0x23c/0x250 [ 2159.533573][T15528] __alloc_pages+0x102/0x320 [ 2159.533640][T15528] alloc_pages_vma+0x513/0x680 [ 2159.533660][T15528] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2159.533684][T15528] do_anonymous_page+0x16e/0x8a0 [ 2159.533699][T15528] handle_mm_fault+0x98f/0x1a50 [ 2159.533715][T15528] ? follow_page_mask+0x93f/0x1040 [ 2159.533739][T15528] __get_user_pages+0x32b/0xbc0 [ 2159.533763][T15528] get_user_pages_unlocked+0x175/0x630 [ 2159.533850][T15528] ? gup_pte_range+0x429/0x620 [ 2159.533872][T15528] __gup_longterm_unlocked+0x47/0x100 [ 2159.533894][T15528] internal_get_user_pages_fast+0x763/0x860 [ 2159.533997][T15528] get_user_pages_fast+0x5d/0x80 [ 2159.534017][T15528] iov_iter_get_pages+0x199/0x7e0 [ 2159.534041][T15528] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2159.534061][T15528] ? mempool_alloc_slab+0x16/0x20 [ 2159.534153][T15528] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2159.534177][T15528] ? bio_alloc_bioset+0x402/0x480 [ 2159.534198][T15528] iomap_dio_bio_actor+0x673/0xb50 [ 2159.534223][T15528] iomap_dio_actor+0x26e/0x3b0 [ 2159.534304][T15528] iomap_apply+0x1df/0x400 [ 2159.534324][T15528] __iomap_dio_rw+0x62e/0xa60 [ 2159.534408][T15528] ? __iomap_dio_rw+0xa60/0xa60 [ 2159.534488][T15528] iomap_dio_rw+0x30/0x70 [ 2159.534524][T15528] ext4_file_read_iter+0x21a/0x290 [ 2159.534580][T15528] aio_read+0x1c1/0x280 [ 2159.534604][T15528] ? should_fail+0xd6/0x250 [ 2159.534626][T15528] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2159.534647][T15528] io_submit_one+0x7fb/0x1350 [ 2159.534698][T15528] __se_sys_io_submit+0xf5/0x260 [ 2159.534723][T15528] __x64_sys_io_submit+0x3f/0x50 [ 2159.534746][T15528] do_syscall_64+0x3d/0x90 [ 2159.534771][T15528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2159.534795][T15528] RIP: 0033:0x4665e9 [ 2159.534854][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2159.534868][T15528] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2159.534886][T15528] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2159.534898][T15528] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2159.534910][T15528] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:22 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x11) 10:52:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x4000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000001400)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r5) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/82, 0x52}], 0x4, 0x3, 0x7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x87368c1dad5bf3c3, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000069003f"], 0x1c}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1489d75b52de80ac}, 0xc, &(0x7f0000000240)={&(0x7f0000004840)={0x13ac, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c0, 0x3, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "0c1ed6b0435b151fa2a80f5f528213dcc0c2c0f762f2071826a92e8408714fb8cb31fade96c1e046e865c1ea2c015b36961284b5e5d2ce34cfff83ca0363592e3685722f3179b86bfdaf37fb5ceb5f1df8ae7c2d11bde1cc0ecc55236412bc9f96b1aefe527f70aeb4869ea1864d17b30d4ce1a65ff3d78820f3d5cd1eb83ea28b0a155b7e74b5fe563a3bede456b9145b54532d1595512598055c1415021c3fcea810"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "a6152cc1c37c888509de6ad5975bb96f9855bedc9065e082c3dfed7993a759b558d3c3273507f014f17508dd9c3a21b1d08ee4a1a1424c996345b4eb5ff7733d3eaccb049e449ad38de6f1ab3dd8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "40611824c519be5c12c128710d43b552e4b13af5f25ff62213ece4e9da146b7d914a31817704b6ffa3cb47b44ed8b83b113d5eb17c8f91e754ba43685733a0eb8379d35429d3596868367cc104d367f06521acc0cb5638a5"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x108c, 0x3, 0x0, 0x1, [{0x550, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x310, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "1091422d1cfa129a09bfc33ca3cb2bb8f263582136bf9c65f4f3106731ffa408ed542faf8653009e901e87c5be6949ed07f3f2f75d41d9fe476198345b0dabf9dbe033181c5252e7b43446e582c5f940ed648bedaaef9f52c1efd67464abaf7a9c06081bd3d3b766145586a394daeae90d4e0af47b36"}, @NFTA_DATA_VALUE={0x91, 0x1, "0773a160f276c297ffe2a5d0b8ad246cb9d0590c3de1755690fbc3e2ed633128cee32f45109a9ca6015aa1f0f1854f2b2ede03c2fb876166e7cc836e6b6584c09adf34e5ea8de8fd8f320ef81979ca1aa352baa3be1d559952c7dda295370536bd7f40e6497d8396967db5f636f781e7f5c8cb30c79417241eb39f75d37bd4fe391965dbe8f12b4999a0500636"}, @NFTA_DATA_VALUE={0x8f, 0x1, "5728b1c589804cef84ecd123859aeb0ab63248ad13071801894e52a1ef9026ffcfd32d98962584806db19221a46ded5ba0cb2c56706b30ff8ac50eca22b56c5c520f08a1f694a4d75cc51f09dd403c359295ac411c528a716231af696a1bbd61084e602d3d23c3e7a8dc1d3223deb68bbb77f2efac37c8cf5301b00df2857bb0e00cbd7b61db9ab632b6a9"}, @NFTA_DATA_VALUE={0xf4, 0x1, "7a724dc169d9a7583bed12de810e45486ad6b35b02131cc961ffc8047d13903db7ede75888fab96757467af03d2c2a656762919ffc33fd56ac68528256b49018553aade781a681210bec6aa62141f8143a7250dcfefeb332b73acae9d85be977f193eb4fcab9c241335b3a6f98bfdfb65e9ae86d12c7ef203f0f2b40e2640b8279e904698347a4908ae754e273c70c1300c57cf172fa181925790c65ee5bc30e5af1efefd85c446dd227862cdb3ac47a7bb2c209a6aa34b81a229712f21ee26ce35135bef1a63fe11b895bada96cf527f5eece77dbeff0655541169b6abfc64f5d7e0fb390236278c763e3f18d27a493"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "b58aebd38263df8d1cdc2af99182a103b504d1d40b52afc1cdfaca903ee245896f853c153889518609aed71951379fefa5b70666f9c8db1de5ff52fad21c4e272ea7b81cd54fcca5c9434797789f20bf09990929ce939c08c9a0ce83563061ea3ac7901d1261b4ad5591835b126e28f04f10a760022db98b8ba371160ea378d218e9a625c0454015ac6ca7fc5ca9f6b06bf0d1c9146a7e750a1ea9dbb60be02b2bb23f0ef699b4232770a301d690dc783eb8f731a6c2"}, @NFTA_DATA_VALUE={0x18, 0x1, "34381191140be90850dfe8c770bf05da557eed9a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "5c83849461366a3c8b8a478a70dad0185dd1dc829622b282226c5c18b27c7e34eb39d7427bb0154b1663564e520b81136b2374907c6e192a5ecdb86598dd58fd14bf99da578cd52b38d3ba5f5d341a113a9f3b3f488cfa178a9ec55d971a9646ce99f0df62331c65536950a47f0be30c5819d4d3e6ab82cdd5b67f7421a9590179320d2bd5e794ab9d766c72eb8c7f8223b55d034eb505fdb283f52632363f535ac8e8c8e2605a11215ba88ada90385d17317d1f8fc1e0c766b905742315be7f24f7744755140e239816f07a1c12ab797501eff422"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4}, {0x348, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "7aca5c29f17682524a02dd8a72a080d9b0ef4003ada339b7ee3a5c595811f5419f403d0442f4e6d7c00ea4c7cfb0e863d1e961d6df84883947ddea4c09f6a697b5493afc848a406a48a40d398f960e3725666935af537b3e47f7de2f44f1b028948c984a872108323b6abf91da6476c0e23497fa01c612aef0d458147bfd30cf1962dd2eee9460bd90f9658b25ee3bbbdfcdb42fe3a2b0faa3eaa547813fa1be787943c0e7e93846311a83366bfb59a749ff029dc1f8064518c78ad98d111b5aa17a88656495680a61515a24a050d0eb1fdeb777b01d968677d2fd2d2ec2"}, @NFTA_DATA_VALUE={0xc, 0x1, "3da71fe5e0dcb738"}, @NFTA_DATA_VALUE={0x2b, 0x1, "9eda1ab040b9cfd61050cd94b78c69866752cac29913c28222827028bdd8b8cf4849c37d9c020f"}, @NFTA_DATA_VALUE={0x39, 0x1, "e2101b2bcb8df52daa92bf52ba2a34938b6352c25f709f0d99543e429000a6f26313e634773936d2da45c9f1556f7d872205ce7399"}]}, @NFTA_SET_ELEM_USERDATA={0xfd, 0x6, 0x1, 0x0, "287166c3fa92a1096ab2d872610919cf7f30f9b48fa322e84c7f9f4cd2b18e2acb43d9f3fe99ea63526b92bad4e1b12e50d0177b9c2fb3e56d098266e9fbdfbd321910a2737951a650149b86236dc9fdde43ef737d77f543dd106b7c706dddfe53c33b07a31124f86982e1d65025a20a0a30aa1b8141ee1e69098c2020d17f1b149825ff2e02508ea097b298234b722e1db60b240f7dda79f3ba260662995c008323e2fe41f748d0b8680516efd896c8b71f24715718e4d12efe2b28a60cc6e5b44b3fe73acffaee782c5a94be9d8f0376ccff01392ca73833c612c717fb603ff1fee59961f435e7333d3ce73b7c3dcb97fc4493551fe20664"}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8f}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "cda1c866a7e311c09ff9bc7c793938607d83caac17b69f6a1e9fb27f1785ffa42d91eccb51eb877c7f2c41694e5718a6ef7f4f5a95345bca0c383c0ee628ec0d13f78c4ad1832365cbfba7e9a4a078b2864160e2d1111b14d135abbbe2ac4f9e20b25f390af75b133d80cf8a3471edb4606589e496be4f2422fc520586246878"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x708b0a60}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1444a0000000000}, @NFTA_SET_ELEM_USERDATA={0x100, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x6f, 0x6, 0x1, 0x0, "9514148b6bb3a3ceed668f28ce5fd59445f07ae84625e5b91d203f8caa5f2e5667f9b1f226a548953b2b12e17c49cf0708be474e16af30077e77e79636b53822322a0b1f9bf60e393951ca399a4eb91e8355b4c11eb3e1fdfcd2809b6f7379c0ccacea421696c2b7906186"}]}, {0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "1df5fcf7e16f279028939c0769a9dcfebda575340895de31c1bb6bafe7fd0340ca70d467cd88516f10ae44fd7db9ee1da201fafe3b6fe9a5c77453699561f825263d0c84a3091f06b239393c6ee9d40dee9790cb43"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x80c1}, 0x4d800) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x480, 0x11) ioctl$FICLONE(r4, 0x40049409, r7) splice(r1, 0x0, r3, 0x0, 0x30000033fe0, 0x0) 10:52:22 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x200000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:22 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) wait4(r0, &(0x7f0000000180), 0x4, &(0x7f00000001c0)) fcntl$getown(r1, 0x9) tkill(r0, 0x3) [ 2159.534920][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2159.534951][T15528] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:22 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x12) 10:52:22 executing program 0 (fault-call:6 fault-nth:31): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:22 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x25) [ 2159.958418][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x48) [ 2160.005416][T15572] FAULT_INJECTION: forcing a failure. [ 2160.005416][T15572] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2160.018656][T15572] CPU: 0 PID: 15572 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2160.018706][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.018719][T15572] Call Trace: [ 2160.018726][T15572] dump_stack_lvl+0xb7/0x103 [ 2160.018756][T15572] dump_stack+0x11/0x1a [ 2160.018774][T15572] should_fail+0x23c/0x250 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4c) 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x51) [ 2160.018798][T15572] __alloc_pages+0x102/0x320 [ 2160.018817][T15572] alloc_pages_vma+0x513/0x680 [ 2160.018836][T15572] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2160.070242][T15572] do_anonymous_page+0x16e/0x8a0 [ 2160.075179][T15572] handle_mm_fault+0x98f/0x1a50 [ 2160.075200][T15572] ? follow_page_mask+0x93f/0x1040 [ 2160.075223][T15572] __get_user_pages+0x32b/0xbc0 [ 2160.075252][T15572] get_user_pages_unlocked+0x175/0x630 [ 2160.075277][T15572] ? gup_pte_range+0x429/0x620 [ 2160.100252][T15572] __gup_longterm_unlocked+0x47/0x100 10:52:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x68) [ 2160.100286][T15572] internal_get_user_pages_fast+0x763/0x860 [ 2160.111730][T15572] get_user_pages_fast+0x5d/0x80 [ 2160.111761][T15572] iov_iter_get_pages+0x199/0x7e0 [ 2160.111798][T15572] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2160.111818][T15572] ? mempool_alloc_slab+0x16/0x20 [ 2160.111902][T15572] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2160.111924][T15572] ? bio_alloc_bioset+0x402/0x480 [ 2160.111944][T15572] iomap_dio_bio_actor+0x673/0xb50 [ 2160.112027][T15572] iomap_dio_actor+0x26e/0x3b0 [ 2160.112059][T15572] iomap_apply+0x1df/0x400 [ 2160.112096][T15572] __iomap_dio_rw+0x62e/0xa60 [ 2160.112118][T15572] ? __iomap_dio_rw+0xa60/0xa60 [ 2160.112212][T15572] iomap_dio_rw+0x30/0x70 [ 2160.112231][T15572] ext4_file_read_iter+0x21a/0x290 [ 2160.112317][T15572] aio_read+0x1c1/0x280 [ 2160.112342][T15572] ? should_fail+0xd6/0x250 [ 2160.112465][T15572] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2160.112485][T15572] io_submit_one+0x7fb/0x1350 [ 2160.112587][T15572] __se_sys_io_submit+0xf5/0x260 [ 2160.199245][T15572] __x64_sys_io_submit+0x3f/0x50 [ 2160.199275][T15572] do_syscall_64+0x3d/0x90 [ 2160.199297][T15572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2160.214480][T15572] RIP: 0033:0x4665e9 [ 2160.214495][T15572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.237966][T15572] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2160.237988][T15572] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2160.238000][T15572] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2160.262423][T15572] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.262437][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.262449][T15572] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6c) 10:52:23 executing program 3: fsync(0xffffffffffffffff) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) process_vm_writev(r3, &(0x7f0000000500)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/4, 0x4}], 0x4, &(0x7f0000001b00)=[{&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/24, 0x18}, {&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/214, 0xd6}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/5, 0x5}, {&(0x7f0000001ac0)=""/35, 0x23}], 0xa, 0x0) tkill(r0, 0x7) 10:52:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x1000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:23 executing program 0 (fault-call:6 fault-nth:32): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x74) 10:52:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7a) [ 2160.792297][T15609] FAULT_INJECTION: forcing a failure. [ 2160.792297][T15609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2160.805547][T15609] CPU: 0 PID: 15609 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2160.815767][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.825815][T15609] Call Trace: [ 2160.829084][T15609] dump_stack_lvl+0xb7/0x103 [ 2160.833667][T15609] dump_stack+0x11/0x1a [ 2160.837904][T15609] should_fail+0x23c/0x250 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xbe) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xf6) [ 2160.842438][T15609] __alloc_pages+0x102/0x320 [ 2160.847035][T15609] alloc_pages_vma+0x513/0x680 [ 2160.851825][T15609] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2160.857441][T15609] do_anonymous_page+0x16e/0x8a0 [ 2160.862377][T15609] handle_mm_fault+0x98f/0x1a50 [ 2160.867487][T15609] ? follow_page_mask+0x93f/0x1040 [ 2160.872673][T15609] __get_user_pages+0x32b/0xbc0 [ 2160.877533][T15609] get_user_pages_unlocked+0x175/0x630 [ 2160.882991][T15609] ? gup_pte_range+0x429/0x620 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x1ee) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x300) [ 2160.887755][T15609] __gup_longterm_unlocked+0x47/0x100 [ 2160.893206][T15609] internal_get_user_pages_fast+0x763/0x860 [ 2160.899106][T15609] get_user_pages_fast+0x5d/0x80 [ 2160.904101][T15609] iov_iter_get_pages+0x199/0x7e0 [ 2160.909201][T15609] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2160.914233][T15609] ? mempool_alloc_slab+0x16/0x20 [ 2160.919351][T15609] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2160.924786][T15609] ? bio_alloc_bioset+0x402/0x480 [ 2160.929809][T15609] iomap_dio_bio_actor+0x673/0xb50 [ 2160.934918][T15609] iomap_dio_actor+0x26e/0x3b0 [ 2160.939670][T15609] iomap_apply+0x1df/0x400 [ 2160.944067][T15609] __iomap_dio_rw+0x62e/0xa60 [ 2160.948822][T15609] ? __iomap_dio_rw+0xa60/0xa60 [ 2160.953646][T15609] iomap_dio_rw+0x30/0x70 [ 2160.957961][T15609] ext4_file_read_iter+0x21a/0x290 [ 2160.963220][T15609] aio_read+0x1c1/0x280 [ 2160.967353][T15609] ? should_fail+0xd6/0x250 [ 2160.971915][T15609] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2160.976976][T15609] io_submit_one+0x7fb/0x1350 [ 2160.981663][T15609] __se_sys_io_submit+0xf5/0x260 [ 2160.986645][T15609] __x64_sys_io_submit+0x3f/0x50 [ 2160.991567][T15609] do_syscall_64+0x3d/0x90 [ 2160.995961][T15609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2161.001904][T15609] RIP: 0033:0x4665e9 [ 2161.005784][T15609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2161.025449][T15609] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2161.033833][T15609] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2161.041779][T15609] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2161.049725][T15609] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2161.057671][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2161.065755][T15609] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:23 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tkill(r2, 0x7) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x216, @time={0x5, 0x9}, 0x0, {0x0, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000001c0)={0x9, @tick=0x5, 0x8, {0x7, 0x9}, 0x4, 0x1, 0x3f}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x500) 10:52:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 0 (fault-call:6 fault-nth:33): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:23 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x2000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:23 executing program 2: set_mempolicy(0x1, &(0x7f0000000040)=0xfbdd, 0x6) set_mempolicy(0x2, &(0x7f0000000000), 0x7ff) set_mempolicy(0x2, &(0x7f00000000c0)=0x100000000, 0x1000) set_mempolicy(0x0, &(0x7f0000000080)=0x1, 0x0) r0 = getpgrp(0x0) clone3(&(0x7f0000001280)={0x23000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x600) 10:52:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0xc9ab) r2 = dup3(r0, r0, 0x0) r3 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x904400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}, {@version_u}, {@version_u}, {@cache_fscache}], [{@obj_type={'obj_type', 0x3d, 'memory.events\x00'}}, {@euid_lt={'euid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '-#!'}}]}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x3, &(0x7f0000000080)=[0x4, 0x5, 0xffffffff], 0x7fff, 0x6, [0x10000, 0x3, 0x5, 0x800]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x1d}, {0x14}, {0x6}]}) [ 2161.262098][T15666] FAULT_INJECTION: forcing a failure. [ 2161.262098][T15666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2161.275332][T15666] CPU: 0 PID: 15666 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2161.285473][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.295515][T15666] Call Trace: [ 2161.298853][T15666] dump_stack_lvl+0xb7/0x103 [ 2161.303437][T15666] dump_stack+0x11/0x1a [ 2161.307581][T15666] should_fail+0x23c/0x250 10:52:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x700) [ 2161.312029][T15666] __alloc_pages+0x102/0x320 [ 2161.316646][T15666] alloc_pages_vma+0x513/0x680 [ 2161.321411][T15666] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2161.326988][T15666] do_anonymous_page+0x16e/0x8a0 [ 2161.331995][T15666] handle_mm_fault+0x98f/0x1a50 [ 2161.336834][T15666] ? follow_page_mask+0x93f/0x1040 [ 2161.342011][T15666] __get_user_pages+0x32b/0xbc0 [ 2161.346894][T15666] get_user_pages_unlocked+0x175/0x630 [ 2161.352337][T15666] ? gup_pte_range+0x429/0x620 [ 2161.357128][T15666] __gup_longterm_unlocked+0x47/0x100 [ 2161.362509][T15666] internal_get_user_pages_fast+0x763/0x860 [ 2161.368393][T15666] get_user_pages_fast+0x5d/0x80 [ 2161.373373][T15666] iov_iter_get_pages+0x199/0x7e0 [ 2161.378381][T15666] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2161.383397][T15666] ? mempool_alloc_slab+0x16/0x20 [ 2161.388428][T15666] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2161.393840][T15666] ? bio_alloc_bioset+0x402/0x480 [ 2161.398851][T15666] iomap_dio_bio_actor+0x673/0xb50 [ 2161.404082][T15666] iomap_dio_actor+0x26e/0x3b0 [ 2161.408860][T15666] iomap_apply+0x1df/0x400 [ 2161.413332][T15666] __iomap_dio_rw+0x62e/0xa60 [ 2161.418051][T15666] ? __iomap_dio_rw+0xa60/0xa60 [ 2161.422888][T15666] iomap_dio_rw+0x30/0x70 [ 2161.427296][T15666] ext4_file_read_iter+0x21a/0x290 [ 2161.432408][T15666] aio_read+0x1c1/0x280 [ 2161.436552][T15666] ? should_fail+0xd6/0x250 [ 2161.441044][T15666] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2161.446059][T15666] io_submit_one+0x7fb/0x1350 [ 2161.450759][T15666] __se_sys_io_submit+0xf5/0x260 [ 2161.455686][T15666] __x64_sys_io_submit+0x3f/0x50 [ 2161.460655][T15666] do_syscall_64+0x3d/0x90 [ 2161.465056][T15666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2161.470980][T15666] RIP: 0033:0x4665e9 [ 2161.474857][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2161.494445][T15666] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2161.502913][T15666] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:24 executing program 3: r0 = gettid() r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setregs(0xd, r1, 0xffffffffffffff81, &(0x7f0000000180)="e42c345b6ee18b4ff1584bc81c898fdf0fb43222b712e69ba5113d0d8f3ca6dd50a6e1820b3361a6bd71fda236f7efe17f80766a09461e69d272c634ec") r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @tick, 0x0, {}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000001c0)={0x10000, 0x2, 0x0, 0x0, 0x2, 0x6a4}) [ 2161.510874][T15666] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2161.518836][T15666] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2161.526799][T15666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2161.534758][T15666] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x900) 10:52:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:24 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x8000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xa00) 10:52:24 executing program 0 (fault-call:6 fault-nth:34): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x409, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xb00) 10:52:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xc00) [ 2161.749514][T15712] FAULT_INJECTION: forcing a failure. [ 2161.749514][T15712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2161.762904][T15712] CPU: 0 PID: 15712 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2161.773059][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.783115][T15712] Call Trace: [ 2161.783123][T15712] dump_stack_lvl+0xb7/0x103 [ 2161.783147][T15712] dump_stack+0x11/0x1a [ 2161.783164][T15712] should_fail+0x23c/0x250 [ 2161.783185][T15712] __alloc_pages+0x102/0x320 [ 2161.783203][T15712] alloc_pages_vma+0x513/0x680 [ 2161.783247][T15712] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2161.783329][T15712] do_anonymous_page+0x16e/0x8a0 [ 2161.783345][T15712] handle_mm_fault+0x98f/0x1a50 [ 2161.783359][T15712] ? follow_page_mask+0x93f/0x1040 [ 2161.783388][T15712] __get_user_pages+0x32b/0xbc0 [ 2161.783410][T15712] get_user_pages_unlocked+0x175/0x630 [ 2161.783432][T15712] ? gup_pte_range+0x429/0x620 [ 2161.783455][T15712] __gup_longterm_unlocked+0x47/0x100 [ 2161.783539][T15712] internal_get_user_pages_fast+0x763/0x860 [ 2161.783568][T15712] get_user_pages_fast+0x5d/0x80 [ 2161.783586][T15712] iov_iter_get_pages+0x199/0x7e0 [ 2161.783643][T15712] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2161.783665][T15712] ? mempool_alloc_slab+0x16/0x20 [ 2161.783687][T15712] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2161.783714][T15712] ? bio_alloc_bioset+0x402/0x480 [ 2161.783779][T15712] iomap_dio_bio_actor+0x673/0xb50 [ 2161.783802][T15712] iomap_dio_actor+0x26e/0x3b0 [ 2161.783885][T15712] iomap_apply+0x1df/0x400 [ 2161.783908][T15712] __iomap_dio_rw+0x62e/0xa60 [ 2161.783981][T15712] ? __iomap_dio_rw+0xa60/0xa60 [ 2161.910249][T15712] iomap_dio_rw+0x30/0x70 [ 2161.910275][T15712] ext4_file_read_iter+0x21a/0x290 [ 2161.910292][T15712] aio_read+0x1c1/0x280 [ 2161.910310][T15712] ? should_fail+0xd6/0x250 [ 2161.910368][T15712] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2161.910387][T15712] io_submit_one+0x7fb/0x1350 [ 2161.910407][T15712] __se_sys_io_submit+0xf5/0x260 [ 2161.910426][T15712] __x64_sys_io_submit+0x3f/0x50 [ 2161.910444][T15712] do_syscall_64+0x3d/0x90 [ 2161.910585][T15712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2161.910604][T15712] RIP: 0033:0x4665e9 [ 2161.910623][T15712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2161.910636][T15712] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2161.910656][T15712] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2161.910666][T15712] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2161.910676][T15712] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2161.910685][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2161.910772][T15712] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2162.031622][ T25] audit: type=1326 audit(1629543144.466:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 10:52:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xd00) 10:52:24 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x42000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x4, @tick=0x10000, 0xe5, {0x1, 0x1}, 0x40, 0x1, 0x45}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x243}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0x7f, 0xd5}, 0x0, 0x4, 0x1f, {0xb0, 0x7e}, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:24 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x10000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:24 executing program 0 (fault-call:6 fault-nth:35): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2162.101569][ T25] audit: type=1326 audit(1629543144.526:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xe00) 10:52:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2162.230100][T15744] FAULT_INJECTION: forcing a failure. [ 2162.230100][T15744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2162.230157][T15744] CPU: 0 PID: 15744 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2162.230180][T15744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.230192][T15744] Call Trace: [ 2162.230197][T15744] dump_stack_lvl+0xb7/0x103 [ 2162.271458][T15744] dump_stack+0x11/0x1a 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x1100) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x1200) 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x2500) [ 2162.275612][T15744] should_fail+0x23c/0x250 [ 2162.275637][T15744] __alloc_pages+0x102/0x320 [ 2162.275668][T15744] alloc_pages_vma+0x513/0x680 [ 2162.275687][T15744] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2162.275711][T15744] do_anonymous_page+0x16e/0x8a0 [ 2162.275726][T15744] handle_mm_fault+0x98f/0x1a50 [ 2162.275741][T15744] ? follow_page_mask+0x93f/0x1040 [ 2162.275829][T15744] __get_user_pages+0x32b/0xbc0 [ 2162.275852][T15744] get_user_pages_unlocked+0x175/0x630 [ 2162.275878][T15744] ? gup_pte_range+0x429/0x620 10:52:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x3f00) [ 2162.275901][T15744] __gup_longterm_unlocked+0x47/0x100 [ 2162.275966][T15744] internal_get_user_pages_fast+0x763/0x860 [ 2162.275990][T15744] get_user_pages_fast+0x5d/0x80 [ 2162.276146][T15744] iov_iter_get_pages+0x199/0x7e0 [ 2162.276246][T15744] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2162.276268][T15744] ? mempool_alloc_slab+0x16/0x20 [ 2162.276289][T15744] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2162.276311][T15744] ? bio_alloc_bioset+0x402/0x480 [ 2162.276368][T15744] iomap_dio_bio_actor+0x673/0xb50 [ 2162.276419][T15744] iomap_dio_actor+0x26e/0x3b0 [ 2162.276453][T15744] iomap_apply+0x1df/0x400 [ 2162.276476][T15744] __iomap_dio_rw+0x62e/0xa60 [ 2162.276497][T15744] ? __iomap_dio_rw+0xa60/0xa60 [ 2162.276521][T15744] iomap_dio_rw+0x30/0x70 [ 2162.276542][T15744] ext4_file_read_iter+0x21a/0x290 [ 2162.276562][T15744] aio_read+0x1c1/0x280 [ 2162.276582][T15744] ? should_fail+0xd6/0x250 [ 2162.276608][T15744] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2162.414614][T15744] io_submit_one+0x7fb/0x1350 [ 2162.419299][T15744] __se_sys_io_submit+0xf5/0x260 [ 2162.419327][T15744] __x64_sys_io_submit+0x3f/0x50 [ 2162.419352][T15744] do_syscall_64+0x3d/0x90 [ 2162.419373][T15744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2162.419438][T15744] RIP: 0033:0x4665e9 [ 2162.419451][T15744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2162.463124][T15744] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2162.463166][T15744] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2162.463176][T15744] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2162.463186][T15744] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.463196][T15744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2162.463207][T15744] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4800) 10:52:25 executing program 0 (fault-call:6 fault-nth:36): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4c00) 10:52:25 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0x40000000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:25 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0xff, 0x0, 0x48, 0x4, @tick=0xb3b, {0x8, 0xe0}, {0x66, 0x81}, @quote={{0xc7, 0x6}, 0x6, &(0x7f0000000180)={0x88, 0x7, 0x6, 0x0, @tick, {0x7, 0x6}, {0x1, 0x8}, @time=@tick=0xfff}}}, {0x80, 0x86, 0x4, 0x40, @time={0x400, 0x8}, {0x3, 0x9}, {0x0, 0xf8}, @control={0x3f, 0x4, 0x9}}, {0x3f, 0x9, 0x9, 0x1, @tick=0x100, {0x6, 0xbf}, {0x9, 0x3}, @queue={0x20, {0xffff}}}, {0x1, 0x1, 0x4, 0x8, @time={0x7fff, 0x6bc1f36f}, {0x48}, {0x1d, 0x5}, @ext={0x47, &(0x7f00000001c0)="76e8bb366519db761ec53d09cdfd8a90a1ff6817088b8d50ad6e78be9e2b9ebd65324de6eeb75ab8c8da04934bf97e3f4f3d847463dec91ed238dfb9450ea89053c6dcbade56bf"}}, {0x0, 0x30, 0x6, 0x7, @tick=0x1, {0x81, 0x1f}, {0x73, 0x1}, @quote={{0xfd, 0xf7}, 0x2, &(0x7f0000000240)={0x4, 0x1, 0xc0, 0x7e, @tick=0x101, {0x1, 0xff}, {0x2, 0x5}, @queue={0x1, {0x9, 0x8}}}}}, {0xbc, 0x40, 0x6, 0x0, @time={0x800, 0x40}, {0x8, 0x4}, {0x3, 0x7f}, @addr={0x40, 0xfb}}], 0xa8) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r2, 0x9) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:25 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x5100) [ 2162.817282][T15804] FAULT_INJECTION: forcing a failure. [ 2162.817282][T15804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2162.830650][T15804] CPU: 0 PID: 15804 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2162.830676][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.830686][T15804] Call Trace: [ 2162.830692][T15804] dump_stack_lvl+0xb7/0x103 [ 2162.830712][T15804] dump_stack+0x11/0x1a [ 2162.830725][T15804] should_fail+0x23c/0x250 [ 2162.830809][T15804] __alloc_pages+0x102/0x320 [ 2162.830830][T15804] alloc_pages_vma+0x513/0x680 [ 2162.876991][T15804] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2162.882580][T15804] do_anonymous_page+0x16e/0x8a0 [ 2162.882602][T15804] handle_mm_fault+0x98f/0x1a50 [ 2162.882617][T15804] ? follow_page_mask+0x93f/0x1040 [ 2162.882640][T15804] __get_user_pages+0x32b/0xbc0 [ 2162.882664][T15804] get_user_pages_unlocked+0x175/0x630 [ 2162.882689][T15804] ? gup_pte_range+0x429/0x620 [ 2162.882735][T15804] __gup_longterm_unlocked+0x47/0x100 [ 2162.917983][T15804] internal_get_user_pages_fast+0x763/0x860 [ 2162.923883][T15804] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2162.923906][T15804] get_user_pages_fast+0x5d/0x80 [ 2162.923928][T15804] iov_iter_get_pages+0x199/0x7e0 [ 2162.924006][T15804] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2162.924026][T15804] ? mempool_alloc_slab+0x16/0x20 [ 2162.924046][T15804] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2162.924087][T15804] ? bio_alloc_bioset+0x402/0x480 [ 2162.924162][T15804] iomap_dio_bio_actor+0x673/0xb50 [ 2162.965331][T15804] iomap_dio_actor+0x26e/0x3b0 [ 2162.965403][T15804] iomap_apply+0x1df/0x400 [ 2162.965426][T15804] __iomap_dio_rw+0x62e/0xa60 [ 2162.965448][T15804] ? __iomap_dio_rw+0xa60/0xa60 [ 2162.965470][T15804] iomap_dio_rw+0x30/0x70 [ 2162.991083][T15804] ext4_file_read_iter+0x21a/0x290 [ 2162.991164][T15804] aio_read+0x1c1/0x280 [ 2162.991187][T15804] ? should_fail+0xd6/0x250 [ 2162.991207][T15804] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2162.991227][T15804] io_submit_one+0x7fb/0x1350 [ 2162.991263][T15804] __se_sys_io_submit+0xf5/0x260 [ 2162.991289][T15804] __x64_sys_io_submit+0x3f/0x50 [ 2163.024486][T15804] do_syscall_64+0x3d/0x90 [ 2163.024511][T15804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2163.034909][T15804] RIP: 0033:0x4665e9 [ 2163.034924][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2163.034939][T15804] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6800) 10:52:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2163.058573][T15804] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2163.058586][T15804] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2163.058599][T15804] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2163.058612][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2163.058674][T15804] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:25 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0xfdfdffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6c00) 10:52:25 executing program 0 (fault-call:6 fault-nth:37): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:25 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7400) 10:52:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7a00) [ 2163.289216][T15839] FAULT_INJECTION: forcing a failure. [ 2163.289216][T15839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2163.302511][T15839] CPU: 0 PID: 15839 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2163.312665][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.322756][T15839] Call Trace: [ 2163.326024][T15839] dump_stack_lvl+0xb7/0x103 [ 2163.330614][T15839] dump_stack+0x11/0x1a [ 2163.334763][T15839] should_fail+0x23c/0x250 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xbe00) 10:52:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xee01) [ 2163.339215][T15839] __alloc_pages+0x102/0x320 [ 2163.343804][T15839] alloc_pages_vma+0x513/0x680 [ 2163.348576][T15839] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2163.354139][T15839] do_anonymous_page+0x16e/0x8a0 [ 2163.359115][T15839] handle_mm_fault+0x98f/0x1a50 [ 2163.363960][T15839] ? follow_page_mask+0x93f/0x1040 [ 2163.369138][T15839] __get_user_pages+0x32b/0xbc0 [ 2163.373988][T15839] get_user_pages_unlocked+0x175/0x630 [ 2163.379448][T15839] ? gup_pte_range+0x429/0x620 [ 2163.384280][T15839] __gup_longterm_unlocked+0x47/0x100 [ 2163.389634][T15839] internal_get_user_pages_fast+0x763/0x860 [ 2163.395508][T15839] get_user_pages_fast+0x5d/0x80 [ 2163.400423][T15839] iov_iter_get_pages+0x199/0x7e0 [ 2163.405458][T15839] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2163.410505][T15839] ? mempool_alloc_slab+0x16/0x20 [ 2163.415605][T15839] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2163.420960][T15839] ? bio_alloc_bioset+0x402/0x480 [ 2163.426260][T15839] iomap_dio_bio_actor+0x673/0xb50 [ 2163.431406][T15839] iomap_dio_actor+0x26e/0x3b0 [ 2163.436154][T15839] iomap_apply+0x1df/0x400 [ 2163.440616][T15839] __iomap_dio_rw+0x62e/0xa60 [ 2163.445326][T15839] ? __iomap_dio_rw+0xa60/0xa60 [ 2163.450175][T15839] iomap_dio_rw+0x30/0x70 [ 2163.454483][T15839] ext4_file_read_iter+0x21a/0x290 [ 2163.459585][T15839] aio_read+0x1c1/0x280 [ 2163.463793][T15839] ? should_fail+0xd6/0x250 [ 2163.468350][T15839] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2163.473352][T15839] io_submit_one+0x7fb/0x1350 [ 2163.478113][T15839] __se_sys_io_submit+0xf5/0x260 [ 2163.483213][T15839] __x64_sys_io_submit+0x3f/0x50 [ 2163.488126][T15839] do_syscall_64+0x3d/0x90 [ 2163.492624][T15839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2163.498526][T15839] RIP: 0033:0x4665e9 [ 2163.502396][T15839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2163.521979][T15839] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2163.530381][T15839] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:26 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x0, 0x0, 0xfffffdfd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xf600) [ 2163.538337][T15839] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2163.546310][T15839] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2163.554357][T15839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2163.562323][T15839] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:26 executing program 0 (fault-call:6 fault-nth:38): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x100000) 10:52:26 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x18c, @time={0x16480, 0x7}, 0x2, {}, 0xff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) close_range(r1, r3, 0x2) 10:52:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 10:52:26 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\\\\'}, {0x20, 'client1\x00'}, {0x20, ')-]:--#]'}, {}, {0x20, '/dev/snd/seq\x00'}], 0xa, "25cdf5a9f75a2a91e1e22ab5778e5a567603c4868f51dd2ac431a56c0027e748"}, 0x4f) 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x800000) [ 2163.791262][T15886] FAULT_INJECTION: forcing a failure. [ 2163.791262][T15886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2163.804564][T15886] CPU: 0 PID: 15886 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2163.804586][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.804595][T15886] Call Trace: [ 2163.804602][T15886] dump_stack_lvl+0xb7/0x103 [ 2163.804645][T15886] dump_stack+0x11/0x1a [ 2163.804661][T15886] should_fail+0x23c/0x250 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x1000000) 10:52:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 2163.841310][T15886] __alloc_pages+0x102/0x320 [ 2163.845921][T15886] alloc_pages_vma+0x513/0x680 [ 2163.845947][T15886] ? page_add_new_anon_rmap+0x26d/0x2c0 10:52:26 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/65, 0x41}, {&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001600)=""/65, 0x41}, {&(0x7f0000001680)=""/239, 0xef}, {&(0x7f0000001780)=""/106, 0x6a}], 0x8, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001940), 0x6e, &(0x7f0000003c00)=[{&(0x7f00000019c0)=""/30, 0x1e}, {&(0x7f0000001a00)=""/148, 0x94}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/75, 0x4b}, {&(0x7f0000003b40)=""/103, 0x67}, {&(0x7f0000003bc0)=""/1, 0x1}], 0x7, &(0x7f0000003c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004340)=[{&(0x7f0000003dc0)=""/79, 0x4f}, {&(0x7f0000003e40)=""/147, 0x93}, {&(0x7f0000003f00)=""/177, 0xb1}, {&(0x7f0000003fc0)=""/15, 0xf}, {&(0x7f0000004000)=""/209, 0xd1}, {&(0x7f0000004100)=""/250, 0xfa}, {&(0x7f0000004200)=""/190, 0xbe}, {&(0x7f00000042c0)=""/79, 0x4f}], 0x8, &(0x7f00000043c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xd8}}], 0x2, 0x10041, &(0x7f0000004580)={r4, r5+10000000}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000004780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004740)={&(0x7f00000045c0)={0x16c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0xfffffffa, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000047c0)={{0x3f, 0xa8}, 0x0, 0x0, 0x1, {0x84}, 0x40, 0x7}) r9 = accept$unix(r7, &(0x7f0000000180), &(0x7f0000000200)=0x6e) preadv(r9, &(0x7f0000000200), 0x0, 0x8, 0x8) tkill(r0, 0x7) [ 2163.846007][T15886] do_anonymous_page+0x16e/0x8a0 [ 2163.846026][T15886] handle_mm_fault+0x98f/0x1a50 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x1ee0000) [ 2163.846043][T15886] ? follow_page_mask+0x93f/0x1040 [ 2163.846136][T15886] __get_user_pages+0x32b/0xbc0 [ 2163.846159][T15886] get_user_pages_unlocked+0x175/0x630 [ 2163.846184][T15886] ? gup_pte_range+0x429/0x620 [ 2163.846273][T15886] __gup_longterm_unlocked+0x47/0x100 [ 2163.846297][T15886] internal_get_user_pages_fast+0x763/0x860 10:52:26 executing program 0 (fault-call:6 fault-nth:39): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x2000000) 10:52:26 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ptrace$cont(0x9, r3, 0x2, 0x5d2e3e7a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000000000000000, 0x7, &(0x7f0000000800)=[{&(0x7f0000000240)="95b89eb6356da0135d88dfe29bd9e1ebc597d48a4d441b3cb633f3c9024463dcdd268978d815a5df951e82556a8c97ce706fe88aab33ce272f34", 0x3a, 0x1ff}, {&(0x7f0000000340)="6e3c9423edf262966b9db407a9f2aa7fbdc80830031e102e8affcdd89aa541a6ef68d6e4c3ee19e24c3251429db30458af00788b48ddac30f3b6456591552b6c15752d3b8568684698458e84c9aa55d134a654c8444948d3f5b5dd401a30a4ea99cd276f531e31a9baf298ae08b4db488068e11461213dfe396fcce4ef2fe579991036b604031eca393f0bb24856ffb2225a02a714b59ed0764cc7c0dd9659ec2796fc", 0xa3, 0x6}, {&(0x7f0000000400)="57c6c452acc8b3b20c98667d243aff718bcae3bf15f6cb7d6243c0fc439054dbf094a5af7126b8c1f6eebac95fa74a28bf00869ac8d4458e8afa41d59790fffda705343b47f3f80d6b121d849519ba1f75041ef081cfe5725ca137b70b2050b9b911501a39b7b7253f870b8373db1f06966ab9ccb8b28a1d36678ad1cfdc2274e8a21cb36209de02795300db561cd74c06f6b915a032f87bea033ce703245b6da96cb79e3aa7ac398df194e475825b702a48ed54c3adcfb547da67781287", 0xbe, 0x9}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="76d7e54af977a79d874f75ec856bcceab3a93200e71bbcf9252dc8c754a128f07bb1d52cc31fd538346c4b77016ed8210cae0b425ed7ed2277046e15854f1b307e3704462e80e8fda03a7732e3b6b2c1dcb47abdd880c11de7902f98c7e42df8e29f700b8800f798773199d8480ab4ce28f10811b73fb6f9b44173246e7aa0f7dc", 0x81, 0x2}, {&(0x7f0000000680)="49c941c2bbb466e107a623e3b4c40ce66e9a1cbbf5ee7fa79f146c503c2791a28fa97b733722c47b06a81d586ddd20838684b9f1a3182f71b1e313811c453bad7e35f96e1cf824e6d18ac87947b54dc595856b0d00c73735e84d05c5dc7e3817cbfc6702c5e9f8e39e3bcc80c93e913d61d4a7c7f3a158f8ce22c769fe58d39ae7b77b31a0f3495d9eac3f701cc953c9126ff192a0e774aaec2dfc32db3d3893452b2481dcf5d4216b65b41214c74431a5ddd9", 0xb3, 0x3}, {&(0x7f0000000740)="a0a026d45a4892a14d5c6a49fdeae5c5126bbf41076b9bf21aa158de00850f19ad7c9885739da31032cc68095e6542c685e4b0cd7d1e7f5cdcdb4454a1359fe5e777b741712ce3001c6e6e6a528432de562b5bbfeae6ea627c538be3c2f4eb726072fb16b80467fdad259f6d683c03497b2f489b2ef65678c3a0ae6c3b7fcd135c3f432d525644629c35df789a9dbde2e4753958423d2e6359", 0x99, 0x7f}], 0x71008, &(0x7f00000008c0)={[{'['}, {'client1\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '/dev/snd/seq\x00'}}, {@uid_eq}]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000940), 0x200000, 0x0) close_range(r4, r5, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2163.846324][T15886] get_user_pages_fast+0x5d/0x80 [ 2163.846406][T15886] iov_iter_get_pages+0x199/0x7e0 [ 2163.846431][T15886] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2163.846458][T15886] ? mempool_alloc_slab+0x16/0x20 [ 2163.846481][T15886] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2163.846559][T15886] ? bio_alloc_bioset+0x402/0x480 [ 2163.846579][T15886] iomap_dio_bio_actor+0x673/0xb50 [ 2163.846602][T15886] iomap_dio_actor+0x26e/0x3b0 [ 2163.846624][T15886] iomap_apply+0x1df/0x400 [ 2163.846645][T15886] __iomap_dio_rw+0x62e/0xa60 [ 2163.846756][T15886] ? __iomap_dio_rw+0xa60/0xa60 [ 2163.846778][T15886] iomap_dio_rw+0x30/0x70 [ 2163.846798][T15886] ext4_file_read_iter+0x21a/0x290 [ 2163.846817][T15886] aio_read+0x1c1/0x280 [ 2163.846837][T15886] ? should_fail+0xd6/0x250 [ 2163.846899][T15886] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2163.846949][T15886] io_submit_one+0x7fb/0x1350 [ 2163.846973][T15886] __se_sys_io_submit+0xf5/0x260 [ 2163.847029][T15886] __x64_sys_io_submit+0x3f/0x50 [ 2163.847050][T15886] do_syscall_64+0x3d/0x90 [ 2163.847071][T15886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2163.847104][T15886] RIP: 0033:0x4665e9 [ 2163.847116][T15886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2163.847132][T15886] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2163.847149][T15886] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2163.847161][T15886] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2163.847173][T15886] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2163.847186][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2163.847246][T15886] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2164.084621][T15924] FAULT_INJECTION: forcing a failure. [ 2164.084621][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.084642][T15924] CPU: 0 PID: 15924 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2164.084743][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.084755][T15924] Call Trace: [ 2164.084763][T15924] dump_stack_lvl+0xb7/0x103 [ 2164.084844][T15924] dump_stack+0x11/0x1a [ 2164.084858][T15924] should_fail+0x23c/0x250 [ 2164.084939][T15924] ? mempool_alloc_slab+0x16/0x20 [ 2164.085020][T15924] __should_failslab+0x81/0x90 [ 2164.085037][T15924] should_failslab+0x5/0x20 [ 2164.085055][T15924] kmem_cache_alloc+0x46/0x2e0 [ 2164.085078][T15924] mempool_alloc_slab+0x16/0x20 [ 2164.085126][T15924] ? mempool_free+0x130/0x130 [ 2164.085180][T15924] mempool_alloc+0x8c/0x300 [ 2164.085216][T15924] ? percpu_counter_add_batch+0xc0/0xd0 [ 2164.085251][T15924] ? ext4_es_lookup_extent+0x36b/0x490 [ 2164.085297][T15924] bio_alloc_bioset+0xcc/0x480 [ 2164.085320][T15924] ? iov_iter_alignment+0x13b/0x370 [ 2164.085341][T15924] ? iov_iter_npages+0x10f/0x390 [ 2164.085370][T15924] ? iomap_dio_bio_actor+0x469/0xb50 [ 2164.085446][T15924] iomap_dio_bio_actor+0x511/0xb50 [ 2164.085467][T15924] iomap_dio_actor+0x26e/0x3b0 [ 2164.085487][T15924] iomap_apply+0x1df/0x400 [ 2164.085505][T15924] __iomap_dio_rw+0x62e/0xa60 [ 2164.085570][T15924] ? __iomap_dio_rw+0xa60/0xa60 [ 2164.085594][T15924] iomap_dio_rw+0x30/0x70 [ 2164.085613][T15924] ext4_file_read_iter+0x21a/0x290 [ 2164.085629][T15924] aio_read+0x1c1/0x280 [ 2164.085650][T15924] ? should_fail+0xd6/0x250 [ 2164.085673][T15924] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2164.085692][T15924] io_submit_one+0x7fb/0x1350 [ 2164.085713][T15924] __se_sys_io_submit+0xf5/0x260 [ 2164.085734][T15924] __x64_sys_io_submit+0x3f/0x50 [ 2164.085772][T15924] do_syscall_64+0x3d/0x90 [ 2164.085793][T15924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2164.085876][T15924] RIP: 0033:0x4665e9 [ 2164.085887][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2164.085904][T15924] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2164.085998][T15924] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2164.086009][T15924] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2164.086019][T15924] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:26 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x29, @tick=0x5, 0x6, {0x1f}, 0x9, 0x1, 0xfa}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000200)={0x3b2, 0x1, 0x100}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007ed000/0x1000)=nil, 0x1000, 0x1800003, 0x13, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x0, @time={0xfffffffb, 0x10}, 0x7, {0x5, 0x3f}, 0x5, 0x1, 0x2}) 10:52:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x3000000) 10:52:26 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0x2e, 0x3f}, 0x1, 0x7, 0x4, {0x55, 0x7}, 0x9, 0xffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x3, 0x0, 0x0, 0x8000}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:26 executing program 0 (fault-call:6 fault-nth:40): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2164.086029][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2164.086038][T15924] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4000000) 10:52:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x5000000) [ 2164.598862][T15947] FAULT_INJECTION: forcing a failure. [ 2164.598862][T15947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2164.612176][T15947] CPU: 0 PID: 15947 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2164.622422][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.632517][T15947] Call Trace: [ 2164.635796][T15947] dump_stack_lvl+0xb7/0x103 [ 2164.640409][T15947] dump_stack+0x11/0x1a [ 2164.644559][T15947] should_fail+0x23c/0x250 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6000000) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7000000) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x8000000) [ 2164.649086][T15947] __alloc_pages+0x102/0x320 [ 2164.653763][T15947] alloc_pages_vma+0x513/0x680 [ 2164.658530][T15947] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2164.664095][T15947] do_anonymous_page+0x16e/0x8a0 [ 2164.669027][T15947] handle_mm_fault+0x98f/0x1a50 [ 2164.673873][T15947] ? follow_page_mask+0x93f/0x1040 [ 2164.679018][T15947] __get_user_pages+0x32b/0xbc0 [ 2164.683896][T15947] get_user_pages_unlocked+0x175/0x630 [ 2164.689356][T15947] ? gup_pte_range+0x429/0x620 [ 2164.694122][T15947] __gup_longterm_unlocked+0x47/0x100 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x9000000) [ 2164.699495][T15947] internal_get_user_pages_fast+0x763/0x860 [ 2164.705451][T15947] get_user_pages_fast+0x5d/0x80 [ 2164.710382][T15947] iov_iter_get_pages+0x199/0x7e0 [ 2164.715406][T15947] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2164.720432][T15947] ? mempool_alloc_slab+0x16/0x20 [ 2164.725452][T15947] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2164.730882][T15947] ? bio_alloc_bioset+0x402/0x480 [ 2164.735913][T15947] iomap_dio_bio_actor+0x673/0xb50 [ 2164.741084][T15947] iomap_dio_actor+0x26e/0x3b0 [ 2164.745838][T15947] iomap_apply+0x1df/0x400 [ 2164.750231][T15947] __iomap_dio_rw+0x62e/0xa60 [ 2164.754955][T15947] ? __iomap_dio_rw+0xa60/0xa60 [ 2164.759836][T15947] iomap_dio_rw+0x30/0x70 [ 2164.764754][T15947] ext4_file_read_iter+0x21a/0x290 [ 2164.769932][T15947] aio_read+0x1c1/0x280 [ 2164.774126][T15947] ? should_fail+0xd6/0x250 [ 2164.778619][T15947] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2164.783630][T15947] io_submit_one+0x7fb/0x1350 [ 2164.788284][T15947] __se_sys_io_submit+0xf5/0x260 [ 2164.793240][T15947] __x64_sys_io_submit+0x3f/0x50 [ 2164.798250][T15947] do_syscall_64+0x3d/0x90 [ 2164.802651][T15947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2164.808531][T15947] RIP: 0033:0x4665e9 [ 2164.812397][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2164.832004][T15947] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2164.840391][T15947] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2164.848363][T15947] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2164.856310][T15947] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2164.864265][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2164.872210][T15947] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:27 executing program 3: r0 = gettid() r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000180)="a02f99943b49cd207015bc38fa1b4d6a769bbef03c09f7df8a3820453da195df93d63f50cae640f124c1d47105bbc6bc1769e0d66124e572631e74f71039933dbc49dbc588f0e8a2207ba036df48ef902b7080160d2ccf7f6810edce8de2f05912b1b0b91d4ef89be0358e3829c9c978199137ec5cf4cba0dd939cf41f5031a51f6528b6f8e301a5c9b1bc469aeabab0a163d03268e228e54529214ed7a4b9043cf53709740b99") r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x80000d, 0x12, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000540)=""/135, 0x87}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/187, 0xbb}], 0x3, 0xd9f, 0xed96) tkill(r0, 0x7) 10:52:27 executing program 0 (fault-call:6 fault-nth:41): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xa000000) 10:52:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2165.105770][T15992] FAULT_INJECTION: forcing a failure. [ 2165.105770][T15992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2165.119021][T15992] CPU: 0 PID: 15992 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2165.129169][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.129181][T15992] Call Trace: [ 2165.129188][T15992] dump_stack_lvl+0xb7/0x103 [ 2165.129207][T15992] dump_stack+0x11/0x1a [ 2165.129221][T15992] should_fail+0x23c/0x250 [ 2165.129246][T15992] __alloc_pages+0x102/0x320 [ 2165.129268][T15992] alloc_pages_vma+0x513/0x680 [ 2165.129300][T15992] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2165.129326][T15992] do_anonymous_page+0x16e/0x8a0 [ 2165.175505][T15992] handle_mm_fault+0x98f/0x1a50 [ 2165.180374][T15992] ? follow_page_mask+0x93f/0x1040 [ 2165.180406][T15992] __get_user_pages+0x32b/0xbc0 [ 2165.180431][T15992] get_user_pages_unlocked+0x175/0x630 [ 2165.180453][T15992] ? gup_pte_range+0x429/0x620 [ 2165.200654][T15992] __gup_longterm_unlocked+0x47/0x100 [ 2165.200685][T15992] internal_get_user_pages_fast+0x763/0x860 [ 2165.200710][T15992] get_user_pages_fast+0x5d/0x80 [ 2165.200733][T15992] iov_iter_get_pages+0x199/0x7e0 [ 2165.222040][T15992] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2165.222071][T15992] ? mempool_alloc_slab+0x16/0x20 [ 2165.232156][T15992] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2165.237583][T15992] ? bio_alloc_bioset+0x402/0x480 [ 2165.237612][T15992] iomap_dio_bio_actor+0x673/0xb50 [ 2165.237689][T15992] iomap_dio_actor+0x26e/0x3b0 10:52:27 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x4b, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47bc79d8b658329bc975fabf16ab7f2c99e3290edf5d", 0x0, 0x5d81b412}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = signalfd4(r2, &(0x7f0000000180)={[0x3f]}, 0x8, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], 0xc63b9e35) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/181, 0xb5}], 0x3, 0x3, 0x6) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x138, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3bf7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xad54}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdfb8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x682}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1d9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040854}, 0x8000) sendfile(r2, 0xffffffffffffffff, &(0x7f0000001280)=0x8001, 0x5) preadv(r2, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/246, 0xf6}, {&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/45, 0x2d}, {&(0x7f0000000a40)=""/4, 0x4}, {&(0x7f0000000a80)=""/208, 0xd0}], 0x5, 0x2, 0x10) tkill(r0, 0x7) [ 2165.237713][T15992] iomap_apply+0x1df/0x400 [ 2165.256962][T15992] __iomap_dio_rw+0x62e/0xa60 [ 2165.256988][T15992] ? __iomap_dio_rw+0xa60/0xa60 [ 2165.257008][T15992] iomap_dio_rw+0x30/0x70 [ 2165.257027][T15992] ext4_file_read_iter+0x21a/0x290 [ 2165.257046][T15992] aio_read+0x1c1/0x280 [ 2165.280049][T15992] ? should_fail+0xd6/0x250 [ 2165.280092][T15992] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2165.280183][T15992] io_submit_one+0x7fb/0x1350 [ 2165.280207][T15992] __se_sys_io_submit+0xf5/0x260 [ 2165.280226][T15992] __x64_sys_io_submit+0x3f/0x50 [ 2165.304263][T15992] do_syscall_64+0x3d/0x90 [ 2165.308678][T15992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2165.308712][T15992] RIP: 0033:0x4665e9 [ 2165.308727][T15992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.308742][T15992] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2165.308757][T15992] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xb000000) 10:52:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2165.308769][T15992] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2165.362461][T15992] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.370428][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.370442][T15992] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xc000000) 10:52:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:27 executing program 0 (fault-call:6 fault-nth:42): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:27 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0x6a, 0xdd}, 0x1, 0xfffffffd, 0x1, {0x9, 0x8}, 0x2, 0x4}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xd000000) 10:52:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xe000000) [ 2165.605556][T16036] FAULT_INJECTION: forcing a failure. [ 2165.605556][T16036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2165.605604][T16036] CPU: 0 PID: 16036 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2165.605626][T16036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.605635][T16036] Call Trace: [ 2165.605643][T16036] dump_stack_lvl+0xb7/0x103 [ 2165.605661][T16036] dump_stack+0x11/0x1a [ 2165.605674][T16036] should_fail+0x23c/0x250 [ 2165.605694][T16036] __alloc_pages+0x102/0x320 [ 2165.605735][T16036] alloc_pages_vma+0x513/0x680 [ 2165.605757][T16036] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2165.605780][T16036] do_anonymous_page+0x16e/0x8a0 [ 2165.605815][T16036] handle_mm_fault+0x98f/0x1a50 [ 2165.605829][T16036] ? follow_page_mask+0x93f/0x1040 [ 2165.605857][T16036] __get_user_pages+0x32b/0xbc0 [ 2165.605881][T16036] get_user_pages_unlocked+0x175/0x630 [ 2165.605905][T16036] ? gup_pte_range+0x429/0x620 [ 2165.606022][T16036] __gup_longterm_unlocked+0x47/0x100 [ 2165.606046][T16036] internal_get_user_pages_fast+0x763/0x860 [ 2165.606073][T16036] get_user_pages_fast+0x5d/0x80 [ 2165.606172][T16036] iov_iter_get_pages+0x199/0x7e0 [ 2165.606254][T16036] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2165.606278][T16036] ? mempool_alloc_slab+0x16/0x20 [ 2165.606302][T16036] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2165.606360][T16036] ? bio_alloc_bioset+0x402/0x480 [ 2165.606383][T16036] iomap_dio_bio_actor+0x673/0xb50 [ 2165.606479][T16036] iomap_dio_actor+0x26e/0x3b0 [ 2165.606503][T16036] iomap_apply+0x1df/0x400 [ 2165.606606][T16036] __iomap_dio_rw+0x62e/0xa60 [ 2165.606629][T16036] ? __iomap_dio_rw+0xa60/0xa60 [ 2165.606654][T16036] iomap_dio_rw+0x30/0x70 [ 2165.606754][T16036] ext4_file_read_iter+0x21a/0x290 [ 2165.606783][T16036] aio_read+0x1c1/0x280 [ 2165.606808][T16036] ? should_fail+0xd6/0x250 [ 2165.606837][T16036] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2165.606860][T16036] io_submit_one+0x7fb/0x1350 [ 2165.794115][T16036] __se_sys_io_submit+0xf5/0x260 [ 2165.794206][T16036] __x64_sys_io_submit+0x3f/0x50 [ 2165.794228][T16036] do_syscall_64+0x3d/0x90 [ 2165.794246][T16036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2165.794268][T16036] RIP: 0033:0x4665e9 [ 2165.794280][T16036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.837884][T16036] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2165.846303][T16036] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2165.854334][T16036] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2165.862304][T16036] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.862318][T16036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.862329][T16036] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x10000000) 10:52:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 0 (fault-call:6 fault-nth:43): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:28 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) read(r1, &(0x7f0000000180)=""/52, 0x34) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0x3, 0x9}, 'port1\x00', 0x2, 0x0, 0x9c, 0x1, 0xcf42, 0x81, 0x8, 0x0, 0x6}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="34001000104e950538ecabfb"], 0x2c}}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) wait4(r1, &(0x7f00000001c0), 0x80000000, &(0x7f0000000340)) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x400e00, 0x58) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0x80045300, &(0x7f0000000280)={0x1, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x7) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x11000000) 10:52:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x12000000) [ 2166.308965][T16069] FAULT_INJECTION: forcing a failure. [ 2166.308965][T16069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2166.322370][T16069] CPU: 0 PID: 16069 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2166.332582][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.342698][T16069] Call Trace: [ 2166.345965][T16069] dump_stack_lvl+0xb7/0x103 [ 2166.350550][T16069] dump_stack+0x11/0x1a [ 2166.354753][T16069] should_fail+0x23c/0x250 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x25000000) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x3f000000) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x48000000) [ 2166.359172][T16069] __alloc_pages+0x102/0x320 [ 2166.363828][T16069] alloc_pages_vma+0x513/0x680 [ 2166.368631][T16069] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2166.374183][T16069] do_anonymous_page+0x16e/0x8a0 [ 2166.379382][T16069] handle_mm_fault+0x98f/0x1a50 [ 2166.384222][T16069] ? follow_page_mask+0x93f/0x1040 [ 2166.389338][T16069] __get_user_pages+0x32b/0xbc0 [ 2166.394292][T16069] get_user_pages_unlocked+0x175/0x630 [ 2166.399754][T16069] ? gup_pte_range+0x429/0x620 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x4c000000) 10:52:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x51000000) [ 2166.404559][T16069] __gup_longterm_unlocked+0x47/0x100 [ 2166.409962][T16069] internal_get_user_pages_fast+0x763/0x860 [ 2166.415864][T16069] get_user_pages_fast+0x5d/0x80 [ 2166.420963][T16069] iov_iter_get_pages+0x199/0x7e0 [ 2166.426042][T16069] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2166.431065][T16069] ? mempool_alloc_slab+0x16/0x20 [ 2166.436113][T16069] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2166.441535][T16069] ? bio_alloc_bioset+0x402/0x480 [ 2166.446565][T16069] iomap_dio_bio_actor+0x673/0xb50 [ 2166.451741][T16069] iomap_dio_actor+0x26e/0x3b0 [ 2166.456531][T16069] iomap_apply+0x1df/0x400 [ 2166.460941][T16069] __iomap_dio_rw+0x62e/0xa60 [ 2166.465702][T16069] ? __iomap_dio_rw+0xa60/0xa60 [ 2166.470590][T16069] iomap_dio_rw+0x30/0x70 [ 2166.474905][T16069] ext4_file_read_iter+0x21a/0x290 [ 2166.480002][T16069] aio_read+0x1c1/0x280 [ 2166.484228][T16069] ? should_fail+0xd6/0x250 [ 2166.488726][T16069] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2166.493779][T16069] io_submit_one+0x7fb/0x1350 [ 2166.498536][T16069] __se_sys_io_submit+0xf5/0x260 [ 2166.503526][T16069] __x64_sys_io_submit+0x3f/0x50 [ 2166.508446][T16069] do_syscall_64+0x3d/0x90 [ 2166.512844][T16069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2166.518993][T16069] RIP: 0033:0x4665e9 [ 2166.522869][T16069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.542461][T16069] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2166.550855][T16069] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2166.558825][T16069] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2166.566842][T16069] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.574798][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.582750][T16069] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:29 executing program 0 (fault-call:6 fault-nth:44): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2166.771055][T16113] FAULT_INJECTION: forcing a failure. [ 2166.771055][T16113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2166.784340][T16113] CPU: 0 PID: 16113 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2166.794480][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.804529][T16113] Call Trace: [ 2166.807788][T16113] dump_stack_lvl+0xb7/0x103 [ 2166.812360][T16113] dump_stack+0x11/0x1a [ 2166.816497][T16113] should_fail+0x23c/0x250 [ 2166.820895][T16113] __alloc_pages+0x102/0x320 [ 2166.825463][T16113] alloc_pages_vma+0x513/0x680 [ 2166.830224][T16113] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2166.835748][T16113] do_anonymous_page+0x16e/0x8a0 [ 2166.840696][T16113] handle_mm_fault+0x98f/0x1a50 [ 2166.845682][T16113] ? follow_page_mask+0x93f/0x1040 [ 2166.850773][T16113] __get_user_pages+0x32b/0xbc0 [ 2166.855652][T16113] get_user_pages_unlocked+0x175/0x630 [ 2166.861087][T16113] ? gup_pte_range+0x429/0x620 [ 2166.865829][T16113] __gup_longterm_unlocked+0x47/0x100 [ 2166.871240][T16113] internal_get_user_pages_fast+0x763/0x860 [ 2166.877148][T16113] get_user_pages_fast+0x5d/0x80 [ 2166.882098][T16113] iov_iter_get_pages+0x199/0x7e0 [ 2166.887144][T16113] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2166.892220][T16113] ? mempool_alloc_slab+0x16/0x20 [ 2166.897220][T16113] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2166.902573][T16113] ? bio_alloc_bioset+0x402/0x480 [ 2166.907574][T16113] iomap_dio_bio_actor+0x673/0xb50 [ 2166.912740][T16113] iomap_dio_actor+0x26e/0x3b0 [ 2166.917478][T16113] iomap_apply+0x1df/0x400 [ 2166.921880][T16113] __iomap_dio_rw+0x62e/0xa60 [ 2166.926557][T16113] ? __iomap_dio_rw+0xa60/0xa60 [ 2166.931410][T16113] iomap_dio_rw+0x30/0x70 [ 2166.935780][T16113] ext4_file_read_iter+0x21a/0x290 [ 2166.940881][T16113] aio_read+0x1c1/0x280 [ 2166.945011][T16113] ? should_fail+0xd6/0x250 [ 2166.949537][T16113] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2166.954567][T16113] io_submit_one+0x7fb/0x1350 [ 2166.959227][T16113] __se_sys_io_submit+0xf5/0x260 [ 2166.964161][T16113] __x64_sys_io_submit+0x3f/0x50 [ 2166.969077][T16113] do_syscall_64+0x3d/0x90 [ 2166.973567][T16113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2166.979439][T16113] RIP: 0033:0x4665e9 [ 2166.983305][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.002959][T16113] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2167.011356][T16113] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2167.019301][T16113] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2167.027248][T16113] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.035194][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2167.043151][T16113] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x68000000) 10:52:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:29 executing program 5: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0xc9ab) process_madvise(r1, &(0x7f0000000880)=[{&(0x7f0000000340)="809a92905aede9cd5ec8f01328168927a9df2507fe2bdcff49811a0e1b3c6c99c1fa0e869f7166ff0264dc9c1ebb286797908d0ef98a8e3f1bccf74a70551bebaf033a7ed2526d10675f6202a5209181137f9580742d8b19b2117c0fa71f68b0ff1870b9ea09afbafdf16a4a756fb08cda93ccf5549ea7591d2627d103217a47625c6aa98758b8659fa55eb57c767c91b087ace410b8616a7e27a47a7af0564213f8d2cd11245247442928cfd114c4a6ea8272089cf00c155d5299ae57a6195f9264757bff8d5f642af8bcb7890ec25b3b1beebbe61fa915d30281d958016439bd6b52e7d68ef2ea6a06d53f269318200138bb56ff2592ca4f4d", 0xfa}, {&(0x7f0000000200)="8658f4805d48077675d09e776a29c0e25c5408e43f517e66192aa92da334f240b82c7ce31a89ab3899e6abafafe637253bf6c91b30324cee", 0x38}, {&(0x7f0000000440)="2bb69ab6529294a41039635442202919e43b889283eb8ad2c3d0431d7e7bfbfe8dc35bf2b9ce8864a50e1f9940d93915e5536c9c7d719030e02c1ec693aaf7c647912c44", 0x44}, {&(0x7f00000004c0)="a9fd9b32bfc682beeff01d33806784af13195353ee8c6d8dead07bbe063d554335c11d6747ff388a396c333eb6885c8b4d75b6b4c07e0b336249433403ee771fe986baaef82ac303d50328bd20f73e4a4d0f02dc6738e4ad9198af6d0686e50d48cbde05f5b751348c16542bd3047165d4345d5c6893abbcfc80e4155fc31b7bd05f71f221c2c4be689d61188a21685b76fe5ff3f18f597eebe95f30578905eb0616e8f482bd061d04e3c07b6514f18a22f12d07d3447f23baf73581d13876d3b182811771e308d6ca6df880", 0xcc}, {&(0x7f0000000240)="e9c10672d4dc9b0e4a573a0289dcc630e50a6c55609d0a684959c77ed6840942f5", 0x21}, {&(0x7f00000005c0)="151ec41dd98397ff6188d8e90a522befb2bd38f9a9fa2b232e4a004cf2633a8aa92c4955c1d9bce867a3d682705e1654d22541fa7df549337d6326ced757b4579ddb758a513d4ae843e6d6f00d8a66e56f9ec92ec53153b38daa739e03f97d52af0397d21c21fc2af9c0417185acaa79ab64c0f1494d36f664ea7c0377bdd077c215ad18bcb3b4bacfa6c35bb379cd072b6d8ce5f30125a9b4e67388c16552d2798f12ceda1bba360f6f313bc7eeda74daf27eefbda8e4a516ba654b61272205a4dba2671bf007649ad3", 0xca}, {&(0x7f00000006c0)="488e4315de6136698dc1cd75a8645097d5ea3ed7179675d226189fb7b8bab616691f4e7a4b516cacc2c1", 0x2a}, {&(0x7f0000000700)="381b38ca4abed4c7b7351177fdfc70173c36bfd84ccd764eb8abc889327e3787c3cfb225825d3ca13ab83dd4b0c6da81dd95f1029d9edfeb4d736fa615457aeb8f6054332f5a7151a13cf90ab9a5263632af337c65d4f0deb4aea03690b684c1576721eeb784ac0248c1f50c", 0x6c}, {&(0x7f0000000780)="b1363f470095b011758555c20c3e2fab6144f1849f00fd6838d14ddb1ac8f5fda140c03838da37bfc24e385228e7f37157034fa8282f81c8aa78bf483d445aada25e9372481f01caa45215a4dd43775606ae7b88d6f0b6dc12d62c81555752ac9c9f72942c0528fb5b2dd6f3324533379f45cd4d5fa6eaaba8891e33ea72d72c39c3e021f646dd5f99db54de70873029d820152c15c8123f0aa4cf589521f2bb4b7124224fb33f4091ced539f43878628409c758b00654a1bacddb65bfbeb45070fe968135a699cf1fa91083abcd30fa38a2c657f775717a7bf997cba9a89e22411c756bc18990f77bb9ea95c08990292f7927e177467bf2", 0xf8}], 0x9, 0x64, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0xffffffff80000000, '?\x00\x00\x00\b\x00', "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000180)={0x4, 0x5, 0xfffffffc}) 10:52:29 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) lseek(r3, 0x3, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = syz_mount_image$nfs4(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x9, 0x1, &(0x7f0000000800)=[{&(0x7f00000007c0), 0x0, 0x5}], 0x6004, &(0x7f0000000840)={[{'\x00'}], [{@fowner_lt={'fowner<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x32, 0x61, 0x62, 0x30, 0x36, 0x6], 0x2d, [0x66, 0x66, 0x66, 0x37], 0x2d, [0x33, 0x39, 0x32, 0x34], 0x2d, [0x0, 0x63, 0x56, 0x66], 0x2d, [0x31, 0x1, 0x65, 0x38, 0x61, 0x65, 0x31, 0xcc]}}}, {@obj_user={'obj_user', 0x3d, '/dev/snd/seq\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/seq\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@pcr={'pcr', 0x3d, 0x13}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@obj_role={'obj_role', 0x3d, '}'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000980)=0x81, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/190, 0xbe}], 0x7, 0x0, 0xd0fc) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:29 executing program 0 (fault-call:6 fault-nth:45): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x6c000000) 10:52:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2167.207887][T16134] FAULT_INJECTION: forcing a failure. [ 2167.207887][T16134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2167.221134][T16134] CPU: 0 PID: 16134 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2167.231315][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.241366][T16134] Call Trace: [ 2167.241375][T16134] dump_stack_lvl+0xb7/0x103 [ 2167.241466][T16134] dump_stack+0x11/0x1a [ 2167.241498][T16134] should_fail+0x23c/0x250 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x74000000) 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x7a000000) [ 2167.241523][T16134] __alloc_pages+0x102/0x320 [ 2167.241543][T16134] alloc_pages_vma+0x513/0x680 [ 2167.241630][T16134] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2167.241681][T16134] do_anonymous_page+0x16e/0x8a0 [ 2167.241700][T16134] handle_mm_fault+0x98f/0x1a50 [ 2167.241719][T16134] ? follow_page_mask+0x93f/0x1040 [ 2167.241751][T16134] __get_user_pages+0x32b/0xbc0 [ 2167.241773][T16134] get_user_pages_unlocked+0x175/0x630 [ 2167.241793][T16134] ? gup_pte_range+0x429/0x620 [ 2167.241858][T16134] __gup_longterm_unlocked+0x47/0x100 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xbe000000) 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xf6000000) [ 2167.308238][T16134] internal_get_user_pages_fast+0x763/0x860 [ 2167.308272][T16134] get_user_pages_fast+0x5d/0x80 [ 2167.308318][T16134] iov_iter_get_pages+0x199/0x7e0 [ 2167.308343][T16134] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2167.329249][T16134] ? mempool_alloc_slab+0x16/0x20 [ 2167.329317][T16134] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2167.329364][T16134] ? bio_alloc_bioset+0x402/0x480 [ 2167.344772][T16134] iomap_dio_bio_actor+0x673/0xb50 [ 2167.344805][T16134] iomap_dio_actor+0x26e/0x3b0 10:52:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xfeffffff) [ 2167.344908][T16134] iomap_apply+0x1df/0x400 [ 2167.344977][T16134] __iomap_dio_rw+0x62e/0xa60 [ 2167.344999][T16134] ? __iomap_dio_rw+0xa60/0xa60 [ 2167.345022][T16134] iomap_dio_rw+0x30/0x70 [ 2167.345045][T16134] ext4_file_read_iter+0x21a/0x290 [ 2167.345089][T16134] aio_read+0x1c1/0x280 [ 2167.345109][T16134] ? should_fail+0xd6/0x250 [ 2167.345189][T16134] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2167.345214][T16134] io_submit_one+0x7fb/0x1350 [ 2167.345344][T16134] __se_sys_io_submit+0xf5/0x260 [ 2167.345402][T16134] __x64_sys_io_submit+0x3f/0x50 [ 2167.345423][T16134] do_syscall_64+0x3d/0x90 [ 2167.345443][T16134] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2167.345464][T16134] RIP: 0033:0x4665e9 [ 2167.345476][T16134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.345490][T16134] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2167.345506][T16134] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2167.345516][T16134] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2167.345528][T16134] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.345620][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2167.345632][T16134] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xfffffffe) 10:52:30 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000001c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x22000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x28000, 0xd0) tkill(r0, 0x7) 10:52:30 executing program 0 (fault-call:6 fault-nth:46): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:30 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) read(r2, &(0x7f0000000080)=""/241, 0xfd28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0xffffffff) [ 2168.117728][T16189] FAULT_INJECTION: forcing a failure. [ 2168.117728][T16189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2168.130983][T16189] CPU: 0 PID: 16189 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2168.141137][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.151274][T16189] Call Trace: [ 2168.154546][T16189] dump_stack_lvl+0xb7/0x103 [ 2168.159197][T16189] dump_stack+0x11/0x1a 10:52:30 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/231, 0xe7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x1, "9c0aee8290f1caeb", "edc01b9f244c6816ab7f2c99e3293f24f5310457fe5300", 0x3, 0x72f}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0xe) 10:52:30 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000180)={{0x5, 0xf3}, 'port0\x00', 0x32, 0x40000, 0x3ff, 0x0, 0x2ff5b0cd, 0x7fffffff, 0x8, 0x0, 0x0, 0x8}) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setopts(0x4200, r2, 0x100, 0x24) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) writev(r2, &(0x7f0000000940)=[{&(0x7f00000000c0)="0dbaeb90d9bf5c0118fcf25580d1abfbdbaf415b082c9a4fd32a3cfd8355b3ad977fdff8dadacfe2d6", 0x29}, {&(0x7f0000000400)="7e56490b4cf3a8a1ba23ba21cac24bc03b78245d4657b1bd536d35cb00c9877a37ced80cc9d85819b0f7025449c7561be607cb32b9777be054e22837215abf7b0c8a77f7ed6a728a6005077d115077fe0c3fd2290b3b0792f3f99ca48deefb114606bf8c651ee7d62d8c7c685cba01e4baf9a0d72ece74b12719603c28a4424fa2baf6dd29c760a251c7cde81648ae1f75c93e5712522ad01d11c10fd233d1ce7f6d6c1f893bfe421d370dd07019dbbad438b2713dc89a631d213ebff89be655b8a4528b8a0e9675b2b5815994343099fc988b9dafe898ecfb9c382b188fbd16fa101623dcfca3002145e49950d9ccd6c02c45138f", 0xf5}, {&(0x7f0000000500)="2e4728ff06ab1ec945a39f2007ad05d3267d9b09ca63c92bead57bf75d23323c1b515e7cca65bf51de4e848a7f85643395042bc43f6f82e3f33565a632c2e17b8cb5fafe3c65b435373bddbca851ebac045aae8a01ceca088e62927a08bfbf168e7ec99e2576f60cffe453db61d8a44b04e51f0c5a7eb004a87da079e8a22c226784622732e756a83d78f2c8554a5a9462bfe2b256984c149e9c7f097830", 0x9e}, {&(0x7f00000005c0)="507285376f13c8e7e9e9c780d1696909125d8e6d2b51d72e0bdc2cc875ec2898d4eb3c515bf418a0cf8c381b4319a6d917e314efdc0a136bf0f226f3ac938ef132857a82c9418e4ccf4fa19010c887dc3d4b38ae58ed50b01ee199115d6d27995f3a5904848ba756cbeba13e2d3dd7b77360d2ec456c87f466a65533b9adbd84f2b8922fd0c6f3f5bda3ccf8eaed9e7f05635f", 0x93}, {&(0x7f0000000680)="9459ae7791446a153df2f10544c031c403b59e304155741de9a72704ce297863388aebe8753b8749c586d43c85c79cc4485ed76ddf6eb161793948a094607137318524429a331396f7b93ab11fd6e1f8e8d28189695241bcdd1969d8acee88023daf09aaab40d02baf768bf7030d1614589e16946c74eabb77949ace84d5af6d1f08b913f50288645c62a6b7ea7d693c98deee98414baf4b19b4153c47f7523fae1240a7bb068ff540bf3a540cb9322cacce62cd1cee534fe556be1b9bc230e9b7578a2762f3bbe1e6989e4c1d6c7f276dbe1c3e6bd410a08a5fa730aa72e03f5fdf093d2869d9915bf8f5", 0xeb}, {&(0x7f0000000780)="d39b252b46f23163ca2e6073064c4dc65f69c28b805b53b591d6e93ab8317bee4a07e5a46fd1548ee86a3783d68a551e8d07842ffab2bf5556124c30cf260b794741a9db290bf023415b704221dd06e991c8ae1ed9cfcb02a1ed7dca97c46bf920c315800aaec11f97462bfbe4", 0x6d}, {&(0x7f0000000800)="58c5ec1d3827bc2c33bc489214681412a3bd39788dc553fd2b7d30092515f9d2d71ea3ba31919d2c330049f65d39f3facbbc6d045b9574cda6d4694282b312682d6de5157e6781e478d1b29e173c6e2e4dfa7d270509fd0661235700a1edaaa40546ca494d6c454d05e2e236c943520ad6f9d0a14152a7345d24ebf9f52dba48be5755789a4806e0c139395e4ae3", 0x8e}, {&(0x7f00000008c0)="f9df2f6c41586c827f6a72dc0a223577e607151e6de6def6591f92f980cf1608edb592db21eb637e18b32686f0dfd4dc9ab7048608e3b2fc100497bd308edaa9345e501b9cf1ed932ecabf91a21250e6cf3610827f3faad0fee062fbb40dd7af85bd6cc1a6c7b5", 0x67}], 0x8) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2168.159215][T16189] should_fail+0x23c/0x250 [ 2168.159238][T16189] __alloc_pages+0x102/0x320 [ 2168.159260][T16189] alloc_pages_vma+0x513/0x680 [ 2168.159281][T16189] ? page_add_new_anon_rmap+0x26d/0x2c0 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x7fffffff, 0x2, 0x0, 0x0, 0x4, 0x9}) sendto$inet(r1, &(0x7f0000000400)="81812abadef288ecd7fefde0c16e8676bccac4082749084fc16e98b7ccdd9bfc910c1992617fc93172824156f7a8a54c8c67024a3f77727a4c9c43ba330d0755aeec449ad122bdbd19c53b7ed59fc232584ef207d3f9ba7d1f5da519c63dfff752267e4411698aab08292c0375ed6222d0a8d2d5e4edc45b78de0aaa76f23b29888b6a0fbf410c52b719b2364720521c7fcad45c33b0775650a3f2b5a0a404d9c5068475afce483c4bd8250d1f6be930aaf0", 0xb2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2168.159312][T16189] do_anonymous_page+0x16e/0x8a0 [ 2168.159329][T16189] handle_mm_fault+0x98f/0x1a50 [ 2168.159344][T16189] ? follow_page_mask+0x93f/0x1040 [ 2168.159369][T16189] __get_user_pages+0x32b/0xbc0 [ 2168.159388][T16189] get_user_pages_unlocked+0x175/0x630 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000001400)=""/231, 0xe7}, {&(0x7f0000001500)=""/178, 0xb2}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/239, 0xef}], 0x6, 0xd9f, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) mmap(&(0x7f00006a8000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0xc60b6000) [ 2168.159461][T16189] ? gup_pte_range+0x429/0x620 [ 2168.159481][T16189] __gup_longterm_unlocked+0x47/0x100 [ 2168.159506][T16189] internal_get_user_pages_fast+0x763/0x860 [ 2168.159530][T16189] get_user_pages_fast+0x5d/0x80 [ 2168.159549][T16189] iov_iter_get_pages+0x199/0x7e0 10:52:30 executing program 0 (fault-call:6 fault-nth:47): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:30 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x3, &(0x7f0000001340)={0x2c, 0x8001, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000340)="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", 0x45, 0x0, &(0x7f0000000180)="08d91e4cd073be05887cb590107df76986a1d975769845b728c51d0b0f75e6465298e214638a503df90aac745bf13423d9e9574bd7ef4173b4e2a5904bea1c6ae7fd1e7b27"}) mmap(&(0x7f00000f2000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r3, 0x4807b000) tkill(r0, 0x7) 10:52:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x24bd0a7c395ec55, 0x300) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000400)=""/202, 0xca}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x2, 0x4, 0xffffffff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2168.159569][T16189] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2168.159593][T16189] ? mempool_alloc_slab+0x16/0x20 [ 2168.159678][T16189] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2168.159705][T16189] ? bio_alloc_bioset+0x402/0x480 [ 2168.159729][T16189] iomap_dio_bio_actor+0x673/0xb50 10:52:30 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x101100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x7, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2168.159800][T16189] iomap_dio_actor+0x26e/0x3b0 [ 2168.159823][T16189] iomap_apply+0x1df/0x400 [ 2168.159845][T16189] __iomap_dio_rw+0x62e/0xa60 [ 2168.159864][T16189] ? __iomap_dio_rw+0xa60/0xa60 [ 2168.159929][T16189] iomap_dio_rw+0x30/0x70 [ 2168.159950][T16189] ext4_file_read_iter+0x21a/0x290 [ 2168.159970][T16189] aio_read+0x1c1/0x280 [ 2168.159992][T16189] ? should_fail+0xd6/0x250 [ 2168.160073][T16189] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2168.160096][T16189] io_submit_one+0x7fb/0x1350 [ 2168.160122][T16189] __se_sys_io_submit+0xf5/0x260 [ 2168.160154][T16189] __x64_sys_io_submit+0x3f/0x50 [ 2168.160177][T16189] do_syscall_64+0x3d/0x90 [ 2168.160199][T16189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2168.160223][T16189] RIP: 0033:0x4665e9 [ 2168.160258][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.160272][T16189] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2168.160358][T16189] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2168.160371][T16189] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2168.160386][T16189] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.160399][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2168.160411][T16189] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2168.404134][T16226] FAULT_INJECTION: forcing a failure. [ 2168.404134][T16226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2168.404158][T16226] CPU: 0 PID: 16226 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2168.404187][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.404206][T16226] Call Trace: [ 2168.404215][T16226] dump_stack_lvl+0xb7/0x103 [ 2168.404235][T16226] dump_stack+0x11/0x1a [ 2168.404247][T16226] should_fail+0x23c/0x250 [ 2168.404267][T16226] __alloc_pages+0x102/0x320 [ 2168.404329][T16226] alloc_pages_vma+0x513/0x680 [ 2168.404345][T16226] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2168.404418][T16226] do_anonymous_page+0x16e/0x8a0 [ 2168.404433][T16226] handle_mm_fault+0x98f/0x1a50 [ 2168.404488][T16226] ? follow_page_mask+0x93f/0x1040 [ 2168.404517][T16226] __get_user_pages+0x32b/0xbc0 [ 2168.404538][T16226] get_user_pages_unlocked+0x175/0x630 [ 2168.404561][T16226] ? gup_pte_range+0x429/0x620 [ 2168.404579][T16226] __gup_longterm_unlocked+0x47/0x100 [ 2168.404613][T16226] internal_get_user_pages_fast+0x763/0x860 [ 2168.404634][T16226] get_user_pages_fast+0x5d/0x80 [ 2168.404653][T16226] iov_iter_get_pages+0x199/0x7e0 [ 2168.404771][T16226] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2168.404795][T16226] ? mempool_alloc_slab+0x16/0x20 [ 2168.404815][T16226] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2168.404836][T16226] ? bio_alloc_bioset+0x402/0x480 [ 2168.404857][T16226] iomap_dio_bio_actor+0x673/0xb50 [ 2168.404882][T16226] iomap_dio_actor+0x26e/0x3b0 [ 2168.404906][T16226] iomap_apply+0x1df/0x400 [ 2168.404929][T16226] __iomap_dio_rw+0x62e/0xa60 [ 2168.404951][T16226] ? __iomap_dio_rw+0xa60/0xa60 [ 2168.404995][T16226] iomap_dio_rw+0x30/0x70 [ 2168.405014][T16226] ext4_file_read_iter+0x21a/0x290 [ 2168.405033][T16226] aio_read+0x1c1/0x280 [ 2168.405054][T16226] ? should_fail+0xd6/0x250 [ 2168.405135][T16226] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2168.405194][T16226] io_submit_one+0x7fb/0x1350 [ 2168.405220][T16226] __se_sys_io_submit+0xf5/0x260 [ 2168.405256][T16226] __x64_sys_io_submit+0x3f/0x50 [ 2168.405278][T16226] do_syscall_64+0x3d/0x90 [ 2168.405300][T16226] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2168.405325][T16226] RIP: 0033:0x4665e9 [ 2168.405338][T16226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.405355][T16226] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2168.405370][T16226] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2168.405445][T16226] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2168.405458][T16226] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.405471][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2168.405483][T16226] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:31 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:31 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x420403) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000023e000/0x4000)=nil, 0x4000, 0x9, 0x50, r2, 0x1000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:31 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/239, 0xef) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000340)={{0x6, 0x1}, 0x0, 0x9, 0x92e, {0x6, 0x1}, 0x80}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:31 executing program 0 (fault-call:6 fault-nth:48): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r2, r3, &(0x7f0000000200)=0x8, 0xd0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/233, 0xfffffd50}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f00000000c0)=""/88, 0x58}], 0x4, 0x0, 0x0) 10:52:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2169.008473][T16262] FAULT_INJECTION: forcing a failure. [ 2169.008473][T16262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2169.021710][T16262] CPU: 0 PID: 16262 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2169.031935][T16262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.041989][T16262] Call Trace: [ 2169.045270][T16262] dump_stack_lvl+0xb7/0x103 [ 2169.045294][T16262] dump_stack+0x11/0x1a [ 2169.045311][T16262] should_fail+0x23c/0x250 10:52:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x9f34, 0x903edee8bd32295d) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r0, r3, 0xbc2}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/174, 0xae}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/165, 0xa5}], 0x4, 0x0, 0x0) [ 2169.045386][T16262] __alloc_pages+0x102/0x320 [ 2169.045404][T16262] alloc_pages_vma+0x513/0x680 [ 2169.045452][T16262] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2169.045473][T16262] do_anonymous_page+0x16e/0x8a0 [ 2169.045489][T16262] handle_mm_fault+0x98f/0x1a50 [ 2169.083216][T16262] ? follow_page_mask+0x93f/0x1040 [ 2169.083299][T16262] __get_user_pages+0x32b/0xbc0 [ 2169.083319][T16262] get_user_pages_unlocked+0x175/0x630 [ 2169.083344][T16262] ? gup_pte_range+0x429/0x620 [ 2169.083368][T16262] __gup_longterm_unlocked+0x47/0x100 [ 2169.108865][T16262] internal_get_user_pages_fast+0x763/0x860 [ 2169.108964][T16262] get_user_pages_fast+0x5d/0x80 [ 2169.119955][T16262] iov_iter_get_pages+0x199/0x7e0 [ 2169.124976][T16262] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2169.125003][T16262] ? mempool_alloc_slab+0x16/0x20 [ 2169.125026][T16262] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2169.125078][T16262] ? bio_alloc_bioset+0x402/0x480 [ 2169.125099][T16262] iomap_dio_bio_actor+0x673/0xb50 [ 2169.125121][T16262] iomap_dio_actor+0x26e/0x3b0 [ 2169.155684][T16262] iomap_apply+0x1df/0x400 [ 2169.155749][T16262] __iomap_dio_rw+0x62e/0xa60 [ 2169.155768][T16262] ? __iomap_dio_rw+0xa60/0xa60 [ 2169.155791][T16262] iomap_dio_rw+0x30/0x70 [ 2169.173962][T16262] ext4_file_read_iter+0x21a/0x290 [ 2169.179084][T16262] aio_read+0x1c1/0x280 [ 2169.179110][T16262] ? should_fail+0xd6/0x250 [ 2169.179135][T16262] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2169.179156][T16262] io_submit_one+0x7fb/0x1350 [ 2169.179225][T16262] __se_sys_io_submit+0xf5/0x260 [ 2169.202438][T16262] __x64_sys_io_submit+0x3f/0x50 [ 2169.202485][T16262] do_syscall_64+0x3d/0x90 [ 2169.202506][T16262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2169.217765][T16262] RIP: 0033:0x4665e9 [ 2169.217779][T16262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.241303][T16262] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2169.249706][T16262] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:31 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x402001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0x2, 0x0, 'client1\x00', 0x2, "62e212baef88e8bc", "f41a3ff701364377c3b1a2882b8f3b89501136849c5001785a208b6fcdf84a14", 0x1, 0x1}) 10:52:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2169.249720][T16262] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2169.265662][T16262] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.265675][T16262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.265686][T16262] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:31 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = clone3(&(0x7f0000000540)={0x40040000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x35}, &(0x7f0000000340)=""/204, 0xcc, &(0x7f0000000440)=""/168, &(0x7f0000000500)=[r0], 0x1}, 0x58) tkill(r2, 0x40) read(r1, &(0x7f0000000080)=""/232, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x100, @tick=0x7fffffff, 0x1f, {0x4, 0x4}, 0x9, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:31 executing program 0 (fault-call:6 fault-nth:49): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2169.492411][T16299] FAULT_INJECTION: forcing a failure. [ 2169.492411][T16299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2169.505754][T16299] CPU: 0 PID: 16299 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2169.515938][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.526045][T16299] Call Trace: [ 2169.526055][T16299] dump_stack_lvl+0xb7/0x103 [ 2169.526102][T16299] dump_stack+0x11/0x1a [ 2169.526115][T16299] should_fail+0x23c/0x250 10:52:31 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xfff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001900)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f40)=[{0x7f}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="a676084547ef559e3b608b39e17e1d9f0e82de5f223294d7eeb16908925651d9944d36163cce9de0d5b22963bad7d29dabb4eb59bb331c5bb0d12259b041c8912938c958096ed965ccf6c6aa43b476bab7fe780982567193a54abf30df429ea5ae2d38fe074f50e957eb13d8c7f8da754691e46b02e20182a85a913572dd4b7eb4bbee44c37f898fe283bf190601e787d6d2003b5a0dded53b65d964f31684c31ab6834c43d9aa67c846d0c482e92f4c5dd6052ae838fd10e34afc44f3f7f5e16d36fff4f120c4382f0b4c6b57d7522e3c59f0d436edf65eef78229ad47cc8b83ee1faf2ae4aa9f730284996387ab992459e74db80ae53dd9c2949916759cccbcdc0dd5082e0055207257bbc6395a5dc597601f7aba686e04e16c0bdeccc129f1deac21905ec92be893fa308a69823e8f0217a30b8e2f3a688eecc49e5f2e5de2e4f4403ee579ac9599c6c54e0e0bdca620194ab15b9a85f2264a136ba8c25a2fee890b26233ea8922d702f6c402f44616a19ca821f3d889d1c3c7b9abcdfa22dca627136ae1360ae518d8ba58b9347b421b559c1d4d4f2033625c6866c7ae1b3b7329f238971b9e3d169fba1e7f88dbae9f09bcd18c7e13cd7ad7df100ce3b20705aa31cd9f6038a65f14c77fc01344018e928658f631d0ce4c42426ff3b8ea2b8cc5727da9cc1d13cfad7ca61fe04768878974a5ab18001988d16f23763483581683a168c8df1ec226d14e43cb0bd439be21e84ea5f2eef5284117a8febe17b10a042fce1ae79f0e5a5d88621be4c5f28b648be26ff95b35317866867f937ae366bd2d5b46b9c1375d74d81c8782f9f7c02bf64491ab92f911ce94e27c3203b27ce54c8f789c85267f64416b47dc9a6a58e4bfae9d82b4d82c3424dd47b2e5f60ad93b8ce0944c15dc88934db7d876bed4ae3bfa2781907d6aa5d6c800e246863ce7dc087289fb214a5eb40b745f0bf6b31b16f90d9f1cdd82651ab37cac49a92bc1e8fd477ffcbd243708e79d110c2176d5ffe1529fd8eb822944ec71ad13cf220892389586a4cb3fc800f0cf5606e18514548d664843567a8ebd2cc81f805c7f0783ed33a0922ae2fbfeebd4cc4d5013e047ea4c545952c3915a5d406bda65d9c369bf6ac54639ac780b39b2130913de1d0174ac6e7f51ed530afbd952d2bc517bddae7d447524ee6f5961792edd24db97e577f27e347acaa3124df708304dd55d553fd6f9055fc4de8e7232ff130904830bc74bdb312b02d8da4363f282204ba6fb7f6b8a4ec7784a1ee7f74c9f78b49419df94862c70fecca90e7d70bb69655c9c07440d74765c98f51bcbee39e0509583485d5369b9ecad6048b78919b455d580b72fc82c4280814eaa66dfdf34334e98ebf30b82f0033ad8a58fbf04e4aa4799c69afe6cd20d5ed06cffdb8e4ada08216bf2ed40d94782e3558deca45501b877b0f5cd10f272b602e71e00b79bfabc1e22a752201b06909a07a8a559cc64e05a1ec95d613c05ca97048f0e0b3a9e7f227d86ea865a7dae039ebf0a093ae4ad6a43b61c62373b18e0d06d56fc9ed9654a8b2a2363566c56f6e2d51fdaf624f51fb7e715f469fe22b995ef60d1106c9784278e19c41034fe9cb05b81a501ff2dc422704a9a49dc0cddf62728e50d850700000000000000ded19e7a71300635e2ef5f9955be8ae4d7e8319077687c955ba12db3d6068545f17b714ecfa1b5c69c25fbe4e279e91d2d19a72452f4719814831e3ae4a05976a45f955d4bd6ea0d6fda797f3f215e799787907e063f000000000000007bd778e426d04e4562cb31b61093f5ee0e8a38fb8e58b498e2577117b2854f12aa92588d6a7f9368aae35de3b965a1a30f44520f783718b4c7cfa163c1acbda149e3664ab608b2a3dd2d4331b7b8042ab5c5227d9ed2f4c6eb8f4f383ad08bfa72dcc6f944a8f0edb37ba65c527e2cbc4e45516a42cbaf236fedd66cdf6c0c4068b8fb5880fa01c9c5aad3d556efecd55271893f374fc36495831f00a17190ef9b879de707b648f9e43689638507afedebaeef99404bcd58950b9d1a5ae1ddcdd0882ef725e03ac1c43ddaea9a7726b836cb64d363ae7062d8a539d16471d7160d7bc1f8707c9aa77240189393eea889ac19a4958c56e2fdc38a7e264e6effacb0202a22a505003a6fe2352fee85cebca1d8706d00f2be8826b261b5fe6ee75fa8fa38984445e1cd4c382cf2cfe14d7c542b14a637d05e729cde31f6ceac712394137e2bb408f61d9972173b295bab2a74564236b6b6e441eeb835659caaa54404fd4706d32bbf981ced48c6e82f9e9cede593c8e063a9a789ae38c47ff9d14cd855d6eb72ea7009efd3ce318aa8c96d7d6e82925d10090c04642af652ddd9732fd01f8cddf759cc9f79308a43588df227d79f7db8750d4498be9cd4eeaf2b12435704e67c156aa74eba00bdd241f7d23652895ea54743a12ffeb606cfaae88d14400cd230d55e112891ebc96ac90183be301564d7d2fdf3d4bb7160ea889fee98a47fb4f816a2fe0cb66809ebf8763306c71203f86d6d85e7c4bd3694f71354367c69b7053ed75ca15cd441e6caebdf4ec15f3eec4f86b1e3506048c52851406897d63fe54db0100ac6eed6cad0733c941c345da94d0c6f4eec92820dab06bc330e74f52c5858fc71862701ec3b690605fb460d1f6e46f99299b4cf3df8d65f87c4a2ef8d05fa4b3841482f4572fe4773cb548ae691f12a219de1902a644f238a9f38d9913790de484a1251e3b8399a10b3e73a4895e2ae57088f38524ebd5fd2be455ceeb16b5bcf5300cfedd1e326a862c0bf3e1bef531a6c7a5895c247b12b39d9952529de825f8a31282be28ede06b7a5062c4dfefee45c52a901504723c59983d8746e84c457f8fdd18f55379189b63e5b9baaadf9a117f98538c1015f5d1da113c74f63b59545658c1df48ff840a691efd84f835a92a0a6ba2d9a4fb09a0577bdb3f888fa5ddc0abe98cdda0f0a165878e19fb99372077a605cc91e91e0bfdbd09c7b6ffa9db203000000bc6d7e572b5b46decb2e28ff71593b5bc58d21f86ed46db4e0f142af07d53c1b405511da1c80d5db99b4957443ecaacfa6e66732bcdd609e9b4531f50f5619571aa738abf0cc61eb8973be69931a6fef7e52a19f70ad318d549b0c8c805922e81e6ada33a4b59a9af96b40e563b6b147d04fec6ef7029ae8246744cf2f803432223529ad6456b188f34c00ce0dc4863beb9be26ae19b590927712db57cde87f9aa13c23fca0d1ccdfb77eb2f987a8905627b294753124a4bd6c03df81bdf014d2ba8ad181e5ee6094635ec64f04d1932359bca717bf00101e06e23fd6aa73eecca651471d875b088b4fa5a4765a9ac30725ac4032cfa77ed55229d5efff09463913195d92c4956833f2c3132a9c08588882624839502b8e83b9f700fc95d38891c25cc0e47f5865005403907d75916a5b31694f627cd90dfa2878a6044b6283febda431180c84caf8b2dc73ea016124c668e9d650449c9d272b075aaa4fc2174ebc560c10db6a6c427086a498456b8a9adc05a67389e00d2dc429a865861fe241224d9d200e92dbb8605f76f347ea4bed15a0ebae4f434fad2069ee387465f96efd2d52affc44ab011b6aa8004393d59b7ef6fb0f13568eb20fb47d9007ca13267233b6862426565b75018d3bb63912d87053ed33ffd87c48ba6bf1d8c1c2fa7103b527077a83d00ffc5cb75a76bf8861090ff984a4de3354c0bf35719f5ffe3c2fb11035ec8a525e7f73997e337b195c2ef4f36ecf498b939d47297bec7b41480c8ccb6736e523c42ce4016caf7f7883ab62b44cbfbed0e4a621d44c67027f1b5be2cec6f086c4a73148f05c0a08046d1cb991fe11c43bbaa28e0746ff121cfbae5e6c9c04a2794019bafe704e058e6020dfdce967a6b86b569b8721fc172f9ffbe9a77e70e7a998772b6de720230a40b7a5796af6188c800b7fa06c54dd6be660a050781f8e03edae98532fef635dee9917145d831519e4b1e432ad926225bc4922214658cd0615760e1aa90b1c371811e475cbb69a3ee5392336afd2b8accfc204754ef95b362b0b2a229f1857a118c74cde213571b42f3a6340cd0b165712d7b47532e65a299d2d0c9a5661adfac383b8bd2a3fa625fec436516a9147be525f05577e485dd3d70076d94d2fddfee253963e4d7f9e9af4b3948a6757033ab65cbaabe09e4c2ee4e2803b97c84a109a4aa82ed72a1994c7ac159e7e6f5c26c11728ef65503127866a4c668379f82e8db5b8934f479aaf5df687bcc7933633471ab79443d69740cd880a5375e5ece1b05c41ccb70c7ef718fcb3667260f93b4c24478ed1c2112d3fa959b421c7e4e8bd75efc1014f6c8f69b1dd7993c4d04700a475118536de33b142f1f6b21a349527ffc7ef678a7b567c78192d0cf1c1ef95bb2665eaca4f2e63a0c8ed6d5955b26931d98b8b190c36b54c6f8ae670e706a97965dec5881b070fb1341aa47ee181da6f85681c21b1bad7f8191881d920983c2ff0e523adaf3123b0773d561859a54a6a77c0eccccfef8abb808120ce27c43476b1c978985ae42c680147f092502bbb1f0e37570f876db7215b68ff453eee673519cb1d0adfcfcc477ed5663955e7d20228d0bdcb9a5a855c6a7eac601c79d91ba01f1d8575b721951e908fa72c295dcea1eb57531748875713cc6a32b3712e701b22b15d3e53337fff2271ce43c8023cab1c26130b017949a16e213e8186e6df3a1b7ba3dd63c668c3fa6542133cd30546fe519ee1dcb40f487066d2e6118e8f96705abe25f288789f38bcf8eb695e16a2c00e61f5ad1593d3c33e150ecf1d6f5a561b9698bca30a19cb71572146ff2dc771b5ae9f0e26ef2491f93d8605df6d849f4cce05e4687a5a4ed4cafb51ee94ed070aa9bbc9ea3edcbe457b518cebfa3d206dac8ec464c9a4ebc74bd951e6c38f197a915fa7b25d9d82fc2fccc36c782a249e79d73be2fa17b5929c723b88cda6b7b5e09e988ce68714fb650d8c394ca3608f101a9fb203a4c85273609343264b8e0dffd91be57f04ad2b845ac0a3b525a5160dbfd1e467f55ffb4f2543acb63855434ba7e6721aaa18c7497a6966809c0732f72a23f0de99e285a798cdfd6a59324a0969860715a06e99b338aaf99aa88d2198b99970f7d5efb123c4a66dc05c4d8cc9a53eff3bdf01a1a3202e63fe4f79a634279d95a574921f9f25466f47f59b230dbc34fd205ba57815f26e7083bd90419e21eb643f5ca893e2405118d5d6ac3dc2bdf5974cec29c824826c8197674096aa911d04fad7d149d82f6aa32c4a07ab2dcaceb575c83969e34410c4448b6cae5282cb5ca2449185985f68f66831f1eda1a722e1d036565034bf340c02999eb334ae5b79b2ca556511c2490413dd3d551a47e6a10d802d4effa55b4284c5967a479509f4efc41668e40573e6b7054f8ba005efb1fc7ca4ad7b67034fd0e4a52a2d8c78b6814560231b643df0e010422d215c73af5159d2dd51bf805b5d3642a21161e99d7966b7cfb09b1b15a63005b5dc86799b860fd048e130f084c430127494e31678f31daacb2ce8befe6e50dffd7e466448a1db97ad21086ef7cd69241ca9e49b6f18ac0f72ebec5b326ae8ffa38e7137325290fb8a60964f99893cb9924f514d9c17a79a4fbaad0b0bca44502c0ff8b7bfd4f939c6e6edb33e765a6f066a4b2a191b815ed216864e2a9fb5d29de541a092ce67e32093cf3e8d88617f77e37104a7812d056c449d299e5ae7548a1513333870bd74012efbf125b269488ed1f64223d16b2cbc13646ef03e4c016fdc2e68990e6a657600a5730169b33da458a5d736b65bcef0513a5bcd5106a44d33f5c1367e51bfc11c89386c4e492707db87887e5b86c1dba5538fbf5391f5f450a9064b6dfb04f5e7a462277cbf6810e1adf7d64acba3d5e296f5c868cac1cfd76016ca31f52d1169826cf2b4dc548fa348c4c877f9ab4c5cd8fe90452d486d455f3312fa90d3cf031abb0c9ce4fe21496de73c4453770625096a76e7ec42de4e1d12074c68d26a2a143bc762209e77244fb62b8660a62251490e0e68ffc578d27c943632f5462ffe56a0811757d7a2a9ad5c690fd7a2118b5a9d0b266493cef716ef8308d61f4d4c8f2947599294b98f0664c7ba67d5080a67d01dd227e02ed92ac5e06a3a10fed4ea3ea109bf0f23ea44c108a31c56a82c296522328198f30f528927b59a6b38a0738bc055559b83f5be231a9137f16d4fd49611fd0f205afaad2ebe2487abd230a3de428529e18bdf20c9fe6e856607cfa83e5ba0d3eed7f6ab508358604a8e762553a884e07ec2a3b60adf543", @ANYRES64=r6, @ANYRESHEX, @ANYRES32=r5, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r4], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x8, 0x0, {0x5, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x20000000, 0x7, 0x1, 0xfffffffffffffffe, 0xa4d]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0xb, 0x4, 0x0, 0x2, 0x0, 0xd71]}, {0x9, @usage=0xe1, r9, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x487, @usage=0x7, 0x2, 0x3, [0xfff, 0xb74, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r3}, r6, 0x6, @inherit={0x88, &(0x7f0000000100)={0x4645e2ae752c5674, 0x8, 0x7, 0x1, {0x9, 0x20, 0x0, 0x7, 0x2}, [0x3, 0x4, 0x15, 0x6, 0x0, 0x1, 0x0, 0x1]}}, @devid=r9}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000400)={{}, r6, 0x8, @unused=[0x1, 0xa994, 0x804, 0x4], @name="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"}) [ 2169.526136][T16299] __alloc_pages+0x102/0x320 [ 2169.526157][T16299] alloc_pages_vma+0x513/0x680 [ 2169.552143][T16299] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2169.552207][T16299] do_anonymous_page+0x16e/0x8a0 [ 2169.562698][T16299] handle_mm_fault+0x98f/0x1a50 [ 2169.562720][T16299] ? follow_page_mask+0x93f/0x1040 [ 2169.562739][T16299] __get_user_pages+0x32b/0xbc0 [ 2169.562760][T16299] get_user_pages_unlocked+0x175/0x630 [ 2169.562784][T16299] ? gup_pte_range+0x429/0x620 [ 2169.562830][T16299] __gup_longterm_unlocked+0x47/0x100 [ 2169.562850][T16299] internal_get_user_pages_fast+0x763/0x860 [ 2169.562931][T16299] get_user_pages_fast+0x5d/0x80 [ 2169.562958][T16299] iov_iter_get_pages+0x199/0x7e0 [ 2169.562984][T16299] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2169.563077][T16299] ? mempool_alloc_slab+0x16/0x20 [ 2169.563116][T16299] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2169.563249][T16299] ? bio_alloc_bioset+0x402/0x480 [ 2169.563272][T16299] iomap_dio_bio_actor+0x673/0xb50 [ 2169.563372][T16299] iomap_dio_actor+0x26e/0x3b0 [ 2169.563395][T16299] iomap_apply+0x1df/0x400 [ 2169.563418][T16299] __iomap_dio_rw+0x62e/0xa60 [ 2169.563442][T16299] ? __iomap_dio_rw+0xa60/0xa60 [ 2169.563522][T16299] iomap_dio_rw+0x30/0x70 [ 2169.563546][T16299] ext4_file_read_iter+0x21a/0x290 [ 2169.563563][T16299] aio_read+0x1c1/0x280 [ 2169.563704][T16299] ? should_fail+0xd6/0x250 [ 2169.563725][T16299] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2169.563747][T16299] io_submit_one+0x7fb/0x1350 [ 2169.563773][T16299] __se_sys_io_submit+0xf5/0x260 [ 2169.563892][T16299] __x64_sys_io_submit+0x3f/0x50 [ 2169.563917][T16299] do_syscall_64+0x3d/0x90 [ 2169.563939][T16299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2169.563991][T16299] RIP: 0033:0x4665e9 [ 2169.564002][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.564019][T16299] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2169.564036][T16299] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000000c0), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/91, 0x5b}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/203, 0xcb}, {&(0x7f0000000a80)=""/221, 0xdd}], 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="24000000090000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x2) mkdir(&(0x7f0000000c80)='.\x00', 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r2, 0xbf853000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2169.564048][T16299] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2169.564059][T16299] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.564069][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.765937][T16299] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) fallocate(r2, 0x20, 0x3fb, 0xffffffff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:32 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x24, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="8a82a0c2e966f1a7a788a152471923550d9bd06082bbcf72b74a", 0x1a, 0x100000001}], 0x11080, &(0x7f0000000340)={[{@journal_ioprio}, {}, {@noauto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@data_journal}, {@mblk_io_submit}], [{@smackfshat={'smackfshat', 0x3d, '/dev/snd/seq\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_gt={'fowner>', 0xee01}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000440)={@desc={0x1, 0x0, @desc1}}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r4, &(0x7f00000004c0)='./file0\x00', 0x600800, 0x80) 10:52:32 executing program 0 (fault-call:6 fault-nth:50): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:32 executing program 5: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) tkill(0xffffffffffffffff, 0x36) [ 2169.982350][T16346] FAULT_INJECTION: forcing a failure. [ 2169.982350][T16346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2169.995611][T16346] CPU: 0 PID: 16346 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2169.995638][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.995649][T16346] Call Trace: [ 2169.995655][T16346] dump_stack_lvl+0xb7/0x103 [ 2169.995756][T16346] dump_stack+0x11/0x1a [ 2169.995769][T16346] should_fail+0x23c/0x250 [ 2169.995791][T16346] __alloc_pages+0x102/0x320 [ 2169.995818][T16346] alloc_pages_vma+0x513/0x680 [ 2169.995837][T16346] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2169.995858][T16346] do_anonymous_page+0x16e/0x8a0 [ 2169.995920][T16346] handle_mm_fault+0x98f/0x1a50 [ 2169.995938][T16346] ? follow_page_mask+0x93f/0x1040 [ 2169.995963][T16346] __get_user_pages+0x32b/0xbc0 [ 2169.995983][T16346] get_user_pages_unlocked+0x175/0x630 [ 2169.996004][T16346] ? gup_pte_range+0x429/0x620 [ 2169.996090][T16346] __gup_longterm_unlocked+0x47/0x100 [ 2169.996112][T16346] internal_get_user_pages_fast+0x763/0x860 [ 2169.996160][T16346] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2169.996192][T16346] get_user_pages_fast+0x5d/0x80 [ 2169.996214][T16346] iov_iter_get_pages+0x199/0x7e0 [ 2170.104439][T16346] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2170.109548][T16346] ? mempool_alloc_slab+0x16/0x20 [ 2170.114625][T16346] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2170.119984][T16346] ? bio_alloc_bioset+0x402/0x480 [ 2170.125011][T16346] iomap_dio_bio_actor+0x673/0xb50 [ 2170.130166][T16346] iomap_dio_actor+0x26e/0x3b0 [ 2170.134912][T16346] iomap_apply+0x1df/0x400 [ 2170.139313][T16346] __iomap_dio_rw+0x62e/0xa60 [ 2170.143986][T16346] ? __iomap_dio_rw+0xa60/0xa60 [ 2170.148848][T16346] iomap_dio_rw+0x30/0x70 [ 2170.155264][T16346] ext4_file_read_iter+0x21a/0x290 [ 2170.160797][T16346] aio_read+0x1c1/0x280 [ 2170.164976][T16346] ? should_fail+0xd6/0x250 [ 2170.169469][T16346] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2170.174476][T16346] io_submit_one+0x7fb/0x1350 [ 2170.179179][T16346] __se_sys_io_submit+0xf5/0x260 [ 2170.184111][T16346] __x64_sys_io_submit+0x3f/0x50 [ 2170.189043][T16346] do_syscall_64+0x3d/0x90 [ 2170.193444][T16346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2170.199322][T16346] RIP: 0033:0x4665e9 [ 2170.203195][T16346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.222784][T16346] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2170.231186][T16346] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2170.239139][T16346] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2170.247093][T16346] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.255065][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2170.263017][T16346] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:32 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = dup3(r1, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x8001, 0x400) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000100)={0x7da52d81, 0x392}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x1000000000000def) preadv(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x11) 10:52:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) 10:52:32 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/133, 0x85}], 0x9, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe8}, 0x10040) prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0xfffffffffffff000, 0x0, 0xad75}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x9, 0x1, 0x0, 0xb686, 0x22098, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x8000, 0x6, 0x1, 0x9, 0xfff, 0x2, 0xa0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:33 executing program 0 (fault-call:6 fault-nth:51): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f00000000c0)=""/88, 0x58}], 0x4, 0x0, 0x2) 10:52:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2170.657437][T16383] FAULT_INJECTION: forcing a failure. [ 2170.657437][T16383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2170.670709][T16383] CPU: 0 PID: 16383 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2170.670732][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.670743][T16383] Call Trace: [ 2170.670751][T16383] dump_stack_lvl+0xb7/0x103 [ 2170.670773][T16383] dump_stack+0x11/0x1a [ 2170.670788][T16383] should_fail+0x23c/0x250 [ 2170.707394][T16383] __alloc_pages+0x102/0x320 [ 2170.712003][T16383] alloc_pages_vma+0x513/0x680 [ 2170.712035][T16383] do_anonymous_page+0x16e/0x8a0 [ 2170.712052][T16383] handle_mm_fault+0x98f/0x1a50 [ 2170.712067][T16383] ? follow_page_mask+0x93f/0x1040 [ 2170.712088][T16383] __get_user_pages+0x32b/0xbc0 [ 2170.712112][T16383] get_user_pages_unlocked+0x175/0x630 [ 2170.742045][T16383] ? gup_pte_range+0x429/0x620 [ 2170.746807][T16383] __gup_longterm_unlocked+0x47/0x100 [ 2170.746913][T16383] internal_get_user_pages_fast+0x763/0x860 [ 2170.746935][T16383] get_user_pages_fast+0x5d/0x80 [ 2170.746956][T16383] iov_iter_get_pages+0x199/0x7e0 [ 2170.746981][T16383] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2170.773072][T16383] ? mempool_alloc_slab+0x16/0x20 [ 2170.778193][T16383] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2170.778224][T16383] ? bio_alloc_bioset+0x402/0x480 [ 2170.778295][T16383] iomap_dio_bio_actor+0x673/0xb50 [ 2170.793725][T16383] iomap_dio_actor+0x26e/0x3b0 [ 2170.793749][T16383] iomap_apply+0x1df/0x400 [ 2170.793768][T16383] __iomap_dio_rw+0x62e/0xa60 [ 2170.793786][T16383] ? __iomap_dio_rw+0xa60/0xa60 [ 2170.812479][T16383] iomap_dio_rw+0x30/0x70 [ 2170.817022][T16383] ext4_file_read_iter+0x21a/0x290 [ 2170.817045][T16383] aio_read+0x1c1/0x280 [ 2170.817070][T16383] ? should_fail+0xd6/0x250 [ 2170.830845][T16383] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2170.830940][T16383] io_submit_one+0x7fb/0x1350 [ 2170.840585][T16383] __se_sys_io_submit+0xf5/0x260 [ 2170.840611][T16383] __x64_sys_io_submit+0x3f/0x50 [ 2170.840646][T16383] do_syscall_64+0x3d/0x90 [ 2170.840667][T16383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2170.861055][T16383] RIP: 0033:0x4665e9 [ 2170.861071][T16383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.884632][T16383] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2170.893072][T16383] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2170.893087][T16383] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2170.893099][T16383] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.893111][T16383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2170.893124][T16383] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:33 executing program 5: r0 = gettid() ptrace$setopts(0x4200, r0, 0x1, 0x100044) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x810, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:33 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:33 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0x72, 0x18}, {0x5, 0xd7}, 0x80000000, 0x3, 0x3}) tkill(r0, 0x7) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x4b48, &(0x7f0000000400)={0x0, 0x604a, 0x10ac44687e697c0c, 0x2, 0x2ee, 0x0, r0}, &(0x7f00001d5000/0x4000)=nil, &(0x7f0000034000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r1, &(0x7f00000000c0)=0x3, r2, &(0x7f0000000100)=0x3f, 0x1, 0xc) 10:52:33 executing program 0 (fault-call:6 fault-nth:52): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000480)=0x3, 0x6) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x4c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x71b243e5, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x44}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1e}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:33 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2171.318114][T16420] FAULT_INJECTION: forcing a failure. [ 2171.318114][T16420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2171.331373][T16420] CPU: 0 PID: 16420 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2171.341530][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.351590][T16420] Call Trace: [ 2171.351600][T16420] dump_stack_lvl+0xb7/0x103 [ 2171.351622][T16420] dump_stack+0x11/0x1a 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r1, 0xffffd000) mknodat$null(r0, &(0x7f0000001500)='./file0\x00', 0x10, 0x103) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000100)) preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000380)=""/52, 0x34}], 0x1, 0x10001, 0x1000) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000a40)=""/213, 0xd5}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f00000009c0)=""/75, 0x4b}], 0x6, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000280)=""/85, 0x55}], 0x4, 0x6ce, 0x0) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2171.351676][T16420] should_fail+0x23c/0x250 [ 2171.351700][T16420] __alloc_pages+0x102/0x320 [ 2171.351719][T16420] alloc_pages_vma+0x513/0x680 [ 2171.351742][T16420] do_anonymous_page+0x16e/0x8a0 [ 2171.351760][T16420] handle_mm_fault+0x98f/0x1a50 [ 2171.351778][T16420] ? follow_page_mask+0x93f/0x1040 [ 2171.351811][T16420] __get_user_pages+0x32b/0xbc0 [ 2171.351831][T16420] get_user_pages_unlocked+0x175/0x630 [ 2171.351854][T16420] ? gup_pte_range+0x429/0x620 [ 2171.351928][T16420] __gup_longterm_unlocked+0x47/0x100 10:52:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x110, 0xffffffffffffffff, 0xde82b000) r2 = syz_open_dev$vcsa(&(0x7f00000015c0), 0x5, 0x20000) recvmsg$unix(r2, &(0x7f0000001c80)={&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001680)=""/27, 0x1b}, {&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/195, 0xc3}, {&(0x7f0000001840)=""/91, 0x5b}, {&(0x7f00000018c0)=""/179, 0xb3}, {&(0x7f0000001980)=""/253, 0xfd}, {&(0x7f0000001a80)=""/135, 0x87}, {&(0x7f0000001b40)=""/94, 0x5e}], 0x8, &(0x7f0000001c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/161, 0xa1}, {0xfffffffffffffffd}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000040)=""/73, 0x49}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000300)=""/109, 0x6d}], 0x6, 0x6, 0x5) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000001580)=0x6, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/140, 0x8c}], 0x4, 0xffffff24, 0x9) preadv(r0, &(0x7f00000003c0), 0x0, 0x2, 0x3) [ 2171.351949][T16420] internal_get_user_pages_fast+0x763/0x860 [ 2171.351973][T16420] get_user_pages_fast+0x5d/0x80 [ 2171.352065][T16420] iov_iter_get_pages+0x199/0x7e0 [ 2171.352089][T16420] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2171.352122][T16420] ? mempool_alloc_slab+0x16/0x20 [ 2171.352143][T16420] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2171.352166][T16420] ? bio_alloc_bioset+0x402/0x480 [ 2171.352187][T16420] iomap_dio_bio_actor+0x673/0xb50 [ 2171.352279][T16420] iomap_dio_actor+0x26e/0x3b0 [ 2171.352456][T16420] iomap_apply+0x1df/0x400 [ 2171.352476][T16420] __iomap_dio_rw+0x62e/0xa60 [ 2171.352495][T16420] ? __iomap_dio_rw+0xa60/0xa60 [ 2171.352516][T16420] iomap_dio_rw+0x30/0x70 [ 2171.352536][T16420] ext4_file_read_iter+0x21a/0x290 [ 2171.352625][T16420] aio_read+0x1c1/0x280 [ 2171.352648][T16420] ? should_fail+0xd6/0x250 [ 2171.352680][T16420] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2171.352704][T16420] io_submit_one+0x7fb/0x1350 [ 2171.352729][T16420] __se_sys_io_submit+0xf5/0x260 [ 2171.506758][T16420] __x64_sys_io_submit+0x3f/0x50 [ 2171.506837][T16420] do_syscall_64+0x3d/0x90 [ 2171.506857][T16420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2171.506883][T16420] RIP: 0033:0x4665e9 [ 2171.506895][T16420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.506909][T16420] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2171.506925][T16420] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2171.506935][T16420] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2171.506945][T16420] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.506955][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:52:34 executing program 5: r0 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x100, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) write$sndseq(r4, &(0x7f0000000340)=[{0x3f, 0x8, 0x1, 0x5, @time={0xfffffffb, 0x6e}, {0xfc, 0x4e}, {0x5, 0x6}, @queue={0x1, {0x7753, 0x7}}}, {0x5, 0x40, 0x70, 0x20, @tick=0xffffff39, {0xa5, 0x41}, {0xb6}, @control={0xc0, 0x52af, 0x3f}}, {0x1, 0x1, 0x7f, 0x9, @tick=0x148e, {0x1f, 0x5}, {0xff, 0x4}, @ext={0x73, &(0x7f0000000180)="b63e34a16b6d3e00b867ca4b85ebe55c66f7482fbaaa78b18ea5eee9b1e40cf0b035367123a772758d4798ba82fc9fa25ae6c8a18bc48c4f9be43bb6bcd3118c1124c906acefcf7af68eab6c8b663f0f9283fcde2a27cc29015c90191de0a4f6fca28ffc1512f36aa3c6600ec2c1bfc3568d76"}}, {0x2, 0x1f, 0xfc, 0x7, @tick=0x8, {0x0, 0xbf}, {0x3, 0x2}, @addr={0x0, 0x7f}}, {0x4a, 0x9, 0x5, 0x92, @tick, {0x6, 0xff}, {0x20, 0x1}, @control={0xff, 0x1, 0x1f}}, {0x2, 0x8b, 0xff, 0x20, @tick=0x7fff, {0x80}, {0x0, 0x3f}, @connect={{0xde, 0x1}, {0xa7, 0x3}}}, {0x1f, 0x3, 0xe0, 0x0, @time={0x7d, 0xd0}, {0x2, 0x1}, {0x9}, @raw32={[0x0, 0xfffffffc, 0x3d6]}}], 0xc4) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:34 executing program 0 (fault-call:6 fault-nth:53): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000000240)=""/246, 0x41}, {&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f00000000c0)=""/93, 0x5d}], 0x4, 0x0, 0x0) 10:52:34 executing program 3: r0 = gettid() clock_gettime(0x0, &(0x7f0000005a40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/142, 0x8e}, {&(0x7f00000007c0)=""/101, 0x65}], 0x5}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/125, 0x7d}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000c00)=""/243, 0xf3}, {&(0x7f0000000d00)=""/251, 0xfb}, {&(0x7f0000000e00)=""/176, 0xb0}, {&(0x7f0000000ec0)=""/102, 0x66}], 0x8}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000002240)=[{&(0x7f0000001040)=""/231, 0xe7}, {&(0x7f0000001140)=""/78, 0x4e}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/63, 0x3f}, {&(0x7f0000002200)=""/64, 0x40}], 0x5, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/139, 0x8b}, {&(0x7f0000003540)=""/11, 0xb}], 0x3, &(0x7f00000035c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000003a80)=[{&(0x7f00000036c0)=""/31, 0x1f}, {&(0x7f0000003700)=""/99, 0x63}, {&(0x7f0000003780)=""/96, 0x60}, {&(0x7f0000003800)=""/43, 0x2b}, {&(0x7f0000003840)=""/230, 0xe6}, {&(0x7f0000003940)=""/59, 0x3b}, {&(0x7f0000003980)=""/213, 0xd5}], 0x7, &(0x7f0000003b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003c40)=""/106, 0x6a}, {&(0x7f0000003cc0)=""/50, 0x32}, {&(0x7f0000003d00)=""/135, 0x87}], 0x3, &(0x7f0000003e00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003ec0), 0x6e, &(0x7f0000005400)=[{&(0x7f0000003f40)=""/49, 0x31}, {&(0x7f0000003f80)=""/196, 0xc4}, {&(0x7f0000004080)=""/180, 0xb4}, {&(0x7f0000004140)=""/229, 0xe5}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/197, 0xc5}, {&(0x7f0000005340)=""/192, 0xc0}], 0x7, &(0x7f0000005480)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000005580)=@abs, 0x6e, &(0x7f00000056c0)=[{&(0x7f0000005600)=""/132, 0x84}], 0x1, &(0x7f0000005700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x8, 0x3, &(0x7f0000005a80)={r1, r2+10000000}) tkill(r3, 0x28) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x1, @tick=0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000005ac0)={0x8, 0x2, 'client0\x00', 0x2, "7b921714e703b575", "b2f61d681f67826a607ba14d3e0a88945bcce2576f54a96653e61a0b9fa9bed5", 0xfffffeff, 0x7ff}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/96, 0x60}], 0x5, 0xd9f, 0x0) tkill(r0, 0x7) r7 = syz_mount_image$iso9660(&(0x7f0000005b80), &(0x7f0000005bc0)='./file0\x00', 0x3, 0xa, &(0x7f00000061c0)=[{&(0x7f0000005c00)="db52b3fd3f078081eb83fb2b0232f62bfb7f50b4bafcfd7556dc178bace405829dfc6364d7a6e266d5abeb5c99735af434f3b44ed262feb3628c1b06d1ea6ef77a2f424d17fbc581acc4389a736b7ddc6d7e0dac66a851", 0x57, 0xff}, {&(0x7f0000005c80)="6c0522804f7d59f94f5092961468916319ebb5f1458687748ea1773f48a7e7de6c40201846edad72f3bd9c1c25f3800f75e08a80122ea0064fa9d94e2729daa092d898dc4ca2e9abcb24bc9af6730bb0e4a233192c5f4d4e5e9c4f282fa8f1b91c28d3ddace2181a7b126469932fc7d67b5692f716928405d3c58b4cb2d17339aa76de50cef189e3ae19d5d9c687302d810bb1f94702e32c43b56e2a6b450780c0d395b65e03e8cb2145ce99904871fe0e6ef9482efdf37bf0bc895a0afb", 0xbe, 0x7}, {&(0x7f0000005d40)="0982611bfb6dcc4dc2c8217df61ba79a302adca4773b64ad50b67f99e4e9f39a42bf610be8f8e67401daa9f67ea7bb9ff1601b2c40b401eb9a96ee5241aac3dca8938f6d3bd97a4301d990bfef160da46f7ae3484b72d1d50468b7264cf9972c5fd68ea5cb316c0cf8f159affffd636cbf73", 0x72, 0x8}, {&(0x7f0000005dc0)="07ff2fd0fd529a1209c835fa3c317d3bd3303b3393850fec991a7379325503fd42d42967a11faa1a30a349b13dad4d161d11d7b8cabc6e720c39c818de6729d08fa4d81730533022f333076e1e0f3a144045df5c40c2e8dffe89e4c31e846545eb1f96b17d5419", 0x67}, {&(0x7f0000005e40)="a6fd5d1b67c4890b5b2ea89bc13faeed0113b2d279b0bb3753b7924e48d213f8afb461f5d62670a18730dfa1f3846e472806e13d477264653926196cfab44b14c16f04b0aaa2c9038b929163f43beacb3da558b6fcaa7be6c220734b9e286bb734e1c5926ea2f565c0d91dea6c85c6865e4983778d2253edb487d64f8e34a80b442ff99caada9accf92b12391ac1d203577af06b88f24d155e32401fa63352b38f9d44757d3c7d64fbeb08fcf022", 0xae, 0x2}, {&(0x7f0000005f00)="5eb4e20269e5e86a050f46be94615bbfdf58e6a5328fbe44c1f0865534f48951f7d011aa1be400f76534045aaadf058463984381d029", 0x36, 0x2}, {&(0x7f0000005f40)="b4d21e77398c65d18bcaaea05d14f771f6d0c2cacb", 0x15, 0x2}, {&(0x7f0000005f80)="3ce25797b779443ba135ed734923ad25a9411dc9ea2d290ca8d2c9d8bc6514d41ec6c922ee0b6cb5763f9311148dbac95e35cf59346348f86cab671d525c2269deb659c8efc4843f582807735db3a9c2d57b14afa46724f5", 0x58, 0x4e7df1}, {&(0x7f0000006000)="d5d2d0f87080676e423a39e6d9521448276a016da8caee1dde637bc6c998565cfbae928093cd340eb88d1e2112a747043124e6e92faded07be4d6c605a343d4d268c96b62700590d8f7b7538ca9c823e3c27b82f4c6b59527c4c2e34ddd7e54b264b87a8b87685457cc0348a752dfc7f468da3894f5a3dd01dfddfb73789556c62a90ed682b533568b995e3e19123b800c46f006b2fc4878feecfe43e0f660123a451f3764e975c4e30a5342280689f875a9", 0xb2}, {&(0x7f00000060c0)="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", 0xfa, 0x2}], 0x4, &(0x7f00000062c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@map_off}, {@session={'session', 0x3d, 0x47}}, {@map_normal}, {@session={'session', 0x3d, 0x2b}}], [{@context={'context', 0x3d, 'user_u'}}]}) openat(r7, &(0x7f0000006340)='./file0\x00', 0x40000, 0x6) [ 2171.506974][T16420] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:34 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) fstat(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2171.751748][T16470] FAULT_INJECTION: forcing a failure. [ 2171.751748][T16470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2171.751811][T16470] CPU: 0 PID: 16470 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80800) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0xda2, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff444c0d000025003950323030302e75"], 0x15) [ 2171.751833][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.751842][T16470] Call Trace: [ 2171.751848][T16470] dump_stack_lvl+0xb7/0x103 [ 2171.751870][T16470] dump_stack+0x11/0x1a [ 2171.751892][T16470] should_fail+0x23c/0x250 10:52:34 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:34 executing program 0 (fault-call:6 fault-nth:54): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:34 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2171.751918][T16470] __alloc_pages+0x102/0x320 [ 2171.751973][T16470] alloc_pages_vma+0x513/0x680 [ 2171.751993][T16470] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2171.752017][T16470] do_anonymous_page+0x16e/0x8a0 [ 2171.752034][T16470] handle_mm_fault+0x98f/0x1a50 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x6a0000, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/206}, {&(0x7f0000000040)=""/34}, {&(0x7f0000000200)=""/4096}], 0x1179, 0xfffffffc, 0xffffffff) [ 2171.752052][T16470] ? follow_page_mask+0x93f/0x1040 [ 2171.752141][T16470] __get_user_pages+0x32b/0xbc0 [ 2171.752162][T16470] get_user_pages_unlocked+0x175/0x630 [ 2171.752228][T16470] ? gup_pte_range+0x429/0x620 [ 2171.752251][T16470] __gup_longterm_unlocked+0x47/0x100 [ 2171.752272][T16470] internal_get_user_pages_fast+0x763/0x860 [ 2171.752323][T16470] get_user_pages_fast+0x5d/0x80 [ 2171.752347][T16470] iov_iter_get_pages+0x199/0x7e0 [ 2171.752372][T16470] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2171.752394][T16470] ? mempool_alloc_slab+0x16/0x20 [ 2171.752477][T16470] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2171.752503][T16470] ? bio_alloc_bioset+0x402/0x480 [ 2171.752526][T16470] iomap_dio_bio_actor+0x673/0xb50 [ 2171.752574][T16470] iomap_dio_actor+0x26e/0x3b0 [ 2171.752616][T16470] iomap_apply+0x1df/0x400 [ 2171.752638][T16470] __iomap_dio_rw+0x62e/0xa60 [ 2171.752658][T16470] ? __iomap_dio_rw+0xa60/0xa60 [ 2171.752700][T16470] iomap_dio_rw+0x30/0x70 [ 2171.752721][T16470] ext4_file_read_iter+0x21a/0x290 [ 2171.752740][T16470] aio_read+0x1c1/0x280 [ 2171.752763][T16470] ? should_fail+0xd6/0x250 [ 2171.752833][T16470] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2171.752911][T16470] io_submit_one+0x7fb/0x1350 [ 2171.752985][T16470] __se_sys_io_submit+0xf5/0x260 [ 2171.753054][T16470] __x64_sys_io_submit+0x3f/0x50 [ 2171.753077][T16470] do_syscall_64+0x3d/0x90 [ 2171.753095][T16470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2171.753144][T16470] RIP: 0033:0x4665e9 [ 2171.753157][T16470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.753173][T16470] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2171.753192][T16470] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2171.753204][T16470] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2171.753214][T16470] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.753224][T16470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.753242][T16470] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2171.955848][T16490] FAULT_INJECTION: forcing a failure. [ 2171.955848][T16490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2172.154354][T16490] CPU: 0 PID: 16490 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2172.154430][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.174653][T16490] Call Trace: [ 2172.174664][T16490] dump_stack_lvl+0xb7/0x103 [ 2172.182504][T16490] dump_stack+0x11/0x1a [ 2172.182552][T16490] should_fail+0x23c/0x250 [ 2172.182575][T16490] __alloc_pages+0x102/0x320 [ 2172.182596][T16490] alloc_pages_vma+0x513/0x680 [ 2172.182617][T16490] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2172.206043][T16490] do_anonymous_page+0x16e/0x8a0 [ 2172.206066][T16490] handle_mm_fault+0x98f/0x1a50 [ 2172.215860][T16490] ? follow_page_mask+0x93f/0x1040 [ 2172.215886][T16490] __get_user_pages+0x32b/0xbc0 [ 2172.215985][T16490] get_user_pages_unlocked+0x175/0x630 [ 2172.231376][T16490] ? gup_pte_range+0x429/0x620 [ 2172.231406][T16490] __gup_longterm_unlocked+0x47/0x100 [ 2172.231426][T16490] internal_get_user_pages_fast+0x763/0x860 [ 2172.247469][T16490] get_user_pages_fast+0x5d/0x80 [ 2172.247558][T16490] iov_iter_get_pages+0x199/0x7e0 [ 2172.257511][T16490] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2172.262553][T16490] ? mempool_alloc_slab+0x16/0x20 [ 2172.262579][T16490] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2172.262606][T16490] ? bio_alloc_bioset+0x402/0x480 [ 2172.262630][T16490] iomap_dio_bio_actor+0x673/0xb50 [ 2172.283297][T16490] iomap_dio_actor+0x26e/0x3b0 [ 2172.288064][T16490] iomap_apply+0x1df/0x400 [ 2172.288089][T16490] __iomap_dio_rw+0x62e/0xa60 [ 2172.288112][T16490] ? __iomap_dio_rw+0xa60/0xa60 [ 2172.302068][T16490] iomap_dio_rw+0x30/0x70 [ 2172.306402][T16490] ext4_file_read_iter+0x21a/0x290 [ 2172.306480][T16490] aio_read+0x1c1/0x280 [ 2172.306500][T16490] ? should_fail+0xd6/0x250 [ 2172.306524][T16490] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2172.325280][T16490] io_submit_one+0x7fb/0x1350 [ 2172.330065][T16490] __se_sys_io_submit+0xf5/0x260 [ 2172.330093][T16490] __x64_sys_io_submit+0x3f/0x50 [ 2172.330118][T16490] do_syscall_64+0x3d/0x90 [ 2172.344512][T16490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2172.344541][T16490] RIP: 0033:0x4665e9 [ 2172.344553][T16490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.344567][T16490] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2172.344583][T16490] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2172.390439][T16490] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2172.390454][T16490] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.406359][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0xd9b, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f00000000c0)=""/81, 0x51}], 0x4, 0x0, 0x0) preadv(r3, &(0x7f0000001900)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001740)=""/228, 0xe4}, {&(0x7f0000001840)=""/179, 0xb3}], 0x6, 0x81, 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000000400)="3df31366d3b9becc179638b1581fadec44d96e8f9c31f16863f055ce5a685348c2717dcd572b885b6c0f7f6864454fcfc3d6cf324068775066e2e8bc579f07b58a244a6720be7d426cac9b5abe6d7fa633d71b62cf8d86c6cc6fb6a246fca22cb435f1c9977b1fba94", 0x69, 0x10000, 0x0, 0x2}]) 10:52:34 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0xc9ab) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[r1, r2, r3, r1, r1, r4, r1]}, 0x7) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:34 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2172.406377][T16490] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:34 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x3) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x7) 10:52:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) close(r2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:35 executing program 0 (fault-call:6 fault-nth:55): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:35 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3f, 0x6, &(0x7f0000000740)=[{&(0x7f0000000200)="eba9f00857f030ec046cc41ee29e1ce82b2bf414b38374b2f400d6878e120cb71d82b9a7fa72fd4eaab86a3ce1f5dca0cb759815474c6cd52954e351d7bb", 0x3e, 0x9c}, {&(0x7f0000000400)="6e6c50f8979f71de692ca00a4c3e4aefbee798790d3e395ec4b18e0711079c34b064d02e0fb6326d6ffcfb8ca4a3ab6db9c508916a6c47385bacc831db538301ccb48ca46fa3ad543ea49c4b4806bd403c5f3683bdf418688f1f89e927eade5f334ed8d183a7295a741b05306b6b239ae50d41a53cd7c5cc3351f449d0836108f712", 0x82, 0x9}, {&(0x7f00000004c0)="89b2583b82b0293d4e18e2d1cb646b2576d6ec1ee8401aded97e283acc8b21abdf37cc27b648e57aff698490c34866fe87b8f574646fc7e60771faf30844a85422e3ed015f89b369fb9cca02b767b2f7096f81f424eb4e66e31a0527fd12164c363c8c11387d3ec1cf6d8b5b41e4c49de7f5c9a2e9feec22f17206c31b5bd7", 0x7f, 0x5}, {&(0x7f0000000540)="26407f859d2f64f257b0930dcd34cc6467a1450ef0ef186f873ed9b9730e20c501a942bb2715a016c0714a07b93f1c3b558562ccee40562060651b06f9e5bbaa2addf96ddf7b3c02da8157f011af4dad71b201c50285a6ff984cf8fe79f4699c1a87993d574bfe3c7cba1ff8277a23fecab1a89d9e6de05059164204cc68a7a876e9616a366275fe79e0a42d2e9aa5bbc1b9abf1d31f66a8e64d2d82285c2b9b2e", 0xa1, 0xffffffffffffffff}, {&(0x7f0000000600)="d2c70439c8da147d998a8695e5ead74f7801d1e68cc728e8674709d7e680cde3273e3fd001ca646c71d734c5763a193cbcdf166eebf52acf2526e752c7209799c28b546c3869597560aec262e9004a0353e2007a5ad53ea87ca9f251d1be2a99c28ea71e4b5d2e8e2bad43a380ce80db82dc882280b741165ca11b967f012426a5c193616d811d13ac61adf8090b7cb68ce7e21d008c89117eda461dc5fb093a97da5d32c6e23e18962ef2057eed1a6b0722623d4ff93c6b594a7ad340be04c44adaff0f81919d4c7f57c74c0d7e6bab79b6ab9cca2691b88fb939070ab418ac05de73df1feca9742a7605dada0fca3d1e7cef753458e6", 0xf7, 0x5}, {&(0x7f0000000700)="cf3806d717aa133b8acf7d61296052ba36ff13d8f770a4eb74f98bda30c36cabb60ba06d4ba16aedd020fa21465d8663154d6dda977a53b1", 0x38, 0x7}], 0x2000020, &(0x7f0000000800)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@nodots}, {@nodots}, {@dots}], [{@obj_role={'obj_role', 0x3d, '[('}}, {@hash}, {@subj_type={'subj_type', 0x3d, '/proc/sysvipc/msg\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sysvipc/msg\x00'}}, {@audit}, {@subj_user={'subj_user', 0x3d, '/)'}}, {@obj_user={'obj_user', 0x3d, '/proc/sysvipc/msg\x00'}}]}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000900)={r0}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2172.632907][T16526] FAULT_INJECTION: forcing a failure. [ 2172.632907][T16526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2172.646168][T16526] CPU: 0 PID: 16526 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2172.646195][T16526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.646204][T16526] Call Trace: [ 2172.646254][T16526] dump_stack_lvl+0xb7/0x103 [ 2172.646276][T16526] dump_stack+0x11/0x1a [ 2172.646293][T16526] should_fail+0x23c/0x250 [ 2172.646315][T16526] __alloc_pages+0x102/0x320 [ 2172.646336][T16526] alloc_pages_vma+0x513/0x680 [ 2172.646355][T16526] do_anonymous_page+0x16e/0x8a0 [ 2172.646377][T16526] handle_mm_fault+0x98f/0x1a50 [ 2172.646466][T16526] ? follow_page_mask+0x93f/0x1040 [ 2172.646489][T16526] __get_user_pages+0x32b/0xbc0 [ 2172.646514][T16526] get_user_pages_unlocked+0x175/0x630 [ 2172.717733][T16526] ? gup_pte_range+0x429/0x620 [ 2172.717811][T16526] __gup_longterm_unlocked+0x47/0x100 [ 2172.717832][T16526] internal_get_user_pages_fast+0x763/0x860 [ 2172.717926][T16526] get_user_pages_fast+0x5d/0x80 [ 2172.717946][T16526] iov_iter_get_pages+0x199/0x7e0 [ 2172.717972][T16526] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2172.749018][T16526] ? mempool_alloc_slab+0x16/0x20 [ 2172.749047][T16526] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2172.759439][T16526] ? bio_alloc_bioset+0x402/0x480 [ 2172.759509][T16526] iomap_dio_bio_actor+0x673/0xb50 [ 2172.759536][T16526] iomap_dio_actor+0x26e/0x3b0 [ 2172.774365][T16526] iomap_apply+0x1df/0x400 [ 2172.778784][T16526] __iomap_dio_rw+0x62e/0xa60 [ 2172.778810][T16526] ? __iomap_dio_rw+0xa60/0xa60 [ 2172.778834][T16526] iomap_dio_rw+0x30/0x70 [ 2172.778913][T16526] ext4_file_read_iter+0x21a/0x290 [ 2172.778933][T16526] aio_read+0x1c1/0x280 [ 2172.778957][T16526] ? asm_sysvec_call_function_single+0x12/0x20 [ 2172.808220][T16526] ? io_submit_one+0x635/0x1350 [ 2172.808885][ C1] ================================================================== [ 2172.808895][ C1] BUG: KCSAN: data-race in console_unlock / console_unlock [ 2172.808902][ C1] [ 2172.808906][ C1] write to 0xffffffff8417d940 of 8 bytes by task 16526 on cpu 0: [ 2172.808913][ C1] console_unlock+0x570/0xb30 [ 2172.808918][ C1] vprintk_emit+0x125/0x3d0 [ 2172.808923][ C1] vprintk_default+0x22/0x30 [ 2172.808928][ C1] vprintk+0x15a/0x170 [ 2172.808943][ C1] printk+0x62/0x87 [ 2172.808947][ C1] show_trace_log_lvl+0x587/0x600 [ 2172.808952][ C1] dump_stack_lvl+0xb7/0x103 [ 2172.808957][ C1] dump_stack+0x11/0x1a [ 2172.808961][ C1] should_fail+0x23c/0x250 [ 2172.808966][ C1] __alloc_pages+0x102/0x320 [ 2172.808971][ C1] alloc_pages_vma+0x513/0x680 [ 2172.808976][ C1] do_anonymous_page+0x16e/0x8a0 [ 2172.808981][ C1] handle_mm_fault+0x98f/0x1a50 [ 2172.808986][ C1] __get_user_pages+0x32b/0xbc0 [ 2172.808991][ C1] get_user_pages_unlocked+0x175/0x630 [ 2172.808997][ C1] __gup_longterm_unlocked+0x47/0x100 [ 2172.809003][ C1] internal_get_user_pages_fast+0x763/0x860 [ 2172.809009][ C1] get_user_pages_fast+0x5d/0x80 [ 2172.809014][ C1] iov_iter_get_pages+0x199/0x7e0 [ 2172.809019][ C1] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2172.809024][ C1] iomap_dio_bio_actor+0x673/0xb50 [ 2172.809034][ C1] iomap_dio_actor+0x26e/0x3b0 [ 2172.809039][ C1] iomap_apply+0x1df/0x400 [ 2172.809044][ C1] __iomap_dio_rw+0x62e/0xa60 [ 2172.809048][ C1] iomap_dio_rw+0x30/0x70 [ 2172.809054][ C1] ext4_file_read_iter+0x21a/0x290 [ 2172.809059][ C1] aio_read+0x1c1/0x280 [ 2172.809063][ C1] io_submit_one+0x7fb/0x1350 [ 2172.809069][ C1] __se_sys_io_submit+0xf5/0x260 [ 2172.809074][ C1] __x64_sys_io_submit+0x3f/0x50 [ 2172.809079][ C1] do_syscall_64+0x3d/0x90 [ 2172.809084][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2172.809089][ C1] [ 2172.809094][ C1] read to 0xffffffff8417d940 of 8 bytes by task 16524 on cpu 1: [ 2172.809101][ C1] console_unlock+0x9f5/0xb30 [ 2172.809106][ C1] con_flush_chars+0xc1/0x400 [ 2172.809111][ C1] con_write+0x2a/0x40 [ 2172.809115][ C1] do_output_char+0x47f/0x4f0 [ 2172.809130][ C1] n_tty_write+0x7f8/0xaf0 [ 2172.809135][ C1] file_tty_write+0x409/0x660 [ 2172.809140][ C1] tty_write+0x24/0x30 [ 2172.809145][ C1] do_iter_readv_writev+0x2cb/0x360 [ 2172.809150][ C1] do_iter_write+0x112/0x4c0 [ 2172.809155][ C1] vfs_iter_write+0x4c/0x70 [ 2172.809160][ C1] iter_file_splice_write+0x40a/0x750 [ 2172.809166][ C1] direct_splice_actor+0x80/0xa0 [ 2172.809171][ C1] splice_direct_to_actor+0x345/0x650 [ 2172.809177][ C1] do_splice_direct+0xf5/0x170 [ 2172.809182][ C1] do_sendfile+0x773/0xda0 [ 2172.809186][ C1] __x64_sys_sendfile64+0xf2/0x130 [ 2172.809191][ C1] do_syscall_64+0x3d/0x90 [ 2172.809196][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2172.809201][ C1] [ 2172.809206][ C1] value changed: 0x0000000000008283 -> 0x0000000000008284 [ 2172.809212][ C1] [ 2172.809216][ C1] Reported by Kernel Concurrency Sanitizer on: [ 2172.809224][ C1] CPU: 1 PID: 16524 Comm: syz-executor.2 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2172.809250][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.809259][ C1] ================================================================== [ 2173.132350][T16526] ? io_submit_one+0x3db/0x1350 [ 2173.137269][T16526] io_submit_one+0x7fb/0x1350 [ 2173.137298][T16526] __se_sys_io_submit+0xf5/0x260 [ 2173.137323][T16526] __x64_sys_io_submit+0x3f/0x50 [ 2173.151878][T16526] do_syscall_64+0x3d/0x90 [ 2173.151902][T16526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2173.162336][T16526] RIP: 0033:0x4665e9 [ 2173.162351][T16526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.185818][T16526] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2173.185841][T16526] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2173.185852][T16526] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2173.185862][T16526] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4097, 0x1001}], 0x1, 0xda3, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000200)={r0}) 10:52:35 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) r2 = getpgid(r0) wait4(r2, &(0x7f00000001c0), 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x3, &(0x7f00000005c0)="b848ebf6608ae176a4d77eef4030235c9530c4493be2e24b1f77df31bccc6dba4b26dc01affbcbc6f5e60f9af9ccf2baf4c2c3c1ff6ffd4027d8761d602ac52a6297719b2fa43ec1417e7d64695167f4da7c3d580f72b8f5caa0fdb6facc5a43fab422aa0d53564362801f74e6a832d82c") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x14140, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xd27, 0x4, 0x0, 'queue0\x00', 0x7}) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000400)=""/134, 0x86}], 0x1, 0xd9f, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x101081, 0x2b0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) fallocate(r6, 0x3, 0x201, 0xfffffffffffffe00) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:35 executing program 5: r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/30, 0x1e}}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5909ffffff0501"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time={0x7, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2173.185872][T16526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2173.185889][T16526] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:35 executing program 0 (fault-call:6 fault-nth:56): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:35 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000800)={{r0}, 0x0, 0x10, @unused=[0x100, 0x240, 0xffffffff, 0x6], @devid=r2}) 10:52:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2173.401968][T16558] FAULT_INJECTION: forcing a failure. [ 2173.401968][T16558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2173.401993][T16558] CPU: 0 PID: 16558 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2173.402014][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.402065][T16558] Call Trace: [ 2173.402071][T16558] dump_stack_lvl+0xb7/0x103 [ 2173.402090][T16558] dump_stack+0x11/0x1a [ 2173.402147][T16558] should_fail+0x23c/0x250 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4000010, r2, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0), 0x4, 0xffffffff, 0x0) 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x28000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000640)='./file0\x00', 0xf2, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000680)="84f223fc9ffc0b5a45", 0x9, 0x5}, {&(0x7f00000006c0)="63bb947d99cc1b2760f7342cdbbf4cefea4dc6a88737704f4bcabd7fccfebb6c10d7eb043165bc904d5a3fa93c3489e769dbcbc4d89e6f784317faf161796e756766ac58253f9e3cd9e2adb65f9dd56e3148f16ef74cde98ff4e23e373b933725a8b1af63014d29db1fcd56a3007c7f3ca3ab0a6caa8c998255b46dfdc2f8352bb690aabc18459a0f3868e30874033b89dc2fa72e1103d8a0607949e7c5b26113c72c8ca84e0ce65eac2d8fa89e6a19a33a85dec02eed70cca318ac18fbecbc3f309224d96fe5c51", 0xc8, 0x84}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000008c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/242, 0xf2}], 0x1, 0x2, 0x401) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/102, 0x66}], 0x2, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2173.402207][T16558] __alloc_pages+0x102/0x320 [ 2173.402225][T16558] alloc_pages_vma+0x513/0x680 [ 2173.402247][T16558] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2173.402273][T16558] do_anonymous_page+0x16e/0x8a0 [ 2173.402364][T16558] handle_mm_fault+0x98f/0x1a50 [ 2173.402382][T16558] ? follow_page_mask+0x93f/0x1040 [ 2173.402471][T16558] __get_user_pages+0x32b/0xbc0 [ 2173.402491][T16558] get_user_pages_unlocked+0x175/0x630 [ 2173.402511][T16558] ? gup_pte_range+0x429/0x620 [ 2173.402530][T16558] __gup_longterm_unlocked+0x47/0x100 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000400)="9479a4ce3dd0dea25cb85dcc8ada4ab5baa4a15a8400cf92736fa2c84473f45ec6fd6b09cf862ea5e70e2dd71cf6ccf514159157562257f806653153c45b76885794584e55df18d36e78827433c4a30a78fd4ed4e2ed2ea57a90665b9b7af10f6981cb9111b50da8d609ceb0e2bd7f1df2d36c194bdfec3bf643f73152b1158791c3e54813af129ce037b44f0491156ecc53e6a5ee5ab3796da9156351c096333a6aa57c12df814cda9006b58d149b29a9ac9daed97f885f0b33218a28f16fbf3b2927f5ea7aa81db22ec89304a85ccb43317dde5cd1c5f968fd51dfa7e558172b1e34d1128cde41badb5977dc7877bfc0", 0xf1}, {&(0x7f00000000c0)="2d2555af536fc83bebcd4b62f8c416cd34703250c980762a78a402e153c532abd3bbad339620ec84dc1b28ce35ee71f23184a71fbeb1c83a0eb2eaabe13f4be06774f51f9301fbfe42cf86144b6c6fb947c72a", 0x53}, {&(0x7f0000000500)="2fb3d5cba229849f9bb8ddac7213b16e04a252d8a85ca7a11c921427065e9e06a05068906623b699b2e147738521e44cab56076f6ce85623eaf0346a02a4b6ea6a7e39a8c1b871e9cde7c9e7cf663ce0b1457fb47ff7c66f200236e2d96e75983dc96197ef675701d391f1955a443cae4340e2ef9d63ea007324fa21ee3e27b545", 0x81}, {&(0x7f0000000200)="c13831a32b997c80534b3385d733973601e7", 0x12}, {&(0x7f00000005c0)="092ceb7c9615426870dba87765d0a5433b459536e486e1aba24f11180210d8c22c8a7f09dcab2a806fbd2e930d209839c746ea9d640b32bf00bd1b335b8f0d", 0x3f}, {&(0x7f0000000600)="4aaac5b559c5ea1b4fd8a12eb2d48cc91577af8f76949ea85da55486615896611f5e0c05d7112a8274e5d3f01f5e96fb5f972918d6d7b98246bc36a2296dd988bb4fcfcb0e3a8e7d9c8e620048fca093e3b979ce41cfe4c35cee2c2122a3826775186d301224c74dd36581fde77b41138c62080ae73e2ed9b031194dca3823c6e2ba3ddfbf55e50a22bef8f5144402f0648753fedcf4d94353a659e82293e447fe3d314d0a5f25fe620d8f375619be03e65ce5811ee79750fb9a53fc17ec3e488f1d3383e7d4dbc5aca4ce3acd0a2d64e065e93f2ba5ba3172dbb1cf7521551bc6e210758c9638b7ea3bc1aead879cac13df1510ccb4a9602ded", 0xfa}, {&(0x7f0000000700)="8d2342ef075093d3c5c4a819e6768c0dec4e1ec04412c307386dcf746604c06284e719a757328be8ee7016201d663c91b485bbb7cfb27cce12fdf8cdd7de9807ed92062eaf61aa8f", 0x48}, {&(0x7f0000000780)="84280ffcd5d4419535efe6f0b89317aaa56ac451713a2d243b03772a977bdd97ae08d06c6d020af65d95ac6e2b116697d3e7b0ed6da1c3083e2ab48a3a9b13f97bd9b6b8e88215d039f56bace361a7beb37f669911a7582af7c3265a9e2c", 0x5e}], 0x8) [ 2173.402635][T16558] internal_get_user_pages_fast+0x763/0x860 [ 2173.402659][T16558] get_user_pages_fast+0x5d/0x80 [ 2173.402678][T16558] iov_iter_get_pages+0x199/0x7e0 [ 2173.402697][T16558] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2173.402717][T16558] ? mempool_alloc_slab+0x16/0x20 [ 2173.402769][T16558] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2173.402796][T16558] ? bio_alloc_bioset+0x402/0x480 [ 2173.402818][T16558] iomap_dio_bio_actor+0x673/0xb50 [ 2173.402917][T16558] iomap_dio_actor+0x26e/0x3b0 [ 2173.402938][T16558] iomap_apply+0x1df/0x400 10:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0xc9ab) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) preadv(r3, &(0x7f0000000100), 0x0, 0x5, 0x6) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x71}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x2a, 0x0) [ 2173.402970][T16558] __iomap_dio_rw+0x62e/0xa60 [ 2173.402992][T16558] ? __iomap_dio_rw+0xa60/0xa60 [ 2173.403037][T16558] iomap_dio_rw+0x30/0x70 [ 2173.567577][T16558] ext4_file_read_iter+0x21a/0x290 [ 2173.567602][T16558] aio_read+0x1c1/0x280 [ 2173.567624][T16558] ? should_fail+0xd6/0x250 [ 2173.567644][T16558] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2173.567710][T16558] io_submit_one+0x7fb/0x1350 [ 2173.567772][T16558] __se_sys_io_submit+0xf5/0x260 [ 2173.567793][T16558] __x64_sys_io_submit+0x3f/0x50 [ 2173.601105][T16558] do_syscall_64+0x3d/0x90 [ 2173.601130][T16558] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2173.601152][T16558] RIP: 0033:0x4665e9 [ 2173.601163][T16558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.601177][T16558] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2173.601193][T16558] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2173.601203][T16558] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2173.659245][T16558] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2173.659260][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2173.675189][T16558] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) finit_module(r1, &(0x7f00000000c0)='!,\x00', 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000400)=""/205, 0xcd}], 0x1, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 0 (fault-call:6 fault-nth:57): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:36 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x9, 0x5, 0x1, 'queue0\x00', 0x1ff}) read(r1, &(0x7f0000000080)=""/232, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xbf32fbcaa3731e18) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:36 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) write$sndseq(r1, &(0x7f0000000340)=[{0x69, 0x8, 0x7c, 0x1, @tick=0x1a, {0x1, 0x6}, {0x9}, @addr}, {0x80, 0x5, 0x80, 0x7, @time={0x7, 0x8}, {0x0, 0x2}, {}, @raw8={"ef0ff83badf2187ffa754cd9"}}, {0x3f, 0x1, 0x14, 0x80, @time={0x94, 0xe6ae}, {0x9d, 0x95}, {0x0, 0x3}, @quote={{0x6, 0x7}, 0x8000}}, {0x6, 0x68, 0x6, 0xc6, @time={0x8, 0x80}, {0x0, 0x6}, {0x5b, 0x80}, @queue={0xc0, {0x1, 0x8000}}}, {0x7, 0x8, 0x9, 0x0, @time={0x3, 0x4}, {0x5}, {0x2, 0x9}, @ext={0x5, &(0x7f00000001c0)="d16bf0d042"}}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @tick=0xe5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0xfffffffe, 0x0, 'client1\x00', 0x0, "eb0000000000b400", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x101200, 0x1) openat(r2, &(0x7f0000000200)='./file0\x00', 0x4a8000, 0x88) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000001940)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xee00}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x6, 0xee01}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0x5, r4}, {0x8, 0x4, r6}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x2, r7}], {0x10, 0x3}}, 0x84, 0x0) tkill(r0, 0x7) [ 2173.850222][T16596] Module has invalid ELF structures [ 2173.886758][T16603] FAULT_INJECTION: forcing a failure. [ 2173.886758][T16603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:52:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x6, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @remote}, &(0x7f0000000100)=0xc) [ 2173.889468][T16599] Module has invalid ELF structures [ 2173.900021][T16603] CPU: 0 PID: 16603 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2173.915354][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.925405][T16603] Call Trace: [ 2173.928674][T16603] dump_stack_lvl+0xb7/0x103 [ 2173.933306][T16603] dump_stack+0x11/0x1a [ 2173.937550][T16603] should_fail+0x23c/0x250 [ 2173.941972][T16603] __alloc_pages+0x102/0x320 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000001400)=""/75, 0x4b}], 0x4, 0xd9c, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) close(r1) clone3(&(0x7f0000001680)={0x40000, &(0x7f0000001480)=0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000001500), {0x30}, &(0x7f0000001540)=""/61, 0x3d, &(0x7f0000001580)=""/183, &(0x7f0000001640), 0x0, {r0}}, 0x58) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10080, 0x1c4) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2173.946554][T16603] alloc_pages_vma+0x513/0x680 [ 2173.951433][T16603] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2173.956975][T16603] do_anonymous_page+0x16e/0x8a0 [ 2173.961909][T16603] handle_mm_fault+0x98f/0x1a50 [ 2173.966780][T16603] ? follow_page_mask+0x93f/0x1040 [ 2173.971950][T16603] __get_user_pages+0x32b/0xbc0 [ 2173.976794][T16603] get_user_pages_unlocked+0x175/0x630 [ 2173.982268][T16603] ? gup_pte_range+0x429/0x620 [ 2173.987032][T16603] __gup_longterm_unlocked+0x47/0x100 [ 2173.992400][T16603] internal_get_user_pages_fast+0x763/0x860 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5}, 0x4) 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2173.998358][T16603] get_user_pages_fast+0x5d/0x80 [ 2174.003309][T16603] iov_iter_get_pages+0x199/0x7e0 [ 2174.008333][T16603] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.013357][T16603] ? mempool_alloc_slab+0x16/0x20 [ 2174.018388][T16603] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2174.023917][T16603] ? bio_alloc_bioset+0x402/0x480 [ 2174.028978][T16603] iomap_dio_bio_actor+0x673/0xb50 [ 2174.034094][T16603] iomap_dio_actor+0x26e/0x3b0 [ 2174.038857][T16603] iomap_apply+0x1df/0x400 [ 2174.043257][T16603] __iomap_dio_rw+0x62e/0xa60 [ 2174.047932][T16603] ? __iomap_dio_rw+0xa60/0xa60 [ 2174.052781][T16603] iomap_dio_rw+0x30/0x70 [ 2174.057182][T16603] ext4_file_read_iter+0x21a/0x290 [ 2174.062280][T16603] aio_read+0x1c1/0x280 [ 2174.066412][T16603] ? should_fail+0xd6/0x250 [ 2174.070893][T16603] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.075896][T16603] io_submit_one+0x7fb/0x1350 [ 2174.080568][T16603] __se_sys_io_submit+0xf5/0x260 [ 2174.085580][T16603] __x64_sys_io_submit+0x3f/0x50 [ 2174.090507][T16603] do_syscall_64+0x3d/0x90 [ 2174.094908][T16603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2174.100879][T16603] RIP: 0033:0x4665e9 [ 2174.104752][T16603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.124338][T16603] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2174.132758][T16603] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2174.140710][T16603] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2174.148831][T16603] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.157006][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.164954][T16603] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/244, 0xf4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000200)={0x8000, 0x8, [0x4e35, 0x3, 0x0, 0x1000], &(0x7f0000000100)=[0x0]}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 0 (fault-call:6 fault-nth:58): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:36 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @tick, 0x0, {0x0, 0x7}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000340)="064727284f8e51977c7df1ad1f589ec27675ec6617fd8621d0972e1ac87da3cbe24a5b6bc0f4e0dc6c97efb57b609de49a083d1fabb74e8850f6a32c6fb01a4d1d0960eccd75f702e9b2b41a88327a3fb9a3ca858fe8ead9349bebae007a28f73a3b8d66422031d83f025f5bf8bc2afeab1458526d01de6cf581e7a149af095d69fd9c95b1c1f88fa46b7c843c00afa214f60de77c5e8a9918e898d82cd885d98c9fcc091f1abeceb9eaf375bf3132a76adf905a81d3ce7d48de6c4825b406ed2e16988d603fe06fc801b952e37756369f651b7748fc64f16a3aeadc0d20cb3193fc99831e5cccedf76cef0925d6ebb3fcc944770d8b783449870de532316895b77f254457c22c1b3dab632395420bd9ca511240d9e4fe6cffca61d49f91c8a0b33d5aa082315050f362755fe892cd04fd449849d972d8d37fc9b6dec25b06b778075115c01437391f7a108041441b66163752a7533fd0c26166a9b04479fea90303dead67da0762b86657b87916ec44923a0bed773c26256dd7f66d67954376e6030cb6ea4ba6946d8e228b320936652a5a26650343e670e2f8874ed0caa46d4abe1e603bdf6f2dd5cd75ea3a64760581fbcd9fb4246311ce53ae7ff65f082772f1d76fa9a419a6c128eded22d24442425ad6cc73cec5999727127e969cb28be29e172bfc2fdf2423da4b787eb32b29ea1689809e988ebc868f94d7102b4c9f1359ef0e5de55678d91719abdc6d9495cd2c27b8eebbf909ec0ab87ba5434c545c996249817449323434cbacf2350f013c00825016512dc20123b17ab5b1d8afd2f1b2c8d3f17c7a246648ad7c191a77870071b1d4dea30049d2343f547b5121ae3d60a236a5d64c405214c908e33b751fef6af6aaeefcd8fae78120351ce1cf8eeda6cbe2571993bd5c8c71ce0479dd7f2323b86d39d4f68b10bb913c4d56546f8b47f3dbfb45cf23961210804b095e101544ae4825b9a3c8c17b7564625cb0410e620fc0e5fda3132daea73b205db43bcb43457088110e27a8c9379d2c30ad3fdeef878d6b5d6a0414ac4e7f453ec781ef85948a86c8f70dbcb37751048db7c8b61fa99a5c6747a77a04540942d2b67ea4b470e12c639e57465f3f60e25bc2ac66ba87f8ce2bc10aa65c9bf2fb79ecb97711aa46e565b46c1f11d8ccbe67a3fed584a1ace33e242ff02cd750a164d5781768c0534b25c502324c7adfe4afd2f6ad45c97401f9e1acacf6c9825f551c73c07e39863412d517a127b45ad183efb27a90ed28fa3eef3a6f4669b20321df1426367f3eba2b985c743a4fccd5bcf2e4d039e4cda473f3709b91fcd658b36d8bc2329a32abbea736cd4757897ff40d62efc2ab895088720a2079f58c51a6eeeb4dfcd94ce60b6a7b0a9b163d7f9743b848812e90161c7e9d4a34fc40d3915b086644f3ca73db3f628c627c1824b38986a04fc073f9b49ec482a6eddcc70a0eb29556d3cefe6d359b56f9fbb4126945a756145d15fbd325c645348112a5249d1d82322d56bd68c3e81c24f238a5875b8ad1a20dd9250a888eb7978f8cf7e751b98855223a3a9fc5b3c3c83d029d40782f6825c6a5aac3ffdd1cde28e8737a7cfe1e6534846e0ae5eb64279b0dceb4b1b5d50affadcf67460ae24d19ea6ad3bfef35caa63e55bd4013eceafb1a8bb2f4d0c7ef0a71ba354ffea521b669e74d44f356820dc270a5bcc6a5dbe578287962abeb64693f09f8fffa4b964f3ac4f414fccde66c99852982598b40af116e2035dc9118de316579c9c6087c6a1bb65d1767dc00ee67640da78f58dc714a972700e64f591fee1043fed6759ce3c82283c39eca4e98e62d9d7d5f40f80b5038784b1c15a416b9cba2816349fd341b11c7a510eb9b84e5270afbce907cd1ad4253647c0c09bf98b3276dd7956ba438766c094b0f652d94a21d1744422fe89419aeaf07d832f07ea182463fb817d27fd554bf1ce3d907f209481b463c5b3e0a433626e2b9a65d03af2f158b48001a9786ba6d28c68050e41383d3651bbb1ad7510dd29573d676897d79ec3040c33b9d7f602b0b39874355978037824a1f009b18ba44f1381ff70fbb525169bc6f5d45cd44ec222a25ea9e52df0fa12100f021beb3a78e8cba0e67d87563f29ff4f3b2324d355c131156995cfed63d01584840d7a941e8a0c0cd93db587d432055b3c9fd05b3c219ea8ccbadb77acb1dcd2562bd2fe5b36175d7e96f9fa79dd935855df726639819eff1fcc5361e8cff603ab4b3557fed91192c9b02a5a745028dbda53f9e5bcac100d43374f389f9391183c8ebfff2a99bd0d9274940e199eb2f0baf9e2761445dac00efecd71e9d38b3cbe4e91afc163041ee03c62e0f607abe6de32fe153a914e6fc1b6b731832b03b38bf1ee2453ecbd45a75ee9b128bfdab4712bea3c75aeb9611b129422daff97dc6d8def78f9331ff2ced19965d54617308741594b962576ca4651aa13db691587c2cf97ffac22d29d3ba0598e9f2ef3aea5bf57ea3dd5833f86325188850dd9b0f7e64271efc4b1d8211ceacfc7b5fb7c1308d1c9c986aae823e38981f231f06cedc4360b19f27822a96c3acb1c5626d08ea57d12cb299ce0f5d12f1f833de8847f37e2c02f5b1f72057768efd2608697bf111cabd5bee808191a8a934002274d755cd3f85ab24e0efe47673caff961cdaa54caf9ebdf833b706c5c6a02292f77f4327ea4476e97466cc916d3b679a6dcfddab8f2be7b2b527150dc1fca0dc4c6cb036935e60b2d47fb042d94aad9e5573ae2b282e55a4f969fc9206e054bae53f61c16daba08ddc14b3347081e5c7cbfd9b2c9d14736c39f2363634dd9aaf9f7d4caa3c767208b56f5495302d85b6abef03e767a8c1427d0ee63ed8fe05ae09113c68c71417b3cebd76dd1149c91318388fdf903357838e721992062f479b5f53d9ead10ed4b762be3e918a01dc927c4b9c213082dbc511217c75d34dd2c6538fc69dfe5fb86ca835e8d276e49727d13a7a41b389150608907c554dccfe7f51a9539b53b25d1cbc135ce925ed5555d53dd55a81029f96b1ab9c9cf13fe8ccbb7f97d53163ff32d01c26a56d6479571755776a8b825d65da702c02aff93ac7d52182332b7dbd00de5029bbb507ff2d9af2ab4f925e1f608707f3a3ccd284bf221e5fae1ed2c9257e20b23d74a0cc84c695dd8823b2094d8dcb008a520dba9892afe7b628b445b45b3cb864459458581c83ac2efde58b5905d0dbc7ae63dec0ef6a0ee62ca674969df3fd825163fbb0f51cd0e03022ffadc57fe6b80ac04346d9f016866e246457b07c8cb0f05a90bba4d4686da33466415cc8d8e0ce4092340fa9451b1bf2af0598cc26155fc53c0db0ae844541dbb7ec650c5b005bc6c13337509fa160afd533891a5f2852c92bb64081376f37eb1d0b9ffb4cf409490c5b23b280350b202922c1476f484db6a155d4a5d66801e4fdcd422d2f189ea043029f0ad3a46d8034558632e7bbffd602a443c7324df0876c3d8170f8d3f0b5297304efc0ebd43e83ff4f6c7e676ecb68a199c86a0f4cdbcafcdd85e578de9632c30409bdc8cd9a9b7db3595c6ec5b9a82767705b77e11066fadc71497960e671a5c5cdba408c5d975fd8b513b4115c0133349e963614814a6dff99860462a61ee0f057de3e8bd0afdbc178b4563af0880e44751db49be1919e49e6b2c08d8b0a2f38f07ea4e3153c1bb0b05d090d54f73e241390acc4dd352d137e0aff136474461fed174b59588f86a9dbe96c4a25dad96cc62f30d4b73364a5a2ad66579a658b09196c087d0ca380cade8cd7f5e5dc89a6c0d3b0b8e6e63b433dbd4296207cf4e49b43d5c7ba51a5032a00a5fc35c8153d194c862d83873de602873587fe55534d966285004ea32851dd5a1ec0450bffb1da4a41ee73d435abec086fa656972420309d9c724b0e9b19042b52dd58ee4a187b74484b2b0076eee05c0c6800817e48eaa386f49e10454b052dff8160140b97701c4d9fabbe1f67cc59df87961b2351944cb508dea7c98db1d7fba42e2ae476cedf01f0941d3ca7c2030663f4881abe2b2b4569e096ecdb014af855e6e327b3e51f7c896e6e42ec8c780c6ceb15e6a832fabc523873d22111015c620e156a62efcd476d590655069094f42d8d6bb4ca824d9e54390ee3e032539dc1e755095f72860f3ce34dff48a2be5b188819eb32ebdbefa368ec7e0869531c08d22e2da269e084b17fa6b6b25e2a5c6bbe69ff65ddbaac3602b61057452bd9feb3b595d485059a711e5a43239ed26368cda02fb1320f55621896957c1b35562647ac6ccaf7999e80701950c8481dc9f2205a8d55ec1fe1c97f8086a8d59b5ce26aa4c4467b38940d60dc92b644d91db4aad319fb575cf18b23ab0d8be633c7abf037b5ecbca49991d3da844e732ab592d6f22fee3396ad9b8b12d1960331c9c00c1cf08a19a20c55d0db725e257babdec68ba9f46d26abda21ce47f7ff408a686e1e4a843f690e3d9da5726ba715630281ef05c1412d59171d35c8cebae7cee5b59cb029e737e880e5d757c992f2e128cb178dfade166a2579fffeb0a6abcbb00fc63dffc2989fccd895fffd126866807c184d1bb9b43add410550919cca75814597d5c6950d8f6469665cb304ac8373633ebeae408d83a6149e2421b075c748445647ef84e3c73c4853d9d3395dcb77a33c90070dcd6158d1151c7ac9ee19ffba3597a7a1734d6450bc66892f0a225a38bdf25aa90138e2b1892d7010639962c0aa85f345994a645f5857fa9455da1d431457e6895816e59f6ef4897ac5070e81200bab627be1d89c0100b1f21099c9428a64db2ea097ab661527788b24fc0cf2d2231910bbc6579841351450dfc720849270dfd1f472ece566332443a2b9922c6565d4a1421dee355adc8ad1c04ac36ed05adc542da0c916d2b259148a48c70cf3cb73195aa0d994bcec8a28b218b7c5f66f70f97eead83faab611fe6ecb7595e67b3de9002293e3960be12691f802ecf96158143461c8734c468e06a26d6bc86d9e303550ca67f414e7c6df0b8d5061308833cb73862f28c65c422655669ea5d0def9e8927ee0ff87c77aa52559d768ba9b74614da94f1a6014acb50909d50fcd9277604372573cf4adcb4273cb6702ef5cb7029afb62fbf5d5722fea7c21caafde4f8027d886feef373da643b827680f76f7cb4344615922aad64c4ff2046e06d0e013c2aef787f8cc6b51a8d8a7df0bcd7b760246e903a6cc1b47188ab757397e2c836a8545c769b5a74ef93590845c53986a4edea90006f0dfbc9b8057df5e5b747e618271a58931d7d4c0690f53b5e7399ac534c1a8dcb3eccbb31a86d6107aaed908bc877eb2165e2762714c649ba8bc6b42183fc8ab64c5c8f476ad9e9d23488ffdb447a0ca16d980e8cb398356677c47a0764467f2c48d72abbb9d169f2f4acb6b405ec528c46eab8dd6e3b7f3ec98ae2270c0e6501964451aa69f6f3d803082f0b113b676141959387c6c14ce7cd305e4ea86f560165d410abb0fbd4adfe19acad743b6d4c90ed0fa611f5e5ab7ec1ce180aa9c1a6a002bc042735d00b6176b18a7951ebfabd9e16fa92bc1606179e14ca46081b469dcceeb0b995165ff1314c067a6425aa061712236cdccaf2007849a4f25b4bcf32f6d5607b6b19007b6144c277aab00b8e3ef5665c2e1443a8915160ce987cc01bdfbd1cc5be176cff8f4601ccd02ddf004cb93d39f1846ef4ba34bf4a1eeb2d75901e1f49db2c96f49ff88314d99a436368613b8e47df979777530c6cb1a") 10:52:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:36 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x0, @tick=0x1, 0xf0, {0x4, 0xcd}, 0x7, 0x0, 0x40}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) wait4(r0, &(0x7f00000001c0), 0x8, &(0x7f0000000340)) [ 2174.369617][T16653] FAULT_INJECTION: forcing a failure. [ 2174.369617][T16653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2174.382864][T16653] CPU: 0 PID: 16653 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2174.393012][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.393043][T16653] Call Trace: [ 2174.393051][T16653] dump_stack_lvl+0xb7/0x103 [ 2174.393070][T16653] dump_stack+0x11/0x1a [ 2174.393084][T16653] should_fail+0x23c/0x250 [ 2174.419508][T16653] __alloc_pages+0x102/0x320 [ 2174.424093][T16653] alloc_pages_vma+0x513/0x680 [ 2174.424117][T16653] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2174.424143][T16653] do_anonymous_page+0x16e/0x8a0 [ 2174.424216][T16653] handle_mm_fault+0x98f/0x1a50 [ 2174.444232][T16653] ? follow_page_mask+0x93f/0x1040 [ 2174.444260][T16653] __get_user_pages+0x32b/0xbc0 [ 2174.444326][T16653] get_user_pages_unlocked+0x175/0x630 [ 2174.459765][T16653] ? gup_pte_range+0x429/0x620 [ 2174.464535][T16653] __gup_longterm_unlocked+0x47/0x100 [ 2174.464561][T16653] internal_get_user_pages_fast+0x763/0x860 [ 2174.464647][T16653] get_user_pages_fast+0x5d/0x80 [ 2174.464674][T16653] iov_iter_get_pages+0x199/0x7e0 [ 2174.464699][T16653] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.464723][T16653] ? mempool_alloc_slab+0x16/0x20 [ 2174.495815][T16653] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2174.495852][T16653] ? bio_alloc_bioset+0x402/0x480 [ 2174.506245][T16653] iomap_dio_bio_actor+0x673/0xb50 [ 2174.511354][T16653] iomap_dio_actor+0x26e/0x3b0 [ 2174.511439][T16653] iomap_apply+0x1df/0x400 [ 2174.511463][T16653] __iomap_dio_rw+0x62e/0xa60 [ 2174.511483][T16653] ? __iomap_dio_rw+0xa60/0xa60 [ 2174.511503][T16653] iomap_dio_rw+0x30/0x70 [ 2174.511620][T16653] ext4_file_read_iter+0x21a/0x290 [ 2174.539588][T16653] aio_read+0x1c1/0x280 [ 2174.543748][T16653] ? should_fail+0xd6/0x250 [ 2174.543846][T16653] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.543871][T16653] io_submit_one+0x7fb/0x1350 [ 2174.558029][T16653] __se_sys_io_submit+0xf5/0x260 [ 2174.558057][T16653] __x64_sys_io_submit+0x3f/0x50 10:52:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x6, 0x1ff, 0x2, [0x6, 0x6]}}) [ 2174.558160][T16653] do_syscall_64+0x3d/0x90 [ 2174.558179][T16653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2174.578236][T16653] RIP: 0033:0x4665e9 [ 2174.578251][T16653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.601814][T16653] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='/proc/self/exe\x00', 0x84000, 0x160) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pwritev2(r1, &(0x7f0000000780)=[{&(0x7f0000000400)="8687578c0b4286cd90b253ab1fa37ac9bbc6ee72c82409a20cd8e22af2ea14f371204597de2397e014eeeb78da4e15b9e82273b67c84327d821d3a601ca6fd3fd47424f23e8a1468d75137e7a5c1", 0x4e}, {&(0x7f0000000480)="3d0d2fae526db5ff058dce0d22b71dc07b1fa51887cc45f8e7d94f5fe793ba3a77f333ed7df4ec0b8f0e4560979ad485e410e675811435cf50a10dc95fccd7bd86912ebd4f2bc46ea72b23dc64c346acf3c1dc12ffe921b03bbf87a6c6d1bcabadfa854c8e8135a748d637f7d1455fc040890fa0f0e1138928e4e7d3ad02849bcefd5ddaf47810de24c4c6ff657d93fc74a8926aaa152a98ce87", 0x9a}, {&(0x7f0000000540)="ec85bbb3504ccd0118586f226c18d265ef16e71e12b9ea8908ea7a2d683b7cab02c730fce7cbfbbeec95a1598d84102dfe1d816e5310778b730cb3cc3bf4639ad1447e7667b188cad037b28c2c3e8c77b5ed859c7eea0ab8ed36659c5ba09a31ff", 0x61}, {&(0x7f00000005c0)="46ffdb625dce3c17daa2ea1e0f709dc19c6120cde535aa5bd785c3b8ae1ce667985c3451e898ee3e3938281fa9c4beb322ea5ef0afdd7642dae3fb89c1e7ba1daf0c8ddca2a39fb1e196298df6fef5a5b28b7d689b56f6a320e242ce4be58daed7044b0281f9b2924ea278f3cfc31b851123c4385e92199bded8ed97a4c4b6b74dcfab17c6598003d0", 0x89}, {&(0x7f0000000680)="5938b4dadb622de57d0d85a1c904ef3cd4fbe965e36974ddc655f3e39964e6b60f098740258fc72bfd525df5cb94d568616bf67a306c73bebf0b81238bd611036e2376246275dd2640495ef858d06162f629d1aa57b1e71d3cfb7c4820139e6a7fc6f38bc32ad2bbb74ffb1206eda51046573d07caa8f79beb6b88cc449ea377808534611552416230ed808fc2f94565e8cb368c3364862a70f20d8d85c970d7ab203c2bfe7780cb31fd87d9b713863ed991e732699e6f916e31fbb0a3f78af8c9955bde10ed97a1457af5d79987577444903b03d460deea1e9b", 0xda}], 0x5, 0x4, 0x7, 0x2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2174.601837][T16653] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2174.601849][T16653] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2174.601862][T16653] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/41, 0x29}, {&(0x7f0000000700)=""/155, 0x9b}], 0x2, 0x8, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/75, 0x4b}], 0x4, 0x0, 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000680)={0x47, 0x1, 0x3e62}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:37 executing program 0 (fault-call:6 fault-nth:59): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2174.601881][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.601891][T16653] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:37 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x1, 0x2, 0x73, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, 0x1, 0x6, 0x800}}) recvfrom$packet(r2, &(0x7f0000000180)=""/28, 0x1c, 0x120, &(0x7f0000000340)={0x11, 0x1ee, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x3, 0x1, 0x0, 'queue1\x00', 0x5}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) splice(r0, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000100)=0xfffffffffffff396, 0xca, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) openat(r2, &(0x7f0000000200)='./file0\x00', 0x211200, 0x0) [ 2174.826046][T16687] FAULT_INJECTION: forcing a failure. [ 2174.826046][T16687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2174.839418][T16687] CPU: 0 PID: 16687 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2174.839442][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.839453][T16687] Call Trace: [ 2174.839460][T16687] dump_stack_lvl+0xb7/0x103 [ 2174.839483][T16687] dump_stack+0x11/0x1a [ 2174.839497][T16687] should_fail+0x23c/0x250 10:52:37 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0xc9ab) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000180)={0xff, 0x2, 'client1\x00', 0x5, "f4016ee823ab69a2", "f98870ced0adf642eff2a73480e2982840fc7920656807f213dd58957c57b6ca", 0x100, 0x20}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair(0x5, 0x4, 0x200, &(0x7f0000000440)={0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)="718245043e42946fa66986fce4474e468c46b074a455c3f054465cbc95625b5cc9c3b41679d4a022fd19e67d80c6b344263b789ce055c764b551", 0x3a}], 0x1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000540)='\x00', 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd=r2, 0x40, 0x4, 0x4, 0x2, 0x0, {0x3, r4}}, 0x1f) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2492218}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000080601010000000000070001080900020073797a310000000005d758acf100000005000100070000000500010007000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2174.839522][T16687] __alloc_pages+0x102/0x320 [ 2174.839540][T16687] alloc_pages_vma+0x513/0x680 [ 2174.839573][T16687] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2174.839596][T16687] do_anonymous_page+0x16e/0x8a0 [ 2174.896113][T16687] handle_mm_fault+0x98f/0x1a50 [ 2174.896138][T16687] ? follow_page_mask+0x93f/0x1040 [ 2174.896162][T16687] __get_user_pages+0x32b/0xbc0 [ 2174.896185][T16687] get_user_pages_unlocked+0x175/0x630 [ 2174.896269][T16687] ? gup_pte_range+0x429/0x620 [ 2174.896385][T16687] __gup_longterm_unlocked+0x47/0x100 [ 2174.896410][T16687] internal_get_user_pages_fast+0x763/0x860 [ 2174.896436][T16687] get_user_pages_fast+0x5d/0x80 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0), &(0x7f0000000200)={'L-', 0x3f}, 0x16, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) close(r0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f00000000c0)=""/185, 0xb9}], 0x2, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) [ 2174.896456][T16687] iov_iter_get_pages+0x199/0x7e0 [ 2174.896511][T16687] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.896538][T16687] ? mempool_alloc_slab+0x16/0x20 [ 2174.896555][T16687] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2174.896576][T16687] ? bio_alloc_bioset+0x402/0x480 [ 2174.896627][T16687] iomap_dio_bio_actor+0x673/0xb50 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000a40)={0x0, 0x4, 0x7, 0x6}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000008c0)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0xc9ab) dup3(r3, r4, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000100)={0x3, &(0x7f0000000640)=[{0x1, 0x8f, &(0x7f0000000400)="d232138fb0c7853148cb86511e66e72d2f9a71fbc98de78b50dda0b03465e7e2887f610f9d11c304a822c4ca570efbca580fc7ef072b6f4d5cc39b82e9561a180a69390de056314a80de45230d9652e91874a5ca12c7a971493a09e6679fee6e4ca752ef3b8a91c24ad7777bf729fb1b88dce7e164e1ff352b4e28004c93a3c1c9411d56d860585d634b145a082ba0", 0x0, 0x1}, {0x2d, 0xbb, &(0x7f00000004c0)="5db465ade0221499c38815bee23101bfe3f763b47de0acd1bfaa989f33ba776074cc0250ac469c909480ce1311334d593d11d86eb0e95220e496f0559d7d054111a2bb47887cc813672235650ec3c8f01f1a63c856190244dd95b462d8829cc1f32025fe762f5698c68234744948c9eb964f6201b994b84786e7e8abbd2e37fe18a62ca5e387044cbe6e49c7e7b58fb12ed4fb8cafe70bd724f3b24409bff44c301ab3d3573a24bba81009b17a727cac0c1e4f68c73b8f91f9a89e", 0x1, 0x1}, {0x13d7, 0x96, &(0x7f0000000580)="45f1d2055f517e3470173dc56fe8f7c48ed9d191984dec20464b1f2c748f9022f8e17ca2fbef5d46a030e2d8e020dd37d430d69b95715b9a0fea172f8687e907965a9a842d4f786b2e7217ba8143acacbbb4e4ec08112a5a0605b44c87eb77ad068aa8baad26b13890d62c3cf3ca4371a1ba696ecc0764e90f49a178ec22372ba7772c1fa157b5a752501f541268c999aa945bceace6", 0x1, 0x1}]}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0xc9ab) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0xd0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd516}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9e, 0x3, "a376ab538c6a0a233665c9102264835ac7a081858077b460743367093cda55c38377e0f4a5f992ddc4c00024329d2e4e16888c9e9cb7293f52bb217f5b7f380b25d82ae89953377ed826051d9455c1c2a5a6c1acb67fb9e02b726a888cfea92aa4aaa4fcc87bbbae98bb0d495ce1c738b8d5614756a9cf579f2c608bf709398091a7a84acbca45e602c9f67d4c4e2e19fd3546aba3e1d38604ab"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x20040845) fsetxattr$security_ima(r2, &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x5, 0x3, 0xd, 0x2, 0x87, "35d19dfa365b0bb7ba612214e402acefdba5129aa9570742f4d1442595fba004f1be2152ea4282057a085908fce9be009c2d22711a780aad46d53e4ae167b7337b0a90e4b7de187e2da806924e95a0e13ad44f8922a6ff7cc84df5d859b0d6bb5b83732f6393d23ea158cc692bb7ace257fc340e7c892bcf5c68c8967aae12116885962b72f316"}, 0x90, 0x3) openat$cgroup_ro(r0, &(0x7f0000000a80)='cpu.stat\x00', 0x0, 0x0) 10:52:37 executing program 0 (fault-call:6 fault-nth:60): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2174.896654][T16687] iomap_dio_actor+0x26e/0x3b0 [ 2174.896672][T16687] iomap_apply+0x1df/0x400 [ 2174.896737][T16687] __iomap_dio_rw+0x62e/0xa60 [ 2174.896753][T16687] ? __iomap_dio_rw+0xa60/0xa60 [ 2174.896833][T16687] iomap_dio_rw+0x30/0x70 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x3, 0x7}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:37 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4a08c0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x429, @tick=0x7, 0x0, {0x0, 0x4}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x974000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r1, r3, 0x2) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 2174.896850][T16687] ext4_file_read_iter+0x21a/0x290 [ 2174.896868][T16687] aio_read+0x1c1/0x280 [ 2174.896932][T16687] ? should_fail+0xd6/0x250 [ 2174.896955][T16687] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2174.896980][T16687] io_submit_one+0x7fb/0x1350 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x89d9e000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2174.897011][T16687] __se_sys_io_submit+0xf5/0x260 [ 2174.897039][T16687] __x64_sys_io_submit+0x3f/0x50 [ 2174.897062][T16687] do_syscall_64+0x3d/0x90 [ 2174.897083][T16687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2174.897107][T16687] RIP: 0033:0x4665e9 [ 2174.897120][T16687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.897138][T16687] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2174.897192][T16687] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2174.897205][T16687] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2174.897218][T16687] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.897230][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.897242][T16687] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2175.145408][T16723] FAULT_INJECTION: forcing a failure. [ 2175.145408][T16723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2175.245424][T16723] CPU: 0 PID: 16723 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2175.245447][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.245457][T16723] Call Trace: [ 2175.245464][T16723] dump_stack_lvl+0xb7/0x103 [ 2175.273770][T16723] dump_stack+0x11/0x1a [ 2175.273792][T16723] should_fail+0x23c/0x250 [ 2175.273817][T16723] __alloc_pages+0x102/0x320 [ 2175.287108][T16723] alloc_pages_vma+0x513/0x680 [ 2175.287133][T16723] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2175.287157][T16723] do_anonymous_page+0x16e/0x8a0 [ 2175.287173][T16723] handle_mm_fault+0x98f/0x1a50 [ 2175.287188][T16723] ? follow_page_mask+0x93f/0x1040 [ 2175.287212][T16723] __get_user_pages+0x32b/0xbc0 [ 2175.287260][T16723] get_user_pages_unlocked+0x175/0x630 [ 2175.322562][T16723] ? gup_pte_range+0x429/0x620 [ 2175.327331][T16723] __gup_longterm_unlocked+0x47/0x100 [ 2175.327364][T16723] internal_get_user_pages_fast+0x763/0x860 [ 2175.327389][T16723] get_user_pages_fast+0x5d/0x80 [ 2175.327408][T16723] iov_iter_get_pages+0x199/0x7e0 [ 2175.327453][T16723] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2175.327491][T16723] ? mempool_alloc_slab+0x16/0x20 [ 2175.358672][T16723] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2175.358702][T16723] ? bio_alloc_bioset+0x402/0x480 [ 2175.358722][T16723] iomap_dio_bio_actor+0x673/0xb50 [ 2175.358751][T16723] iomap_dio_actor+0x26e/0x3b0 [ 2175.358771][T16723] iomap_apply+0x1df/0x400 [ 2175.383379][T16723] __iomap_dio_rw+0x62e/0xa60 [ 2175.383406][T16723] ? __iomap_dio_rw+0xa60/0xa60 [ 2175.383429][T16723] iomap_dio_rw+0x30/0x70 [ 2175.397390][T16723] ext4_file_read_iter+0x21a/0x290 [ 2175.402501][T16723] aio_read+0x1c1/0x280 [ 2175.402525][T16723] ? should_fail+0xd6/0x250 [ 2175.402546][T16723] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2175.402603][T16723] io_submit_one+0x7fb/0x1350 [ 2175.402631][T16723] __se_sys_io_submit+0xf5/0x260 [ 2175.402653][T16723] __x64_sys_io_submit+0x3f/0x50 [ 2175.402674][T16723] do_syscall_64+0x3d/0x90 [ 2175.435295][T16723] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2175.441253][T16723] RIP: 0033:0x4665e9 [ 2175.441270][T16723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2175.441287][T16723] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2175.441303][T16723] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xc9ab) close_range(r2, r1, 0x2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) 10:52:37 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00002cd000/0x1000)=nil, 0x1000, 0x1000002, 0x10010, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x5, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="479e729235a477dfd2fd113f064bc07744e7fa3e5aae9710b8f218b2a56300643a6b5cfeb286", 0x26, 0x4}, {&(0x7f0000000340)="72cd053c4a0ce7e9b66a3edb070a7a6b0952ad206d0a43f38383a5b4c859fc26d9cd718b8935060c80f702b1ec1997ab2472c04bd68e8807e120675376ff17518b5e93c8e7b6cfea86bb51d73d79f37a9a409d5599bcec931044d4548f0711085a48a748f7800281c8097cfc29b838743789e617d4c85f4665e64f58", 0x7c, 0x28000}, {&(0x7f0000000240)="3a78055d01905398521a80a9632a416062427f44c45340b7be7e5601d3a8e817973c98fd9e2c4ca4c627bdbd4f126918db051a6ab0d8709b4d456959cc", 0x3d, 0x8}], 0x8a004, &(0x7f0000000440)={[{@fat=@errors_remount}, {@dots}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@dots}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@audit}]}) mmap(&(0x7f00002cd000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x5a840000) tkill(r0, 0x7) 10:52:37 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x102) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) tkill(r0, 0x7) 10:52:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2175.441314][T16723] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2175.441327][T16723] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2175.441338][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2175.441350][T16723] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:38 executing program 0 (fault-call:6 fault-nth:61): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2175.718963][T16765] FAULT_INJECTION: forcing a failure. [ 2175.718963][T16765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2175.732268][T16765] CPU: 0 PID: 16765 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2175.742446][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.742460][T16765] Call Trace: [ 2175.742468][T16765] dump_stack_lvl+0xb7/0x103 [ 2175.742491][T16765] dump_stack+0x11/0x1a [ 2175.742506][T16765] should_fail+0x23c/0x250 10:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000204000/0x4000)=nil, 0x4000, 0x3800001, 0x110, r1, 0x3d386000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0xc9ab) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) lstat(&(0x7f0000003780)='./file0\x00', &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)="ed3e44ee0ac5d798e0baf41459b5c9dca8f3815b1a83e0737ef19c9ca5ca484a58f2b9e35d610a9b0b6bd7d963ae814bbe7aa31ef8541dcddc9de39b6c4855f92ba01c03fb35ad7c0c3b2c42f9b23b6bf54ddbccde37fa", 0x57}], 0x1, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x1}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="9f072ce044989110d395c4bb60032815e3ecde8df3f41b92e70229255d300926b6", 0x21}, {&(0x7f0000000a80)="d9316f883876f24a0ac01e026577e2cb56bc54b86ac9b0531638097dd432bd58d9383d62abc4bc90a5ebf028747e5227c2083f458d5ae316da9648d0f6fe2453113d571d17d9d716fd122823379daa", 0x4f}, {&(0x7f0000000b00)="4ca1c0112b32efe1b786fc99cbbfaa4fdedc940e1070a369aa07e29698bd30b845a2b01a232f460125b9048f8eaf659ef93744b6e27378de700eaf50263ceb27f87bbdd7d3dc71a7f4bd74328e4f36d7c77fd63c7eaa5f5e4a2f243642a37e10c3dbde412bbb5004c0199d4a41d58cbc069535f2075c7418664eec452401be2a29c7590b92598a81d207cf29a71d42050d8e84b313de6d55779c5271839dba545cfec1", 0xa3}], 0x3, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="357b43f73690e4b14787bc8c941b886b7aa3c204cfbfe42d7163ad64f5ce789701e43a8e2633bd0c124ec8ca85dff03fc3e0ba9a092bf02ad8e58835f0f5d996dd6ff8a02a2468dfb0f91da57b21106bb113ebda52d0ff8fd6957a8290dbbccd3a6238ec8018e3f2a941c91d11a3ab3bef47f86dcd3114aa277bf592f70f258610c8e67f", 0x84}, {&(0x7f0000000cc0)="56ecaca221", 0x5}], 0x2, &(0x7f0000001040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xc0, 0x40080}}, {{&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001180)="4c9d9909834d1f84eb22e510f3a8cfd60db32fe036389a68ae3989481c6b2c1fc1ebbc5c9bf0282e33cec7eb88a3ddc445cd88e0bb79fa30146adac1cd5a8b61766d23b8a65757ad45984bb9455138af6660fed28a0be224ff683b968cd7cc09337c6509a7b3bc63a7e189e0a681f23b301dca10d18dca55def36b8a18bf5fa96f1145d8ca1db73847593944f889905ecfade9715de82949090492cecb8f43fcb1a5df2bdafa39c026b0f2214675486c14a198a59e6655a71b0b336289bce314c0437c5abc4c3e8dcef1f68e15504de8bdfed4c7a7c0cc", 0xd7}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x880}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001400)="407123aa5d1d975d7b0cfb577ec0f486292a66d91181160971408313e7f53932a02658519d4a06420550e77d7e99a20238afecc01f23ded2d1afdea2234e8674351f99f727ecb8e267ad7e2d2e9a0b54f3e10f4c1c76db98e6ed51a16ca51f02f86669a4387cb7d8782048c125b88866d2ae68412735de758bf8155bfada914fee18e240a1159b24c2366c906323a294a7", 0x91}, {&(0x7f00000014c0)="8f0a7e7a305f0b", 0x7}, {&(0x7f0000001500)="b5fd41e54dabc8758551fccbda189e6f1e1e9c1adc1c9ad9ac8d8f890df63cc1af65a0684fe3", 0x26}, {&(0x7f0000001540)="f4a99e681f303c9a7486584c70b5ff88fbab006319f62ad90014e88b3f304452a39483b8e270d9cebd335506c9af367032e70cb6d272ae98ca32bb47e8ca1088171d0d74ed14fa4d155c7500d5bf53a195b8af2ce54a053507207120de22253056906ee79f7813b61473fb1da810c275ec562d205df6e09621450a665b0860af5fa940c0be1e30fb90f5752432a7a8d42675547ccc79a46aeb4cca635beee3e4f26bc77fcb7838ac245e7609db1bd0dbd0726a55eaafd5c86e7754da9c9c8c2481ad4ece3f312d421403778b01e1f6", 0xcf}], 0x4, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x18, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)="bb5436fc822e656a297ddd039579c002cc81446938a31e9f60fb60670b6125d94b5043a467b996d43a5f6e497c6a2adaa182d552a575da7d619a55b4887746d033c112d9f7af5f3c70b73522383dd9a14960f0f66cdec61a313978aec09956187010a304e14b04dc4c00c6a692ce342c82536ccb299c6759355f8dd0dd2379931c5c05fc1afca0f766367f70372a15244aaeab5ec90f37e968dd67dc093168f7535fde8f19db20366cfbd049", 0xac}], 0x1, &(0x7f00000018c0)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}], 0xe0, 0x4000000}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001a40)="13e1b129025c84d216221837774450074c4482e9952f6a2f8490993b378b25404b75124d11cccad84998dbffb47d2aa26e53a020bdea10f2498347c5e0c0c2af49e8b96fcf3233b6e7d65dd9fde2f2e6b7cbc49d37689c90e7e0863d747692cccd398783e6787f4f2fba19b7a22518ef81718f4f27e0200ed73eb30634d74bd21890c527f8", 0x85}, {&(0x7f0000001b00)="7cae813902e3945645215efb58da83b8a8d993314935a51219901c20fe9a8a07f6b5adda2d421c420ad133ce22778ca51e4dad38aed1ef69e61fe1ffac3d", 0x3e}, {&(0x7f0000001b40)="97263ef8aa7c1223e39b8115017cb89a73035c56b76b8edbcc4917663181aae1d9c5ab19658cfe74f2c1bdaf9e63f1abaddd24dad426f1fa6477970b5c8a71a4e8448117ca056619d2ca91f9ec1d0ec396b1e1f6e1a079e4de2415bd0171abf03b25c73bb3f772f8920d53e6006058832c28", 0x72}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="ca7f76a072397c6df6a839587b4901afe56ae9a7473139c71cc2048972a5270e3564e89f109c5a6b7272eba68bebb7c5c26ae6aaed3e77c2d6dea1ef9a7b371b8ac690baf947dcaf4635a6bf9728a7", 0x4f}, {&(0x7f0000002c40)="6389c910cc8b63e09ae121e4a108e3773c410dc04dafe2f5764c90d78737fa49554243abd828f74bd5c914b87a7d7bacc06681a822d9056aa8785805bf2496327a8a13e27811444403cd64698749c62d02ab3810a4e3886bc7432859dc39d7a78fd29aa10066334b1853aa2770c55e016c2c846eb06f7c14fafa53978aef714a0a98", 0x82}, {&(0x7f0000002d00)="7d5a685a5412a97d77071929e109763c0e3db5105caf504b0af880fe04ac27483fa0b517898d104cf86bcdd11abdfdb61fa11c7771bbb19b715220bae0cc106bca79e8cf1dceb8bfac5d84ad47d38b3ad17a175fbf8c9202b1b32125da86e4c811f841370c2f257feda10cba20f8fa934c4f1868a48ad456cc73aeaca4c6227b74660c378059", 0x86}, {&(0x7f0000002dc0)="436d09303192a44b03117e78179824c7c4a27ca23d05a5f55dc2637cca2bda568017d560eb476cfbdcb3f91cc218a592f7994f20a628c41cff5a9eb12c04abbe4a824e15bc39a3e9e64b111e0d1b0aa8ab1da053c0bb1b7f1e6ece9ba9d5282ce3af8161cf4a51e333037f0b", 0x6c}, {&(0x7f0000002e40)="71caca0204cb82c767533f570e7cfcb7e3c748d91f4ef9c9536388e65b8eba440c28a6be2644b73cd25c61d21a3b52e5e235400cbd8aa4476edd6d5013118216220a3ac21a873f3b", 0x48}], 0x9, &(0x7f00000030c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r3, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x80}}, {{&(0x7f0000003140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000031c0)="f03b0bd877cbc69f4a66a45b01852d99b75905eb65ba05c225b37878419e38cb5b414e78fccfeeb1c675acccef55e3affe1e4804c5a9d22bbe0642ad2ab3735b1fdde452a5ae833ca4e278e795810ad56329e72b9d1f", 0x56}, {&(0x7f0000003240)="ef3bef391b2c02f100a69fd977a2332061c18612e0962219fa182a53c93c13ace92034c103dfc5882deaf64080489f6b02ebc484244d168008c83da7831646d6e171cfcd18d6a63087128c8050407f30157bccf99812f93bda24a105e557494f3507be6272f5e727a5d09dca7edf7772e24d7908b6ea8859570abfbadb2882229cbd50aca3699fb62c59f1179b118374031c6ba031030643b32b072fc170d7251448ab42310cbc47bac5be32c64e20b4170e861a62cf49f99d5f9a64b981202f3d2fa826b77d994ec30a7624", 0xcc}, {&(0x7f0000003340)="54af11e625ba2ed8dc9097eb47eb62314286cf5e88f00476edecd416743a540e680d2aaee74d80ab8b4c0a2018c10716866e665428ed54073116b2f012f8e6838ac733bbbf2aeef599d5f66c523595a0ec58debc177b902a7bd8e92846345c", 0x5f}], 0x3, &(0x7f0000003840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0xc8, 0x24048891}}, {{&(0x7f0000003940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003b80)=[{&(0x7f00000039c0)="1f0c25f03a104d6a37bff86fb740f5d7e47ae0ce9d7d5fe98f36a2ccd07dcf2bc6ff2a3bd0894ebbb9c68c35d377bc6dded2922b2ae6b64d28237a4912f4f636ab34f8536b8123ca96e7c4d821580106927a3d11f16c72920b4f058569a2424bd6a2385ac6ef998114ac13df40691980ab", 0x71}, {&(0x7f0000003a40)="79546b7008c612ba5cd6bc35", 0xc}, {&(0x7f0000003a80)="a3bdfa1ff1ed316e3c785074b0b684e344dcb34e12688a9994c9c80dafabb460f8e667c22c3931642c70f6118901e04cdec284720d6c06d36d7bef5c8fffe6bfe926fd126a2e84e965407e27b6c67d6adf718c5c256a38f87ebaab6dbea81de4914ea8fb70e0f15a8954368417506b50b9fd41d60afc1f89785567387e0322a6db1d28561554abe115b4347a6ce9903e1a7cac8a56d756a9f98457c0b878a1dddc61a342642de235b40f90f8e82a1a24207d693c61afa9636b8c3f9abbe71338f19661f7f18c9303506ee3fcc6cd2a4d460cd77c4c0b17dcd8900fed6b507825931d2301ae3c1c1f", 0xe8}], 0x3, &(0x7f0000003bc0), 0x0, 0x2000000}}], 0x9, 0x8800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000100)="048c9c360fe1d68caadbafbc1a5b69b059c6eb5750ec572879c92aafad12cf60b12187826dc51581dfdce2da6e1aff871f", 0x31}, {&(0x7f0000000400)="cbead22b66d6ecf5db68d5ae35f58234c40de56d442e2bbed47e14b9790122b2ef814fe786f18403d458d387938ddda51e147687fbb3ae35f31a8ae1b443ffbd7871325dadcc5bd401e8802b09314089365145496c3c8d1289574c72caa709990446e3fc0fd08f0f2128ca2ea29dc4f34271a5a0", 0x74}, {&(0x7f0000000480)="0881c70760eee04da55f0da46f3dc37b568f80f6bbbd0360a58642288dd04b8ad99185d8977c01cc6dc06107e5cbbd48ae8ae27a5b47bd9d1392bf4a51ec77e86d19a9396c2927cfb3d507dc0ec20eb27371bafd850d0f1181c9b7cd9ec841807280a8e3d6eee9fee64f6011e0d986214ebf6e227b2857af", 0x78}, {&(0x7f0000000500)="e05cf654e4bc45cfa326629fcf9ebccafdec281ce667507a9ecba9906d33e2cbddfbde1e73d8fc69daa51c2602c69c32afac72109536a06922d82a351ce7df3d4241b23da868132d86358edafe6da369c26f1507c1ee867430e78afc2888de6ec8ccd4abafe5d62972e9279b446f178aea8c905d85a7a9ba708f", 0x7a}, {&(0x7f0000000580)="cd3418811492a6bca6d90a8ea004acb01165391b85fdfaa70149f42ba15c8ecad8033a62712f8052ecea78facb224f2117482a726916894488b8739f8daf0a7c3395a3481dae35cde1fba9f543f501d1e81029c69f7a79da537b7f859ea3f73c9825d80c94776254dd6b4ede080a32522085f37a73f0ca8c737c8550dbd176da0b416f2e6e586d7919ba52344e9d18b03968ea7e7e656db334fd8dfa00e3e87684873bbe5f1cdefff7620031fae34f19c409f4ce49e9389a03ea099bdf32", 0xbe}, {&(0x7f0000000200)="a773be598721cdaf920a1a7b9e158d6dd437", 0x12}], 0x6, 0xb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'pids'}, {0x2b, 'cpu'}, {0x6, 'cpu'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2b, 'pids'}]}, 0x28) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2175.742546][T16765] __alloc_pages+0x102/0x320 [ 2175.742565][T16765] alloc_pages_vma+0x513/0x680 [ 2175.742584][T16765] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2175.742605][T16765] do_anonymous_page+0x16e/0x8a0 [ 2175.742621][T16765] handle_mm_fault+0x98f/0x1a50 [ 2175.793650][T16765] ? follow_page_mask+0x93f/0x1040 [ 2175.793682][T16765] __get_user_pages+0x32b/0xbc0 [ 2175.793706][T16765] get_user_pages_unlocked+0x175/0x630 [ 2175.793731][T16765] ? gup_pte_range+0x429/0x620 [ 2175.793757][T16765] __gup_longterm_unlocked+0x47/0x100 10:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r2}, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x550, &(0x7f00000003c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer, 0x0) r8 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r8}, 0x9) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x2}, 0x400) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8}, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r11, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2007, @fd=r1, 0x5, 0x4, 0x5, 0x0, 0x0, {0x1}}, 0x4) [ 2175.819347][T16765] internal_get_user_pages_fast+0x763/0x860 [ 2175.819381][T16765] get_user_pages_fast+0x5d/0x80 [ 2175.819422][T16765] iov_iter_get_pages+0x199/0x7e0 [ 2175.819448][T16765] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2175.819472][T16765] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 2175.819497][T16765] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2175.819599][T16765] ? bio_alloc_bioset+0x402/0x480 [ 2175.819625][T16765] iomap_dio_bio_actor+0x673/0xb50 [ 2175.819680][T16765] iomap_dio_actor+0x26e/0x3b0 [ 2175.866171][T16765] iomap_apply+0x1df/0x400 [ 2175.866199][T16765] __iomap_dio_rw+0x62e/0xa60 [ 2175.875282][T16765] ? __iomap_dio_rw+0xa60/0xa60 [ 2175.875353][T16765] iomap_dio_rw+0x30/0x70 [ 2175.875372][T16765] ext4_file_read_iter+0x21a/0x290 [ 2175.875389][T16765] aio_read+0x1c1/0x280 [ 2175.875410][T16765] ? should_fail+0xd6/0x250 [ 2175.898301][T16765] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2175.898336][T16765] io_submit_one+0x7fb/0x1350 [ 2175.908020][T16765] __se_sys_io_submit+0xf5/0x260 [ 2175.908067][T16765] __x64_sys_io_submit+0x3f/0x50 [ 2175.908087][T16765] do_syscall_64+0x3d/0x90 [ 2175.908105][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2175.908128][T16765] RIP: 0033:0x4665e9 10:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000400)={0x0, 0xffffffff, 0x1, [0x9, 0x8, 0x0, 0x0, 0x4], [0x4, 0x40, 0x8000, 0x80000000, 0x8001, 0x0, 0x0, 0x8001, 0x8001, 0x4, 0x10001, 0x3f, 0x6, 0x0, 0x100000000, 0x5225, 0x7dbb, 0x4, 0x80000001, 0x7fff, 0x7, 0x100, 0x6, 0x1, 0x1, 0x80, 0xfffffffffffffff7, 0xffffffff80000001, 0x5601, 0x1000, 0x4, 0x8001, 0x8, 0x669, 0x1000, 0x3, 0x123, 0x7, 0x3, 0x4fcc, 0x2, 0x1, 0x10001, 0x0, 0x2, 0xb5d, 0xffff, 0x100000001, 0x5, 0x3, 0x0, 0x5, 0x9, 0x10000000, 0x9, 0x5, 0x5, 0x0, 0xfff, 0x1, 0x7f, 0xf1, 0x1f, 0x4, 0x7fffffff, 0x8, 0x80000000, 0x7fff, 0xfffffffffffffffa, 0x6, 0x8000, 0x5, 0x5579, 0xc0000000000000, 0x7f, 0x7, 0x8000, 0x400, 0x7f, 0xffffffffffffffff, 0x4, 0x7fff, 0x1, 0x9, 0x7, 0x53, 0x7, 0x4, 0x2, 0x0, 0x3ff, 0x1, 0x10000, 0xffff, 0x1ff, 0x2, 0x0, 0x9, 0x0, 0x3ff, 0xfdd, 0x1, 0xffffffff, 0x1, 0x0, 0x3, 0x0, 0x3, 0x101, 0x80000000, 0x7fffffff, 0x0, 0x7fffffff, 0x3, 0x7, 0x1c, 0x100, 0x52d, 0xfffffffffffffff7, 0xfff, 0x1ff]}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x3) [ 2175.908188][T16765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2175.908204][T16765] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2175.908219][T16765] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 10:52:38 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r3 = getpid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r3, 0xc) 10:52:38 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) r2 = syz_open_procfs(r0, &(0x7f0000000340)='net/udp6\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000380)={{r2}, "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"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00006ce000/0x3000)=nil, 0x3000, 0x1800005, 0x2010, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x280, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000001c0)={0x7, 0x0, 'client0\x00', 0x2, "3c6e007c50f5537c", "010eaefa5a332071b03f7ba5de43e01b021bbc40d06602d5ea72d2197a37b816", 0x7, 0xff}) 10:52:38 executing program 0 (fault-call:6 fault-nth:62): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1110000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x7f}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x33, 0x68f9db1c8040c75f, 0x67, 0x67, 0x32, 0x31, 0x6d, 0x78, 0x2d]}}, {@mode={'mode', 0x3d, 0x5}}, {@huge_always}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x33, 0x6d, 0x74, 0x25, 0x36]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x7c, 0x38, 0x6d, 0x32]}}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@subj_role={'subj_role', 0x3d, '/proc/sysvipc/msg\x00'}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sysvipc/msg\x00'}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000340)=""/81, 0x51}], 0x4, 0x0, 0x0) [ 2175.908230][T16765] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2175.908240][T16765] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2175.908250][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2175.908307][T16765] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 [ 2176.121177][T16790] FAULT_INJECTION: forcing a failure. [ 2176.121177][T16790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2176.134409][T16790] CPU: 0 PID: 16790 Comm: syz-executor.0 Tainted: G W 5.14.0-rc6-syzkaller #0 [ 2176.134432][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.134441][T16790] Call Trace: [ 2176.134447][T16790] dump_stack_lvl+0xb7/0x103 [ 2176.134467][T16790] dump_stack+0x11/0x1a [ 2176.134480][T16790] should_fail+0x23c/0x250 [ 2176.134532][T16790] __alloc_pages+0x102/0x320 [ 2176.134549][T16790] alloc_pages_vma+0x513/0x680 [ 2176.134571][T16790] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 2176.134594][T16790] do_anonymous_page+0x16e/0x8a0 [ 2176.191082][T16790] handle_mm_fault+0x98f/0x1a50 [ 2176.195953][T16790] ? follow_page_mask+0x93f/0x1040 [ 2176.195980][T16790] __get_user_pages+0x32b/0xbc0 [ 2176.196001][T16790] get_user_pages_unlocked+0x175/0x630 [ 2176.196021][T16790] ? gup_pte_range+0x429/0x620 [ 2176.196105][T16790] __gup_longterm_unlocked+0x47/0x100 [ 2176.221583][T16790] internal_get_user_pages_fast+0x763/0x860 [ 2176.227616][T16790] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2176.227639][T16790] get_user_pages_fast+0x5d/0x80 [ 2176.227693][T16790] iov_iter_get_pages+0x199/0x7e0 [ 2176.227770][T16790] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2176.227795][T16790] ? mempool_alloc_slab+0x16/0x20 [ 2176.253668][T16790] bio_iov_iter_get_pages+0x4cf/0xd00 [ 2176.259051][T16790] ? bio_alloc_bioset+0x402/0x480 [ 2176.259095][T16790] iomap_dio_bio_actor+0x673/0xb50 [ 2176.259118][T16790] iomap_dio_actor+0x26e/0x3b0 [ 2176.259140][T16790] iomap_apply+0x1df/0x400 [ 2176.259161][T16790] __iomap_dio_rw+0x62e/0xa60 [ 2176.259256][T16790] ? __iomap_dio_rw+0xa60/0xa60 [ 2176.287932][T16790] iomap_dio_rw+0x30/0x70 [ 2176.287960][T16790] ext4_file_read_iter+0x21a/0x290 [ 2176.297442][T16790] aio_read+0x1c1/0x280 [ 2176.301596][T16790] ? should_fail+0xd6/0x250 [ 2176.301621][T16790] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2176.301646][T16790] io_submit_one+0x7fb/0x1350 [ 2176.301670][T16790] __se_sys_io_submit+0xf5/0x260 [ 2176.301765][T16790] __x64_sys_io_submit+0x3f/0x50 [ 2176.301785][T16790] do_syscall_64+0x3d/0x90 [ 2176.330469][T16790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2176.330541][T16790] RIP: 0033:0x4665e9 [ 2176.330553][T16790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2176.330571][T16790] RSP: 002b:00007f8e66c7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 10:52:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 2176.330590][T16790] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2176.330603][T16790] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f8e66c80000 [ 2176.330616][T16790] RBP: 00007f8e66c7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2176.330628][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2176.400461][T16790] R13: 00007ffdd3cf817f R14: 00007f8e66c7f300 R15: 0000000000022000 10:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r2, &(0x7f0000002980)=[{&(0x7f0000002740)=""/86, 0x56}, {&(0x7f00000027c0)=""/243, 0xf3}, {&(0x7f00000028c0)=""/148, 0x94}], 0x3, 0x3, 0xfffffff8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x40010, r1, 0x2000) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4083, 0xff3}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000002400)=""/78, 0x4e}], 0x4, 0xd9f, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f000001b9c0)=""/185, 0xb9}, {&(0x7f000001ba80)=""/102400, 0x19000}, {&(0x7f0000000080)}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/2, 0x2}], 0x6, 0x0, 0x3ff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000080), &(0x7f0000000140)=@v3={0x3000000, [{0x800, 0x2}, {0x29, 0x1}]}, 0x18, 0x1) read(r0, &(0x7f00000000c0)=""/40, 0x28) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000024c0)={0x3ce4aa4c, 0x7, 0x5, 0xd29, 0xa, [{0x325d, 0x5, 0x6, '\x00', 0x6}, {0x3, 0x7, 0x8489, '\x00', 0x1}, {0x7fffffff, 0x8000, 0x0, '\x00', 0x204}, {0x3, 0x40, 0xffefffffffeffff9}, {0x0, 0x2, 0x8, '\x00', 0x4}, {0x80005, 0x20, 0x2, '\x00', 0x2908}, {0x40, 0x8, 0xfff, '\x00', 0x2}, {0x9a72, 0xb3, 0x800, '\x00', 0x2004}, {0x3f, 0x1fc, 0x61, '\x00', 0x2}, {0x5, 0x80000008001, 0x0, '\x00', 0x8}]}) 10:52:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:38 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x80045300, &(0x7f0000000280)={0x0, 0x2, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d801000000c975fabf16ab7f2c99e3320edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000200)={{'\x00', 0x2}, {0xfd7}, 0xa0, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)="cf6576f9f3db19dff3ce709946029fb2dd32ad1e9c2cb547510a51c00d7449e5b98df0e4af0b64f713b5c1cd4a5ca8fa8bd130973e2cc3bdb5dc700ae34d6ef79d846ee98f5382d1a7ed01ec5efc93553a6be2e37d036f94059e191d75a71b600b1bce45ea21812f5986e3e81ba7f9c3737a8cf9b833b7d9814db5f25899652362066c566bb7986b1532fc07dede23dff30f7d6e0cb2f56bd9d59db06963", 0x9e, 0x0, &(0x7f0000000400)={0x2, 0x154, {0x0, 0xc, 0x89, "e98d637b28f91cc153eb1017f705c30c3e8192e388f88a348f8a0f534d32725281a28eb1d6e1fc93ef67062e22d30a53da7063f101dd19bdb5ce2ed8d9c2c9c79ea75cb14e7f835a694dcf621d8eebd23b4c48b2565e5434011a2568cc41d31ea8295828b3feb634b1eebc27033daaff9b994fc94c429df7ea60abbab83702f9a6eb8b861de3bd3a4a", 0xbe, "2070dfa6a7170e6f78789c8cbf3b6601f42701bfed71eacf760d1107ccad8b9dd221626fa8718515eca6b9d97a03a01b1199e24f8db9e14cbbd52c431c8d20318b79781f0c09a2af2da53001924339d92f4ad72fd5337ff35fb3b076619ab7d447d178da19d871e691acf33be7c8f0beb061eb3358b54474a56276e15f1399c628aa14b4223c6a9309315a6cc1aba2955d9ae5b6e373844cdf9282ccdec2fa122dcfed450e317c7492d91d58363db63c6074acea6b293e0e5b928f3de52c"}, 0x14, "c4d6e8197563d0bfb299165d77fdad6edae02394"}, 0x174}) tkill(r0, 0x7) 10:52:38 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "9c0aee8290f1caeb", "dbc01b9f244c687a4e9c47b479d8b658329bc975fabf16ab7f2c99e3290edf5d"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000180)={{0x91, 0x2}, 'port0\x00', 0x80, 0x50, 0x2, 0x1, 0x1, 0x0, 0x3, 0x0, 0x7, 0x1f}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) 10:52:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:39 executing program 0 (fault-call:6 fault-nth:63): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 10:52:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 10:52:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0/../file0\x00', &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x8000000800041