0x382/0x3d0 [ 2277.184441][T23700] __page_cache_alloc+0x4d/0xf0 [ 2277.189311][T23700] page_cache_ra_unbounded+0x1be/0x430 [ 2277.194852][T23700] ondemand_readahead+0x58c/0x7c0 [ 2277.199874][T23700] ? filemap_get_read_batch+0x3e2/0x410 [ 2277.205433][T23700] page_cache_sync_ra+0xaf/0xe0 [ 2277.210285][T23700] filemap_read+0x3ad/0x1220 [ 2277.214888][T23700] generic_file_read_iter+0x75/0x2c0 [ 2277.219040][T23705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=23705 comm=syz-executor.5 [ 2277.220174][T23700] ? __fsnotify_parent+0x340/0x440 [ 2277.238108][T23700] ext4_file_read_iter+0x1db/0x290 [ 2277.243276][T23700] generic_file_splice_read+0x24f/0x330 [ 2277.248815][T23700] ? splice_shrink_spd+0x60/0x60 [ 2277.253752][T23700] splice_direct_to_actor+0x2aa/0x650 [ 2277.259114][T23700] ? do_splice_direct+0x190/0x190 [ 2277.264130][T23700] do_splice_direct+0x106/0x190 [ 2277.268984][T23700] do_sendfile+0x63e/0xbb0 19:07:39 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000000e00034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2277.273455][T23700] __x64_sys_sendfile64+0x102/0x140 [ 2277.278646][T23700] do_syscall_64+0x44/0xa0 [ 2277.283068][T23700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2277.288993][T23700] RIP: 0033:0x7f56c00b08d9 [ 2277.293401][T23700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.313010][T23700] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2277.321410][T23700] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2277.329389][T23700] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2277.337354][T23700] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.345344][T23700] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2277.353308][T23700] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 [ 2277.358909][T23709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=23709 comm=syz-executor.5 19:07:39 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x66000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:39 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x40000000}]) 19:07:42 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0xfeffffff00000000) 19:07:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000000f00034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x67000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:42 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x4b010000}]) 19:07:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 22) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2279.765118][T23731] validate_nla: 32 callbacks suppressed [ 2279.765127][T23731] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2279.824166][T23741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=23741 comm=syz-executor.5 [ 2279.849376][T23742] FAULT_INJECTION: forcing a failure. [ 2279.849376][T23742] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.862089][T23742] CPU: 1 PID: 23742 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2279.871086][T23741] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2279.872236][T23742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.872248][T23742] Call Trace: [ 2279.872256][T23742] dump_stack_lvl+0xd6/0x122 [ 2279.898283][T23742] dump_stack+0x11/0x1b [ 2279.902438][T23742] should_fail+0x23c/0x250 [ 2279.906928][T23742] ? mempool_alloc_slab+0x16/0x20 [ 2279.911942][T23742] __should_failslab+0x81/0x90 [ 2279.916771][T23742] should_failslab+0x5/0x20 19:07:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001000034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2279.921347][T23742] kmem_cache_alloc+0x4f/0x300 [ 2279.926118][T23742] mempool_alloc_slab+0x16/0x20 [ 2279.930959][T23742] ? mempool_free+0x130/0x130 [ 2279.935627][T23742] mempool_alloc+0x9d/0x310 [ 2279.940187][T23742] ? ext4_map_blocks+0x5a8/0xf00 [ 2279.945186][T23742] bio_alloc_bioset+0xcc/0x530 [ 2279.949948][T23742] ext4_mpage_readpages+0xe55/0x1140 [ 2279.955232][T23742] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2279.961133][T23742] ext4_readahead+0x99/0xa0 [ 2279.965662][T23742] read_pages+0xb6/0x540 [ 2279.969991][T23742] ? lru_cache_add+0x13e/0x150 [ 2279.974763][T23742] page_cache_ra_unbounded+0x3d2/0x430 [ 2279.980364][T23742] ondemand_readahead+0x58c/0x7c0 [ 2279.985390][T23742] ? filemap_get_read_batch+0x3e2/0x410 [ 2279.990284][T23748] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2279.990932][T23742] page_cache_sync_ra+0xaf/0xe0 [ 2280.003817][T23742] filemap_read+0x3ad/0x1220 [ 2280.008476][T23742] generic_file_read_iter+0x75/0x2c0 [ 2280.013841][T23742] ? __fsnotify_parent+0x340/0x440 [ 2280.018945][T23742] ext4_file_read_iter+0x1db/0x290 [ 2280.023674][T23748] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2280.024048][T23742] generic_file_splice_read+0x24f/0x330 [ 2280.037630][T23742] ? splice_shrink_spd+0x60/0x60 [ 2280.042662][T23742] splice_direct_to_actor+0x2aa/0x650 [ 2280.048033][T23742] ? do_splice_direct+0x190/0x190 [ 2280.053068][T23742] do_splice_direct+0x106/0x190 [ 2280.056932][T23749] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2280.057910][T23742] do_sendfile+0x63e/0xbb0 [ 2280.070374][T23742] __x64_sys_sendfile64+0x102/0x140 19:07:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001100034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2280.075568][T23742] do_syscall_64+0x44/0xa0 [ 2280.080031][T23742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2280.086020][T23742] RIP: 0033:0x7f56c00b08d9 [ 2280.090431][T23742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2280.110029][T23742] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2280.118432][T23742] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2280.126412][T23742] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2280.134374][T23742] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2280.142341][T23742] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2280.150386][T23742] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x68000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:42 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x60810300}]) [ 2280.242658][T23754] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2280.292993][T23755] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2280.321834][T23755] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001200034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:42 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x61810300}]) [ 2280.486846][T23767] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2280.529361][T23767] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:43 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0xffffffff00000000) 19:07:43 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x69000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:43 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x86ffffff}]) 19:07:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 23) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001600034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001c00034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2280.788931][T23793] FAULT_INJECTION: forcing a failure. [ 2280.788931][T23793] name failslab, interval 1, probability 0, space 0, times 0 [ 2280.801572][T23793] CPU: 1 PID: 23793 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2280.811716][T23793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.821760][T23793] Call Trace: [ 2280.825036][T23793] dump_stack_lvl+0xd6/0x122 [ 2280.828455][T23797] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2280.829654][T23793] dump_stack+0x11/0x1b [ 2280.829676][T23793] should_fail+0x23c/0x250 [ 2280.847541][T23793] ? kmalloc_array+0x2d/0x40 [ 2280.852131][T23793] __should_failslab+0x81/0x90 [ 2280.856888][T23793] should_failslab+0x5/0x20 [ 2280.861394][T23793] __kmalloc+0x6f/0x350 [ 2280.865541][T23793] kmalloc_array+0x2d/0x40 [ 2280.870027][T23793] iter_file_splice_write+0xd5/0x790 [ 2280.875326][T23793] ? atime_needs_update+0x239/0x390 [ 2280.880570][T23793] ? touch_atime+0xe0/0x250 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000007700034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2280.885067][T23793] ? generic_file_splice_read+0x2a9/0x330 [ 2280.890773][T23793] ? splice_from_pipe+0xd0/0xd0 [ 2280.895621][T23793] direct_splice_actor+0x80/0xa0 [ 2280.900549][T23793] splice_direct_to_actor+0x345/0x650 [ 2280.906171][T23793] ? do_splice_direct+0x190/0x190 [ 2280.911187][T23793] do_splice_direct+0x106/0x190 [ 2280.916125][T23793] do_sendfile+0x63e/0xbb0 [ 2280.920547][T23793] __x64_sys_sendfile64+0x102/0x140 [ 2280.925834][T23793] do_syscall_64+0x44/0xa0 [ 2280.930261][T23793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2280.936225][T23793] RIP: 0033:0x7f56c00b08d9 [ 2280.940633][T23793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2280.957827][T23802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=23802 comm=syz-executor.5 [ 2280.960525][T23793] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2280.960547][T23793] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2280.989794][T23793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2280.997752][T23793] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2281.005737][T23793] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2281.013696][T23793] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xe4ffffff}]) 19:07:43 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001304004700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2281.168676][T23812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=23812 comm=syz-executor.5 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013d8004700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2281.389480][T23820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55315 sclass=netlink_route_socket pid=23820 comm=syz-executor.5 19:07:43 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff) 19:07:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xf4001000}]) 19:07:43 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:43 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 24) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013e8004700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2281.607430][T23839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59411 sclass=netlink_route_socket pid=23839 comm=syz-executor.5 19:07:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:44 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013f0004700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2281.681906][T23849] FAULT_INJECTION: forcing a failure. [ 2281.681906][T23849] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.694562][T23849] CPU: 1 PID: 23849 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2281.704716][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.714772][T23849] Call Trace: [ 2281.718047][T23849] dump_stack_lvl+0xd6/0x122 [ 2281.722906][T23849] dump_stack+0x11/0x1b [ 2281.727078][T23849] should_fail+0x23c/0x250 [ 2281.731495][T23849] __should_failslab+0x81/0x90 [ 2281.736290][T23849] ? __iomap_dio_rw+0x139/0x1010 [ 2281.741434][T23849] should_failslab+0x5/0x20 [ 2281.746020][T23849] kmem_cache_alloc_trace+0x52/0x320 [ 2281.751306][T23849] __iomap_dio_rw+0x139/0x1010 [ 2281.756082][T23849] ? kvm_sched_clock_read+0xd/0x20 [ 2281.761193][T23849] ? raw_spin_rq_unlock+0xf/0x20 [ 2281.766178][T23849] ? update_blocked_averages+0x650/0x690 [ 2281.770344][T23855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61459 sclass=netlink_route_socket pid=23855 comm=syz-executor.5 [ 2281.771831][T23849] ? plist_check_list+0x151/0x160 [ 2281.789979][T23849] ? __cgroup_account_cputime+0x4f/0x110 [ 2281.795700][T23849] iomap_dio_rw+0x30/0x70 [ 2281.800158][T23849] ? ext4_file_write_iter+0x521/0x11f0 [ 2281.805631][T23849] ext4_file_write_iter+0xa59/0x11f0 [ 2281.810985][T23849] ? ext4_file_write_iter+0x521/0x11f0 [ 2281.816442][T23849] do_iter_readv_writev+0x2de/0x380 [ 2281.821641][T23849] do_iter_write+0x192/0x5c0 [ 2281.826251][T23849] ? splice_from_pipe_next+0x34f/0x3b0 [ 2281.831764][T23849] ? kmalloc_array+0x2d/0x40 [ 2281.836351][T23849] vfs_iter_write+0x4c/0x70 [ 2281.840863][T23849] iter_file_splice_write+0x43a/0x790 [ 2281.846221][T23849] ? splice_from_pipe+0xd0/0xd0 [ 2281.851058][T23849] direct_splice_actor+0x80/0xa0 [ 2281.856051][T23849] splice_direct_to_actor+0x345/0x650 [ 2281.861439][T23849] ? do_splice_direct+0x190/0x190 [ 2281.866472][T23849] do_splice_direct+0x106/0x190 [ 2281.871310][T23849] do_sendfile+0x63e/0xbb0 [ 2281.875799][T23849] __x64_sys_sendfile64+0x102/0x140 19:07:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:44 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130e014700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2281.881015][T23849] do_syscall_64+0x44/0xa0 [ 2281.885428][T23849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2281.891325][T23849] RIP: 0033:0x7f56c00b08d9 [ 2281.895731][T23849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2281.915331][T23849] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2281.923812][T23849] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2281.931791][T23849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2281.939752][T23849] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2281.947712][T23849] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2281.955675][T23849] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:44 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xf4ffffff}]) [ 2282.005055][T23869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3603 sclass=netlink_route_socket pid=23869 comm=syz-executor.5 19:07:44 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001302034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:44 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:44 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xfbffffff}]) [ 2282.341477][T23891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=23891 comm=syz-executor.5 19:07:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 25) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:44 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:44 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001303034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xfeffffff}]) 19:07:44 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:44 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2282.513811][T23907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=787 sclass=netlink_route_socket pid=23907 comm=syz-executor.5 19:07:44 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 19:07:45 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xff050000}]) [ 2282.607768][T23919] FAULT_INJECTION: forcing a failure. [ 2282.607768][T23919] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.620395][T23919] CPU: 1 PID: 23919 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2282.630552][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2282.640603][T23919] Call Trace: [ 2282.643902][T23919] dump_stack_lvl+0xd6/0x122 [ 2282.648496][T23919] dump_stack+0x11/0x1b [ 2282.652674][T23919] should_fail+0x23c/0x250 19:07:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001304034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2282.657113][T23919] ? mempool_alloc_slab+0x16/0x20 [ 2282.662138][T23919] __should_failslab+0x81/0x90 [ 2282.666951][T23919] should_failslab+0x5/0x20 [ 2282.671451][T23919] kmem_cache_alloc+0x4f/0x300 [ 2282.676210][T23919] ? ext4_inode_block_valid+0x1cc/0x210 [ 2282.681753][T23919] mempool_alloc_slab+0x16/0x20 [ 2282.686596][T23919] ? mempool_free+0x130/0x130 [ 2282.691264][T23919] mempool_alloc+0x9d/0x310 [ 2282.695783][T23919] bio_alloc_bioset+0xcc/0x530 [ 2282.700618][T23919] ? iov_iter_alignment+0x34b/0x370 [ 2282.705815][T23919] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2282.710847][T23919] __iomap_dio_rw+0x8d8/0x1010 [ 2282.715632][T23919] ? raw_spin_rq_unlock+0x1/0x20 [ 2282.720612][T23919] iomap_dio_rw+0x30/0x70 [ 2282.725027][T23919] ? ext4_file_write_iter+0x521/0x11f0 [ 2282.725224][T23931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=23931 comm=syz-executor.5 [ 2282.730483][T23919] ext4_file_write_iter+0xa59/0x11f0 [ 2282.730513][T23919] ? ext4_file_write_iter+0x521/0x11f0 [ 2282.754271][T23919] do_iter_readv_writev+0x2de/0x380 [ 2282.759471][T23919] do_iter_write+0x192/0x5c0 [ 2282.764068][T23919] ? splice_from_pipe_next+0x34f/0x3b0 [ 2282.769519][T23919] ? kmalloc_array+0x2d/0x40 [ 2282.774135][T23919] vfs_iter_write+0x4c/0x70 [ 2282.778690][T23919] iter_file_splice_write+0x43a/0x790 [ 2282.784067][T23919] ? splice_from_pipe+0xd0/0xd0 [ 2282.788913][T23919] direct_splice_actor+0x80/0xa0 [ 2282.793849][T23919] splice_direct_to_actor+0x345/0x650 [ 2282.799214][T23919] ? do_splice_direct+0x190/0x190 19:07:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001305034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2282.804235][T23919] do_splice_direct+0x106/0x190 [ 2282.809088][T23919] do_sendfile+0x63e/0xbb0 [ 2282.813559][T23919] __x64_sys_sendfile64+0x102/0x140 [ 2282.818773][T23919] do_syscall_64+0x44/0xa0 [ 2282.823198][T23919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2282.829096][T23919] RIP: 0033:0x7f56c00b08d9 [ 2282.833504][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.853155][T23919] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2282.861556][T23919] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2282.869514][T23919] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2282.877832][T23919] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.879986][T23935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1299 sclass=netlink_route_socket pid=23935 comm=syz-executor.5 [ 2282.885797][T23919] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 19:07:45 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2282.885812][T23919] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:45 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xff0f0000}]) 19:07:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 26) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001306034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:45 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x70000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:45 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xff600000}]) 19:07:45 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 19:07:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001307034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2283.504565][T23964] FAULT_INJECTION: forcing a failure. [ 2283.504565][T23964] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.517204][T23964] CPU: 1 PID: 23964 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2283.527358][T23964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.537413][T23964] Call Trace: [ 2283.540724][T23964] dump_stack_lvl+0xd6/0x122 [ 2283.545321][T23964] dump_stack+0x11/0x1b [ 2283.549481][T23964] should_fail+0x23c/0x250 19:07:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001308034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2283.553897][T23964] ? mempool_alloc_slab+0x16/0x20 [ 2283.558914][T23964] __should_failslab+0x81/0x90 [ 2283.563676][T23964] should_failslab+0x5/0x20 [ 2283.568193][T23964] kmem_cache_alloc+0x4f/0x300 [ 2283.572963][T23964] ? __blk_mq_alloc_request+0x270/0x290 [ 2283.578504][T23964] mempool_alloc_slab+0x16/0x20 [ 2283.583347][T23964] ? mempool_free+0x130/0x130 [ 2283.588095][T23964] mempool_alloc+0x9d/0x310 [ 2283.592715][T23964] bio_alloc_bioset+0xcc/0x530 [ 2283.597619][T23964] ? submit_bio_noacct+0x7ab/0x7d0 [ 2283.602735][T23964] iomap_dio_zero+0xac/0x340 [ 2283.607330][T23964] iomap_dio_bio_iter+0xa62/0xbc0 [ 2283.612356][T23964] __iomap_dio_rw+0x8d8/0x1010 [ 2283.617181][T23964] ? __ext4_mark_inode_dirty+0x481/0x5c0 [ 2283.622899][T23964] iomap_dio_rw+0x30/0x70 [ 2283.627235][T23964] ? ext4_file_write_iter+0x521/0x11f0 [ 2283.632776][T23964] ext4_file_write_iter+0xa59/0x11f0 [ 2283.638162][T23964] ? ext4_file_write_iter+0x521/0x11f0 [ 2283.643618][T23964] do_iter_readv_writev+0x2de/0x380 [ 2283.648813][T23964] do_iter_write+0x192/0x5c0 [ 2283.653547][T23964] ? splice_from_pipe_next+0x34f/0x3b0 [ 2283.659032][T23964] ? kmalloc_array+0x2d/0x40 [ 2283.663628][T23964] vfs_iter_write+0x4c/0x70 [ 2283.668125][T23964] iter_file_splice_write+0x43a/0x790 [ 2283.673548][T23964] ? splice_from_pipe+0xd0/0xd0 [ 2283.678393][T23964] direct_splice_actor+0x80/0xa0 [ 2283.683333][T23964] splice_direct_to_actor+0x345/0x650 [ 2283.688698][T23964] ? do_splice_direct+0x190/0x190 [ 2283.693719][T23964] do_splice_direct+0x106/0x190 [ 2283.698567][T23964] do_sendfile+0x63e/0xbb0 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001309034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2283.702991][T23964] __x64_sys_sendfile64+0x102/0x140 [ 2283.708189][T23964] do_syscall_64+0x44/0xa0 [ 2283.712783][T23964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2283.718686][T23964] RIP: 0033:0x7f56c00b08d9 [ 2283.723089][T23964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2283.742869][T23964] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2283.751272][T23964] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2283.759276][T23964] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2283.767328][T23964] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2283.775313][T23964] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2283.783280][T23964] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:46 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x71000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130a034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:46 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xff870000}]) 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130b034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 27) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:46 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x72000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130c034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:46 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffefffff}]) 19:07:46 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130d034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:46 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffff7f08}]) [ 2284.426328][T24018] FAULT_INJECTION: forcing a failure. [ 2284.426328][T24018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2284.439644][T24018] CPU: 1 PID: 24018 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2284.449815][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.459876][T24018] Call Trace: [ 2284.463198][T24018] dump_stack_lvl+0xd6/0x122 [ 2284.467786][T24018] dump_stack+0x11/0x1b [ 2284.471937][T24018] should_fail+0x23c/0x250 [ 2284.476351][T24018] __alloc_pages+0x102/0x320 [ 2284.480992][T24018] alloc_pages+0x382/0x3d0 [ 2284.485500][T24018] __page_cache_alloc+0x4d/0xf0 [ 2284.490352][T24018] page_cache_ra_unbounded+0x1be/0x430 [ 2284.495838][T24018] ondemand_readahead+0x58c/0x7c0 [ 2284.500866][T24018] ? filemap_get_read_batch+0x3e2/0x410 [ 2284.506439][T24018] page_cache_sync_ra+0xaf/0xe0 [ 2284.511289][T24018] filemap_read+0x3ad/0x1220 [ 2284.515885][T24018] generic_file_read_iter+0x75/0x2c0 [ 2284.521170][T24018] ? __fsnotify_parent+0x340/0x440 [ 2284.526283][T24018] ext4_file_read_iter+0x1db/0x290 [ 2284.531402][T24018] generic_file_splice_read+0x24f/0x330 [ 2284.536944][T24018] ? splice_shrink_spd+0x60/0x60 [ 2284.541899][T24018] splice_direct_to_actor+0x2aa/0x650 [ 2284.547265][T24018] ? do_splice_direct+0x190/0x190 [ 2284.552288][T24018] do_splice_direct+0x106/0x190 [ 2284.557136][T24018] do_sendfile+0x63e/0xbb0 [ 2284.561550][T24018] __x64_sys_sendfile64+0x102/0x140 [ 2284.566751][T24018] do_syscall_64+0x44/0xa0 [ 2284.571194][T24018] entry_SYSCALL_64_after_hwframe+0x44/0xae 19:07:46 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130e034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2284.577093][T24018] RIP: 0033:0x7f56c00b08d9 [ 2284.581501][T24018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.601214][T24018] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2284.609629][T24018] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2284.617658][T24018] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2284.625627][T24018] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.633589][T24018] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2284.641608][T24018] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:47 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x73000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:47 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001310034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:47 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x88, 0x8, 0x7f, 0x0, 0x1, 0x4080, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0xc000, 0x8, 0xdb3c, 0x7, 0x3f, 0x8, 0x3, 0x0, 0x1, 0x0, 0x800}, 0xffffffffffffffff, 0x8, r0, 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000056340)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000056540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000056740)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056940)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r6}, {r7}], 0x73, "81edb21acfc224"}) ftruncate(r1, 0x8) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() creat(&(0x7f0000000080)='./file0\x00', 0x82) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="40610e3a079b488737731f96aad42a5e2dd5db7acb74de9bbd2ecbe6c7247b9420370a14cb94d31878fc1c2a"]) ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:47 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffffefff}]) [ 2284.844912][T24039] validate_nla: 44 callbacks suppressed [ 2284.844926][T24039] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2284.974212][T24048] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 28) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:47 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x74000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:47 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffffff86}]) 19:07:47 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001311034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfffffffffffff801, 0x1, 0x5, 0x1, [{0x5, 0x6, 0x2, '\x00', 0x301}]}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00800000c76c0010c5fd20cf259c00"]) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:47 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2285.240106][T24065] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:47 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$setregs(0xf, r1, 0xfffffffffffffffb, &(0x7f0000000080)="03b90bb612deba7d75accd32d7d6782977dec0cfa9664c8d9053536a8ec795c6f36e6074149148409f29e75037388fbe684eb7d1dd1bfdb3d84a87ca78f7b343c3f13780e2c4ada1128c41a04efaeed1509cab85718d58f492d8f0a55d7fe324e27e035b622bc6ed1115be84c659b0b871d9b05dbc") creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2285.298996][T24075] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2285.316641][T24076] FAULT_INJECTION: forcing a failure. [ 2285.316641][T24076] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.329505][T24076] CPU: 1 PID: 24076 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 19:07:47 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001312034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2285.339662][T24076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.349714][T24076] Call Trace: [ 2285.352991][T24076] dump_stack_lvl+0xd6/0x122 [ 2285.357591][T24076] dump_stack+0x11/0x1b [ 2285.361834][T24076] should_fail+0x23c/0x250 [ 2285.366255][T24076] ? mempool_alloc_slab+0x16/0x20 [ 2285.371454][T24076] __should_failslab+0x81/0x90 [ 2285.376284][T24076] should_failslab+0x5/0x20 [ 2285.380832][T24076] kmem_cache_alloc+0x4f/0x300 [ 2285.385589][T24076] mempool_alloc_slab+0x16/0x20 [ 2285.390431][T24076] ? mempool_free+0x130/0x130 [ 2285.395127][T24076] mempool_alloc+0x9d/0x310 [ 2285.399620][T24076] ? ext4_map_blocks+0x5a8/0xf00 [ 2285.404612][T24076] bio_alloc_bioset+0xcc/0x530 [ 2285.409374][T24076] ext4_mpage_readpages+0xe55/0x1140 [ 2285.411110][T24085] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2285.414737][T24076] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2285.414765][T24076] ext4_readahead+0x99/0xa0 [ 2285.433180][T24076] read_pages+0xb6/0x540 [ 2285.437423][T24076] ? lru_cache_add+0x13e/0x150 [ 2285.442192][T24076] page_cache_ra_unbounded+0x3d2/0x430 [ 2285.444989][T24088] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2285.447667][T24076] ondemand_readahead+0x58c/0x7c0 [ 2285.447691][T24076] ? filemap_get_read_batch+0x3e2/0x410 [ 2285.466246][T24076] page_cache_sync_ra+0xaf/0xe0 [ 2285.471097][T24076] filemap_read+0x3ad/0x1220 [ 2285.475730][T24076] generic_file_read_iter+0x75/0x2c0 [ 2285.481100][T24076] ? __fsnotify_parent+0x340/0x440 [ 2285.486216][T24076] ext4_file_read_iter+0x1db/0x290 [ 2285.491458][T24076] generic_file_splice_read+0x24f/0x330 19:07:47 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001316034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2285.497030][T24076] ? splice_shrink_spd+0x60/0x60 [ 2285.501969][T24076] splice_direct_to_actor+0x2aa/0x650 [ 2285.507333][T24076] ? do_splice_direct+0x190/0x190 [ 2285.512447][T24076] do_splice_direct+0x106/0x190 [ 2285.517295][T24076] do_sendfile+0x63e/0xbb0 [ 2285.521715][T24076] __x64_sys_sendfile64+0x102/0x140 [ 2285.526994][T24076] do_syscall_64+0x44/0xa0 [ 2285.531437][T24076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2285.537329][T24076] RIP: 0033:0x7f56c00b08d9 [ 2285.541783][T24076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2285.561382][T24076] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2285.569785][T24076] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2285.577902][T24076] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2285.580859][T24091] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2285.585865][T24076] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2285.585880][T24076] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2285.585891][T24076] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:48 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x75000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:48 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffffffe4}]) 19:07:48 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xfffffff4}]) [ 2285.904401][T24102] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 29) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:48 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x76000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:48 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:48 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001317034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:48 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xfffffffb}]) [ 2286.134292][T24117] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:48 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="fb"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x4200200, &(0x7f0000000080)="65ebc2ce0d2e385313a9bb69bc35cc5afd30d03a5f44249b764d86ddfd5b02e0c36fb7b60109ecf23dfd5dbde3d519d3124263266029a2a35f8347e5b86fe7d0b56d57048436882b9a6ebf64add263b27619232d", &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="9c44e852e505fcb9") [ 2286.202453][T24122] selinux_netlink_send: 13 callbacks suppressed [ 2286.202462][T24122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5907 sclass=netlink_route_socket pid=24122 comm=syz-executor.5 [ 2286.206449][T24124] FAULT_INJECTION: forcing a failure. [ 2286.206449][T24124] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.234490][T24122] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2286.242551][T24124] CPU: 1 PID: 24124 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 19:07:48 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001318034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2286.252805][T24124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2286.262884][T24124] Call Trace: [ 2286.266158][T24124] dump_stack_lvl+0xd6/0x122 [ 2286.270867][T24124] dump_stack+0x11/0x1b [ 2286.275016][T24124] should_fail+0x23c/0x250 [ 2286.279427][T24124] ? kmalloc_array+0x2d/0x40 [ 2286.284025][T24124] __should_failslab+0x81/0x90 [ 2286.288784][T24124] should_failslab+0x5/0x20 [ 2286.293315][T24124] __kmalloc+0x6f/0x350 [ 2286.297466][T24124] kmalloc_array+0x2d/0x40 [ 2286.301908][T24124] iter_file_splice_write+0xd5/0x790 [ 2286.307194][T24124] ? atime_needs_update+0x239/0x390 [ 2286.312526][T24124] ? touch_atime+0xe0/0x250 [ 2286.316999][T24131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6163 sclass=netlink_route_socket pid=24131 comm=syz-executor.5 [ 2286.317023][T24124] ? generic_file_splice_read+0x2a9/0x330 [ 2286.335710][T24124] ? splice_from_pipe+0xd0/0xd0 [ 2286.340551][T24124] direct_splice_actor+0x80/0xa0 [ 2286.345535][T24124] splice_direct_to_actor+0x345/0x650 [ 2286.350962][T24124] ? do_splice_direct+0x190/0x190 [ 2286.355978][T24124] do_splice_direct+0x106/0x190 [ 2286.360823][T24124] do_sendfile+0x63e/0xbb0 [ 2286.365311][T24124] __x64_sys_sendfile64+0x102/0x140 [ 2286.370535][T24124] do_syscall_64+0x44/0xa0 [ 2286.374947][T24124] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2286.380841][T24124] RIP: 0033:0x7f56c00b08d9 19:07:48 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000131e034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2286.385322][T24124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.404925][T24124] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2286.413334][T24124] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2286.421329][T24124] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2286.429288][T24124] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.437251][T24124] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2286.445210][T24124] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:48 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x77000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:48 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xfffffffe}]) [ 2286.522011][T24141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7699 sclass=netlink_route_socket pid=24141 comm=syz-executor.5 19:07:49 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001321034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:49 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0xffffffff}]) [ 2286.770214][T24153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8467 sclass=netlink_route_socket pid=24153 comm=syz-executor.5 19:07:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 30) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:49 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x78000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:49 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:49 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001325034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:49 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = open_tree(r2, &(0x7f0000000000)='./bus\x00', 0x100) readv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/150, 0x96}], 0x2) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:49 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2287.034092][T24168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9491 sclass=netlink_route_socket pid=24168 comm=syz-executor.5 19:07:49 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001348034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2287.130039][T24178] FAULT_INJECTION: forcing a failure. [ 2287.130039][T24178] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.142670][T24178] CPU: 1 PID: 24178 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2287.152897][T24178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2287.163206][T24178] Call Trace: [ 2287.166484][T24178] dump_stack_lvl+0xd6/0x122 [ 2287.171074][T24178] dump_stack+0x11/0x1b [ 2287.175249][T24178] should_fail+0x23c/0x250 [ 2287.179658][T24178] __should_failslab+0x81/0x90 [ 2287.184441][T24178] ? __iomap_dio_rw+0x139/0x1010 [ 2287.189381][T24178] should_failslab+0x5/0x20 [ 2287.193881][T24178] kmem_cache_alloc_trace+0x52/0x320 [ 2287.199160][T24178] __iomap_dio_rw+0x139/0x1010 [ 2287.203981][T24178] ? kvm_sched_clock_read+0xd/0x20 [ 2287.209095][T24178] ? raw_spin_rq_unlock+0xf/0x20 [ 2287.214091][T24178] ? update_blocked_averages+0x650/0x690 [ 2287.217986][T24184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18451 sclass=netlink_route_socket pid=24184 comm=syz-executor.5 [ 2287.219778][T24178] ? plist_check_list+0x151/0x160 [ 2287.237880][T24178] ? __cgroup_account_cputime+0x4f/0x110 [ 2287.243549][T24178] iomap_dio_rw+0x30/0x70 [ 2287.247876][T24178] ? ext4_file_write_iter+0x521/0x11f0 [ 2287.253325][T24178] ext4_file_write_iter+0xa59/0x11f0 [ 2287.258605][T24178] ? ext4_file_write_iter+0x521/0x11f0 [ 2287.264058][T24178] do_iter_readv_writev+0x2de/0x380 [ 2287.269259][T24178] do_iter_write+0x192/0x5c0 [ 2287.273899][T24178] ? splice_from_pipe_next+0x34f/0x3b0 19:07:49 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000134c034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2287.279346][T24178] ? kmalloc_array+0x2d/0x40 [ 2287.284017][T24178] vfs_iter_write+0x4c/0x70 [ 2287.288566][T24178] iter_file_splice_write+0x43a/0x790 [ 2287.293936][T24178] ? splice_from_pipe+0xd0/0xd0 [ 2287.298776][T24178] direct_splice_actor+0x80/0xa0 [ 2287.303722][T24178] splice_direct_to_actor+0x345/0x650 [ 2287.309125][T24178] ? do_splice_direct+0x190/0x190 [ 2287.314172][T24178] do_splice_direct+0x106/0x190 [ 2287.319086][T24178] do_sendfile+0x63e/0xbb0 [ 2287.323564][T24178] __x64_sys_sendfile64+0x102/0x140 [ 2287.328781][T24178] do_syscall_64+0x44/0xa0 [ 2287.333218][T24178] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2287.339114][T24178] RIP: 0033:0x7f56c00b08d9 [ 2287.343516][T24178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.363471][T24178] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2287.371969][T24178] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2287.374551][T24188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19475 sclass=netlink_route_socket pid=24188 comm=syz-executor.5 [ 2287.379934][T24178] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2287.379976][T24178] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.379987][T24178] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2287.379998][T24178] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:49 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x85a, 0xffffffffffffffff, &(0x7f0000000040)="120beac2ba0f300543a310bd7ce5ba1cb6e1b31e846e8215d8273ea358ffc1cad94564bf773b788c70c5e92c7a96d4971f0dfe86bf", 0x35, 0x6, 0x0, 0x1, r4}, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) fchmod(r7, 0x161) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/156}) io_submit(r1, 0x0, &(0x7f0000000540)) 19:07:49 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x79000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:49 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001360034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:50 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x40, 0x102) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x0) fchmodat(r3, &(0x7f0000000040)='./bus\x00', 0x10) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2287.635653][T24208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24595 sclass=netlink_route_socket pid=24208 comm=syz-executor.5 19:07:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 31) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:50 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:50 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:50 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001368034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:50 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = epoll_create(0x3) fadvise64(r4, 0x74c0, 0x2, 0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) execve(&(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000080)='\x00', &(0x7f00000001c0)='-[/\x00', &(0x7f0000000200)=',\x00', &(0x7f0000000240)='+},-\x00', &(0x7f0000000280)=' *{\'@-\x8c--\xbb]]0}\x00'], &(0x7f0000000480)=[&(0x7f0000000300)='.[^\xaa+!,$}nM{\x00', &(0x7f0000000340)='\x97*M\'\x00', &(0x7f0000000380)='-\x00', &(0x7f00000003c0)='\xd5.\x00', &(0x7f0000000400)=')\x00', &(0x7f0000000440)=':\x00']) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0}]) 19:07:50 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="ff"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2287.934850][T24228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26643 sclass=netlink_route_socket pid=24228 comm=syz-executor.5 19:07:50 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000136c034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2288.033667][T24236] FAULT_INJECTION: forcing a failure. [ 2288.033667][T24236] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.046313][T24236] CPU: 1 PID: 24236 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2288.056623][T24236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.066737][T24236] Call Trace: [ 2288.070005][T24236] dump_stack_lvl+0xd6/0x122 [ 2288.074619][T24236] dump_stack+0x11/0x1b [ 2288.078844][T24236] should_fail+0x23c/0x250 19:07:50 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = dup(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x8020, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}, {@version_9p2000}], [{@euid_eq={'euid', 0x3d, r6}}, {@obj_user={'obj_user', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, '\xb2/*)*'}}, {@fowner_gt={'fowner>', r8}}, {@fsname={'fsname', 0x3d, '\xf0'}}]}}) [ 2288.083289][T24236] ? mempool_alloc_slab+0x16/0x20 [ 2288.088349][T24236] __should_failslab+0x81/0x90 [ 2288.093113][T24236] should_failslab+0x5/0x20 [ 2288.097624][T24236] kmem_cache_alloc+0x4f/0x300 [ 2288.102383][T24236] ? ext4_inode_block_valid+0x1cc/0x210 [ 2288.107956][T24236] mempool_alloc_slab+0x16/0x20 [ 2288.112799][T24236] ? mempool_free+0x130/0x130 [ 2288.117497][T24236] mempool_alloc+0x9d/0x310 [ 2288.121992][T24236] bio_alloc_bioset+0xcc/0x530 [ 2288.126751][T24236] ? iov_iter_alignment+0x34b/0x370 [ 2288.130486][T24244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27667 sclass=netlink_route_socket pid=24244 comm=syz-executor.5 [ 2288.131947][T24236] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2288.150052][T24236] __iomap_dio_rw+0x8d8/0x1010 [ 2288.154849][T24236] ? __ext4_mark_inode_dirty+0x481/0x5c0 [ 2288.160486][T24236] iomap_dio_rw+0x30/0x70 [ 2288.164963][T24236] ? ext4_file_write_iter+0x521/0x11f0 [ 2288.170449][T24236] ext4_file_write_iter+0xa59/0x11f0 [ 2288.175769][T24236] ? ext4_file_write_iter+0x521/0x11f0 19:07:50 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001374034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2288.181289][T24236] do_iter_readv_writev+0x2de/0x380 [ 2288.186489][T24236] do_iter_write+0x192/0x5c0 [ 2288.191130][T24236] ? splice_from_pipe_next+0x34f/0x3b0 [ 2288.196587][T24236] ? kmalloc_array+0x2d/0x40 [ 2288.201247][T24236] vfs_iter_write+0x4c/0x70 [ 2288.205785][T24236] iter_file_splice_write+0x43a/0x790 [ 2288.211175][T24236] ? splice_from_pipe+0xd0/0xd0 [ 2288.216043][T24236] direct_splice_actor+0x80/0xa0 [ 2288.220979][T24236] splice_direct_to_actor+0x345/0x650 [ 2288.226341][T24236] ? do_splice_direct+0x190/0x190 [ 2288.231360][T24236] do_splice_direct+0x106/0x190 [ 2288.236236][T24236] do_sendfile+0x63e/0xbb0 [ 2288.240646][T24236] __x64_sys_sendfile64+0x102/0x140 [ 2288.245838][T24236] do_syscall_64+0x44/0xa0 [ 2288.250270][T24236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2288.256242][T24236] RIP: 0033:0x7f56c00b08d9 [ 2288.260639][T24236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.280239][T24236] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2288.288647][T24236] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2288.296614][T24236] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2288.304634][T24236] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.312598][T24236] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2288.320564][T24236] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:50 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000137a034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:50 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:50 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8483, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000000)="3a70db72cc691959fbae8c0d4c0493e34372633de337f497265c437d25e75a62b6f7910ec33f6d8f80346b6a4341bfdfef4bbf78593859f07a75e1f3ea48a3a89b43481e607e9f1587bcd161f953eb50e36079f02cea2d3195d7e75cdcc9ff7f00009e2a8c2d8fbc870193ad975148b77d8c38eba07d42d321c8", 0x7a, 0x7f85, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x3, r4, &(0x7f00000001c0)="54067e335cbe80e45a89902aa77209945a1c91a46014c0e6ed44321a85cd908d146a0e08ac6e73c465f00f2df1f507bac9c4547f2ca647bbff12a9c56c9da841225b7143fa65f1567f6e3312122996fe3fd34feecb98971d43ac08be5fa9b4772f51e9d015187713be3324eee737ba84650906a9d335", 0x76, 0x4, 0x0, 0x2}]) 19:07:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 32) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:51 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013fc034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:51 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:51 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r4 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r2, 0x7f, 0xfffffffffffffbff, 0xae}) io_submit(0x0, 0x8, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f00000001c0)="5c5971da03d7dfdc7e120308d5638eebd8f8ea5d64360731d448f05be972c25aea0242c709895724f7da24ee803c5bc55461304984f0caadb183ad6657fad41d9cd69092d3db6e909636fc22e723efab50f5fb572b8a65d13804916cbba59eb46b1059f04bd161736296353db93b7ad190e8c41d50bee40cc13cde73d85babe95ee9176acdd8a316ca7d98ab44ef", 0x8e, 0x3, 0x0, 0x4, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xa, 0x8000, r0, &(0x7f00000002c0)="159e5fd56952af4c96c0a72bacb81fccdd3c516474d8b2acd555909e17a604eaf3283a91c2168504953c398e1e18e1736db06e302535908f41c0040c2eab19b3415160f6ab80ce381a23f31b0399d6aec27f1552c7e7530447e17dd250e5f195cba04e18cfdfa30ddb71d5208a30bb05ab2b63ad43301759625d78f6298451b9d80fe5ee6263ab04754f00bb4510706eb031bea6a67c1c02cd474fe4e0989532901423d41cee2ed37a932470", 0xac, 0x100000000}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xbd36, 0xffffffffffffffff, &(0x7f0000000400)="6a304fa2c975dc25f291296da198abe7425f77be0cb8186902227c990ab1ff3bd0a222e87b4f3b6789b4ba0f9374c3ba3c4cf0f90a3137f84b70de13f129c807c80c0458fa1ca4ac56fa87b8b9aeccf5a65bcfa0af53f82792549879799666fbad9e66e0c428ce170909b4ce707fc73096b313a5b105d3099d221343b969fbcbf14163f1bdf39278e06c7bd6b5ba3c003179fb0abedc8a07e1c04638ecbdf14950ee14e1b5f0df40b93753bf947638aaebbe88d87af70756b580ca6b9c3f280ca34610e11a235bc2d558c95585ce4fb0c046ce71e99920196eecbcb2d15a423063a8", 0xe2, 0xdc, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x15, r0, &(0x7f0000000580)="ba70a118f3ef702ad4b290f0294fb0c64995f2df35265773d2bb8c84cd4332a99080b82229fb2ece7ca8eb6959cd2b69e2c503e2954828bfbab16d8bf3ad98a14e4e6d733c8bd41a", 0x48, 0xff, 0x0, 0x0, r2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000640)="3bf6f27f6bf1f4ca1e495a6e786f4bba2c1750d579adc1fd77fc08c7230751d6ec3a058b", 0x24, 0x400, 0x0, 0x0, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f00000007c0)="50a7d0cf4c14faea318220a1e080d756c1cd53b4e057e27413d461a43cee0f464ca8ce0339fff189a6cf178148ef04072cda5dc2f041f0a206e832c5d96d72c5578eecbe545f4ccb4fcce59bb54e02a1538d319cfe5f4d6514dcd181a92c517e36085695b4eeaf3acf87f34a51e4385a4de14b3bb449e8277647aee123d1e04ff3057f5d6e34f6c9347b8e1739d26f23b4cc8b81b025a8b912dbf95ebd06f7bdf67229205f139e389cf141e1ff76bf083dbace60c83490764cc65a159a0f5e27bed13b563b80a90dd1187d7e09dde07bd83da049f8f99fef6451ed6b693e5f27507bb587633b1edb0a060d0fbf1e2fab77e96fab0001cfcfb0d27962723f54953dd95b2bdbaf13176c07f5c9c9d7d454ba735ed3d50a8f69fac0dc7ccbbf195a4a85d5089d2fde571ebc3ce574e2047f6c68c472538e1390d7b04182071e1fbc5332a604e364a7f3186c2d4e308f1c248f59a22a4bf96cdfd9ef747271161327f74d2aa1d2a3866777c75d656da8cff89708803180c6e9bd5dfd67273651ff844a269378d81b1fba426018cff2d4c4579f1a8454393705c884dfc728c0eccc13136baa28102003ba97992252f1b51dc24eab8cc7c7ad87178b12b39af22db65bcfde047e5d99e24065845433da0f7087bbdc1733edcb2559217cd56b800ee3102302c90e7e22da9c239b901cfaed4ec8c4e7df3576589bd320b5be3fcdf38d1209686bc2e80776eef31ba365f3ab78d1fddfe9b7bf36962822df3442210ce559b6e8ff9ed02108ca1821e6de038a0ed9bd4945052a00b8f78bd49f03e689c6fb52782cb036fbe713dff51c76b3198d2a4f456f736abcf70c000a3adea913216dcc6028ee3e46e49d61fa9154f3496cd5f44b020bf8b5179a3cd96c9a537def1ba1650bba30724f908d747eaf173a582c5ea7e983b9c8bd25a27426f23c659a1ce68bd9d8b4860354956a7a7c77c28d20a04408a9885e861897691acc7f423453caa54041b677e7579e7f5c057f2b87033c1b19b9c845c1598714667805bb5f638c3b398568e39459d4b0930f3ef03197dcae847a3327dbed771cf94e22f2aa453bee083f49159037c46297beb58dfccaccd8c834f6797dc3b44e303e7551d337a23836243769436740a05e3d1f0187bd975732f79770116c1b058d501c62b15f5473d1a94049dcc3fd98e45e2216343de4c2242cb205ca97e559588fb508aeca04aa704a237dd36414f5d304b67d68dce02a34fef9ceb0de5e3d775c130da3b75aca539f3ad70c365678bee07c57fd5c8465d85f4844022741cef786cd36f6ab5f05accce761bbd691d0c2568258892a7588b624d22065dc4309ddec938aea846dcbe6da4c0fc6fddff5ce88754f3acb5b4bd6c107a035445405a692567eafd129cf93f2d4e70003b9a0e3594dc912fe7e108f73bd6dac19389bd854fb0a03450287d7949a37e273869a6feb033fb5f9f0c8b6d0ecd02d1b4a78fc89eb6ce8cca9d15726ced9b9e34809820b4de5d88e13ba6c23f05cc264e3160bde4c0211abbf6065b019720c3408ab22873d6b2b764734a84801dc1cfc78bcd8b151af283ea650840d3429f3bdb289bf4b3a2ed9abaaee613081b9a5f6444838f4109bd61ec5dfc8051f0298c800451b7ae622e66101a0cf7da0f3ce970bf57ca569425250d4b0150f5a3057e21d5e44ab9f5a6145f1ce791688df6dbbe0ccae6c6aa4c5558a9d77f56bb6bec7d7d55dd1350060dfcf6fd7df8f64a902d74b8f2106646bdb31670506335730c2b9d2b4becdafab0e7912534dba920ca377e0931fbee7e5f88a57e944fac0c24184b3184f16892aa48a0a3060f3204f79dda166ef2d3893809e31096d47d428cb9aa67d7bb5736f24e7c28a1f6c8f3241f7af8187c6ad4865c94d3fd50685b69715772549ce7e99ee5943da99d8f55f835002fa447ae8b166655073f15e9113e05f0f7a8e3e4e7af5166e847b86b1eca80be3c7349d0d667ce4e0139999c421e596a28657f697596e75f7d66075306fb4ce8e9538dd98823ad4d24910c67cb6cc30ef539ebb9e803612f8ddc71425c73c3c75edfab34d2565f061199c935c4382b1b3d065e9d281a67fbf9b70c41b951d054e3271ded8b7bbaa230f11b79c9bff7a962b0b7903c0ef410ac74e4b367f7191b05881f5c35b0a1425df3bae75689d733a37157848115b81417cbb64609d064a619fabda010e987071e47d6fb91e2f6eab29dc3f6803eecb74f2110d7d197cd04139d4fa644599f47bb45e066c92ece1db08ce51d9abc67659c0fc42b29eef33edcb2154d1c49c7531d875d0ba69e61dc0edfd842fe1a22f1b2060c28bad5d595c9966fa271a23c66d955254409535b18eef1519769c7a37500303f55b2905fba280d35a084319cfdba8f0d382647760f016d3a3080fca6f7d1b4aece2792f8808a1a54de4dc2687970511f108e27ac5fbc127298df9d05352919a56385287cbe9a8e000c0f1468548c4bb735de4966220c81994c539b95b79a1b0058633a6f5f63b944ecb5495a05619227ea3189ccfd55bf8dc56094cd88e3b681a1c31486a22a6a1b93e9d9cf9f836e772222774dba833d4ab3ae1dd08475074e218bbf67afdcd2f40aa443556d07b25693d40d34f85000783a673beac48c86ff012100acc74fac7b636d2361e5f9dbbbd05f423a24b3de2aa7f764ea6a691cb962033468784b01b3517af80d338896835ea564704d7d74eda6a4b02e6518c01e286828de43315b6c262dc65c876250a88acf23e7d21ec4e52f3f69d5daa7480e63205b5795a3490bb556f741ae26f79dc00c3d83e0296e0f4c7daf3950b128cc3deb1ee5d8d305f358f0addb066eb2a5e781ee92951419e785a2e673d5ca839ebe211b224f859a5b117000e8ba58a682cbb5264954995f733ce02678e7d1e2e4745e05412bdd00f4502bcfaaef22bcec45e9ee2fc3a8790743ae41d5b9469fa03083f2cc30d1911ad63f58b01175907107d18368ca6094633019a853f1d1fc75be8afd184a807f5cbdfb187e48c8376e558b08345038a730fc89253779a1b011b5a0b3e8442f718e4b817e6bf8b230084b54fa2f2b060ef8439067af5c54a96e64e6727893eabd2b31f04407d9baf936e74736468ed02668f6e2952bf887368bd279b252c4942402016906cce351f453a501923766758b9bf9df79e903b433204895e1c34d86991070eeba1602a5e67cd5813637c4da34ad6d10a412db46ae186877e1a8caa259ba6bc73fe42e54d7bbb505971a23acbfdaec1e16f8ca7f0774ba6eada6d36efe2dc0ff589fe948e0f372ac0a550d4e5f99c3ed20f4c3f8c810717e66acca51b885066806a662050dc58e79ea24d8c26add7e71c5104a2c75e8e44230d2dc73b571287973adc58409d6a74857ea7e0a0e34cd42b8a151ff49e9316a11ba5eca543b1ad648b4bad828e2442cfe6e6b716a353c5961f2d1000061940abca9fc0e0a199c86e5d4b71ebb4d32622b6ac89452f7926deb088450aa0a67e7f3fd962b5b89d61a447b15c44316db14a3e716a2cedbf966536126001b6666e97a0a726838dd16e1ecad719a4781d5bd163f30c2743fb5210d1f2ed2c40ee4fe6f897920366acb237d2b853bef28d79c5fc3b78f8778f9d59d1a8b76534aec105d3ccd7ca87521e35fc52fb20cc770e7e29dd0317e3aab6038b95112152ede9181d3380341a89a71c8376386aeafa26000fbb0e4494e27fcdbec70f5a3bbe699ac29ba631d7c4d7f5a8f68f0af419e0a9b957c2bf6e2615ee26b7fb8787e34ac8983b77efe6e609cfd97c40eeb9fc32f99e552c7c197e96cbc020b5a88696646f92f300c9c406495097368718118331763770a90714a3334ead7b6a38479c82f7a65eb37f100e2aaec23d0bbceff85701c54263d6c4802fb51ce2cd5e5f8b79efcf81688210a5d77d25c23661866bb5108951081607c7d7e9139022af8ac784825aa19fdfdb63ff928d6ca2809ab561b34ee699f893d5d604f75b2cbc7c1a299ef2457eb9198e1f092707c7fda084c7e57c3b24908a2549bdc637952e2555d62bb30247951ef1955763b5f378eeab014c956bd7ca0aec93e84a38e019f07279408dbae1a9eb50567d10a4158a158b18db3cfc67a4e099a647824fe606559a04bb16f046a49b7e1c9fedba460abeb1a3f0196c21718c24b8191b1908c2f5d0e29cc64371b4cd7fff0031e07092006e3407bc1e19ada0ab239b553afee5a656a73ea3ffab001a9b3b6e2a06bb08a2bb22019f86fe97cce53ab4c4e232aa50069a72a7b1e7a68772e5ba01ca655b83a15b5fd687970bd6d63cf6aa35c23c7ac6167fb04a31aaafcf353435857bd783b0e93a2fe4e7ce580142b01bd37742261835a08cb19b5195f57a1eb6539f5d2a2d6568105c726b79aff4561b88087e630e1b688da2beb262f9441495e0dc0d4b8027391fc02a8a917102664a51e133663e91f9e3286e3d77bc2466a09df7d3a76a38757c05b3593988a92725c80a4939d791eca714c7eff6ffcea2997e70b37d64192e991a07294f5281a734fedc98f8a7cac12499a03bfa33413c8f5383f3bd1bd1f258d48706964c4dbdc8413aab506a08f6a26350f17278a1cc92e445f3ff87ff619565bf19272f8a6125258e42ebec84ba3d1776e47dd5b4133105d0eba6820038c7d32e01251d3ea5dab672ebf1e811ed53d6515c122027d42d314dd3c0ab3d4ef05951454de31de3af9fbdc37306a89099e364f8dd83b005ee268f673b7d1afae3f08760d2c4aa960083b2fee8a31c35e978df8311502c191852e98ee9181fa5b995b9c57939e258a4b89066d5d00381dbbe9f05ee90038fd3ecd17ce9c8f2dfe07d2002124dc11bc1cc5973eed1092abbfabecce75892d12eedc5aace01bc0e28cca5511440bd95da2eac95095490cc30e0af251be5aae55d2877cb43f9f4602cfb64ab288e1b8b74706d7465365c5eac397e7356ecca5e61ddcb5037694645f30907318a19bf231c79eb9b8d03421551dc0a5a9844cf781c6b304df38edd9d275e88020936eed02c39c7c6bb891ec67c3988fc81241e70864a48735a25efcd0c6d84f20735bb7c0e2c17f42a68e9e04e9b5a6be1895248ea6aa7607e96074716977a30de173874e720d1df6dd5efc1accb960ed3b77fab6066de36a04302f2bd8183b5594d46d74edb8e63550098d0efeb406895ae6e17dd208f1316bf0a3266c28df80730411f634a2ff8951e687f907bceb6f78c6b776f612984a0533919862e66377cdbafae5a366b28b9ea6949b1e77e074a58545375b63cf815308daf8d5a6b40961d4bf4363f5cdd09d4f3d8889a39db684cf4bc286b4414de9dacd8646093b7fb0014ef266b270528c956ee59baf8fe3059bc59a18c2c69ffa632dc3058055aad19eb0476f80428f5bd500137c89a83354a737e24b02c85e28d7c779b043f1f48cee1e6b1c1f699de631b92315c5ff66ba8024d61531f167b29c97f460db5829b6cea776e78ad934d0350455f8c7cf806932b6979b80b77626e0eb795dbccbb2c115d5962d352cf1eb13156c90edd96d5802174099caf4f0e924f892a41318e4cb3921eb79ae30319bf4fa415cabb6b7cb7362f46f2b16a76af184c6f18dca17ba1236cfa21601227bd89239165b17788a9f5c80043c55440d98f23df6aacf7412cb1f90b061c12c819b2686e2c6059d19aad1fe108bb45a6fbb4d455a89c4b292967b68982df32e5e7c768d3232c7a108dd242dceb16f507e4d87fbaff0b0d3eeeef96884e2235bd907363bcdf7e213f57ff492c", 0x1000, 0x5, 0x0, 0x0, r4}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x100, r6, &(0x7f00000017c0)="444ee34d18e8c7f9483810227062c2f547f2379001d99875a0c24add2ebb0938f2d31cdff03393e69af850dcf4809fe3f30b43056ca91de906bf9311a7ded94a29bff7bfc5bb2be8a64eb5a31b7270fcbb25cd0a06248f4fdcfa96e7fa6032012fadbd92bb7e2f22d07cbbfeaa8d7ae53b27034394f1f1f5db1f260d3e77a0b2ec12938bb8e51086c19555106f86186acd3be3e252c708c9a8fc946748f15ca73c71", 0xa2, 0x6, 0x0, 0x1, r7}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x6, 0xfff9, r2, &(0x7f00000018c0)="9e715ff0a010a6fa37ed05b2a1795eea0b0b3f309bcb35b3a6e05a72f658c07e9221ca4921267d6760193f798699f7697dea4f7404518fa48125b53575b206a425633ed03c0b3bb3a8f4fd13b7f3e22d48f33298500f891a7826665aa345f0092afd39fe2cdcbd940c85ebe7be47d6f3a778bc0d38ced45216b188ac3e45d6579a9092a173d04e212de9ddfdf1812390402413da15f2ef8a558062b7f0d2bcd4ebffa722f226", 0xa6, 0x6}]) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:51 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2288.897913][T24288] FAULT_INJECTION: forcing a failure. [ 2288.897913][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.910973][T24288] CPU: 1 PID: 24288 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2288.921138][T24288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.931268][T24288] Call Trace: [ 2288.934585][T24288] dump_stack_lvl+0xd6/0x122 [ 2288.939251][T24288] dump_stack+0x11/0x1b [ 2288.943409][T24288] should_fail+0x23c/0x250 [ 2288.947804][T24288] ? mempool_alloc_slab+0x16/0x20 [ 2288.952818][T24288] __should_failslab+0x81/0x90 [ 2288.957561][T24288] should_failslab+0x5/0x20 [ 2288.962043][T24288] kmem_cache_alloc+0x4f/0x300 [ 2288.966798][T24288] ? __blk_mq_alloc_request+0x270/0x290 [ 2288.972380][T24288] mempool_alloc_slab+0x16/0x20 [ 2288.977206][T24288] ? mempool_free+0x130/0x130 [ 2288.981883][T24288] mempool_alloc+0x9d/0x310 [ 2288.986366][T24288] bio_alloc_bioset+0xcc/0x530 [ 2288.991110][T24288] ? submit_bio_noacct+0x7ab/0x7d0 [ 2288.996204][T24288] iomap_dio_zero+0xac/0x340 [ 2289.000973][T24288] iomap_dio_bio_iter+0xa62/0xbc0 [ 2289.006060][T24288] __iomap_dio_rw+0x8d8/0x1010 [ 2289.010825][T24288] iomap_dio_rw+0x30/0x70 [ 2289.015271][T24288] ? ext4_file_write_iter+0x521/0x11f0 [ 2289.020723][T24288] ext4_file_write_iter+0xa59/0x11f0 [ 2289.026003][T24288] ? ext4_file_write_iter+0x521/0x11f0 [ 2289.031462][T24288] do_iter_readv_writev+0x2de/0x380 [ 2289.036640][T24288] do_iter_write+0x192/0x5c0 [ 2289.041248][T24288] ? splice_from_pipe_next+0x34f/0x3b0 [ 2289.046694][T24288] ? kmalloc_array+0x2d/0x40 [ 2289.051309][T24288] vfs_iter_write+0x4c/0x70 [ 2289.055805][T24288] iter_file_splice_write+0x43a/0x790 [ 2289.061173][T24288] ? splice_from_pipe+0xd0/0xd0 [ 2289.066039][T24288] direct_splice_actor+0x80/0xa0 [ 2289.070958][T24288] splice_direct_to_actor+0x345/0x650 [ 2289.076317][T24288] ? do_splice_direct+0x190/0x190 [ 2289.081325][T24288] do_splice_direct+0x106/0x190 [ 2289.086198][T24288] do_sendfile+0x63e/0xbb0 [ 2289.090671][T24288] __x64_sys_sendfile64+0x102/0x140 [ 2289.096020][T24288] do_syscall_64+0x44/0xa0 [ 2289.100427][T24288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2289.106327][T24288] RIP: 0033:0x7f56c00b08d9 [ 2289.110722][T24288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.130397][T24288] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2289.138791][T24288] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 19:07:51 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013fd034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:51 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup2(r0, 0xffffffffffffffff) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2289.146756][T24288] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2289.154706][T24288] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.162758][T24288] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2289.170721][T24288] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:51 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:51 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_destroy(r3) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:51 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300054700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:51 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:51 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000001c0)={0x3, 0x8}) io_setup(0x1ff, &(0x7f0000000100)) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0xfdef}]) io_getevents(r5, 0x7, 0x1, &(0x7f0000000000)=[{}], 0x0) clock_getres(0x1, &(0x7f0000000200)) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_setup(0x16, &(0x7f0000000040)) 19:07:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 33) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:52 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300064700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:52 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:52 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x460201, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x77) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r6, 0x0, r6) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = openat$cgroup_devices(r2, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) poll(&(0x7f0000000080)=[{r4, 0x2000}, {r2, 0x20b0}, {r5}, {0xffffffffffffffff, 0x2080}, {r6, 0x2000}, {r3, 0x8000}, {r7, 0xd534}, {r8, 0x100}], 0x8, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000456000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:52 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300074700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2289.811499][T24334] FAULT_INJECTION: forcing a failure. [ 2289.811499][T24334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2289.824806][T24334] CPU: 1 PID: 24334 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2289.835010][T24334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.845115][T24334] Call Trace: [ 2289.848384][T24334] dump_stack_lvl+0xd6/0x122 [ 2289.852971][T24334] dump_stack+0x11/0x1b [ 2289.857160][T24334] should_fail+0x23c/0x250 [ 2289.860813][T24339] validate_nla: 33 callbacks suppressed [ 2289.860824][T24339] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.861718][T24334] __alloc_pages+0x102/0x320 [ 2289.879854][T24334] alloc_pages+0x382/0x3d0 [ 2289.884273][T24334] __page_cache_alloc+0x4d/0xf0 [ 2289.889120][T24334] page_cache_ra_unbounded+0x1be/0x430 [ 2289.894603][T24334] ondemand_readahead+0x58c/0x7c0 [ 2289.899623][T24334] ? filemap_get_read_batch+0x3e2/0x410 [ 2289.905195][T24334] page_cache_sync_ra+0xaf/0xe0 [ 2289.910105][T24334] filemap_read+0x3ad/0x1220 [ 2289.914836][T24334] generic_file_read_iter+0x75/0x2c0 [ 2289.920141][T24334] ? __fsnotify_parent+0x340/0x440 [ 2289.925245][T24334] ext4_file_read_iter+0x1db/0x290 [ 2289.930365][T24334] generic_file_splice_read+0x24f/0x330 [ 2289.935906][T24334] ? splice_shrink_spd+0x60/0x60 [ 2289.940855][T24334] splice_direct_to_actor+0x2aa/0x650 [ 2289.946222][T24334] ? do_splice_direct+0x190/0x190 [ 2289.951235][T24334] do_splice_direct+0x106/0x190 [ 2289.956106][T24334] do_sendfile+0x63e/0xbb0 [ 2289.960522][T24334] __x64_sys_sendfile64+0x102/0x140 [ 2289.965714][T24334] do_syscall_64+0x44/0xa0 [ 2289.970133][T24334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2289.976230][T24334] RIP: 0033:0x7f56c00b08d9 [ 2289.980639][T24334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2290.000255][T24334] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2290.008705][T24334] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2290.016668][T24334] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2290.024651][T24334] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2290.032690][T24334] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2290.040653][T24334] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:52 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x80000000, &(0x7f0000000000)="78537a0b92a766917c431b0069c5791209cc9027095f", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="d0d04374574dcccff1bf17ccae3b1a73723d31ef5d3e6e72971bd12c843363a754ece7d96ec9856b5304bab711904ac93599f697c2e03fc39fa6e6ef6f91997f80555204f1bf545ce1638aac3002a03e26556b1721b6627242b62c21f878a379c5a27b568f98fb64e7bbb5f48e5eeed4e897d5df3563c8537d5d4f635f038619952d07f7f4da95e780b22c861a0cd45a58cbde4cdc4df34db87814e9efb7bfd07e4305310b37") ptrace$cont(0x20, r1, 0x5, 0x1) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=ANY=[]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000080)='./file0\x00', 0x20) 19:07:52 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x81000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:52 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x11) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r6 = openat$cgroup_subtree(r0, &(0x7f0000000440), 0x2, 0x0) io_submit(r1, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000)="f099405f6be93beb5e51d73eb9cae34b2b77e9b58faed4792ba44ea9cfd9165c7a3eeb0d8afb6bd8c95d58a5a78ea1b10da103c284549820379563cdad2aed9d89d5585fee0f8bf9", 0x48, 0x2, 0x0, 0x0, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f00000001c0)="983eb07216d5984b96f1a11fb448c7e4173a1cea41cdf6fdd62a3ff8f8cd118f9afe8f1c91e695b4e41e3fb0240f82e8dabaf08018625f681e9ebacbe4cd4a3af52b876ae94eeda16caa5e19fd28383510f47f7cd70c45e0019600b7f10f6aaad2c162b5188ca1cc4bad35ae9264228f2e00194a548f84132ca40d10791f0b44df6f8713e4723306433779854d50b7c254db71955195d41ab03b12a6443cf4470aa6fda14a1a66fcecb2c5e42459e3", 0xaf, 0x10001, 0x0, 0x2, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x7ff, 0xffffffffffffffff, &(0x7f00000002c0)="3eab27cbc383bf9495d3722c0bffbe9508a5e02f518a6f4d46137d6ddc170ee07ca350", 0x23, 0x1, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000340)="46b8a0f4f61123dd85449f06fe9d978a92a9fe331cdd8c59be886e488a10ed03e6e2e6761a50960e860fa9df25a1b471cc4732b57dececaba6fbd2af5d39", 0x3e, 0x4, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x1000, r3, &(0x7f00000003c0)="efa1f7629e3d7f6346", 0x9, 0xffffffffffff43ed, 0x0, 0x2, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x40, r6, &(0x7f0000000480)="e4a084ac2636b1d2dff4fefcf35d87b3e4076caf0a6cc30ede84c738fd4aa77cc4284fab1a84818ac31fa306533551d54eeba6438819c8cbe3769ec9b0d58e829aefc1b429", 0x45, 0x80000000, 0x0, 0x2}]) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2290.229434][T24351] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2290.293081][T24356] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:52 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0xb9) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_submit(r3, 0x3, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3ff, r2, &(0x7f0000000080)="9e542df7de3a03fc81d54efa375baed6cad7701e3eae3d596e102848be43d008acfe4a5c55fc05ffedaef27044bbbfe560b1ee1b43474a5ef64420dbeb62ad14fa6ba05020588c2509c2b5438e4adee9837f519ec3f1c9171901c443c1ec73d59423495fef6ecd3c097195acf58e2c1c1818dc73d261", 0x76, 0x2000000000000000}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f00000002c0)="0b0ffbc4f45993367e4822d623459bb48a157d6739717f5b9a55bbf45c691682134df3c0726dd7a9148d07ef0c88ebdcf968be85e36bc57ba435dfc680c5140595de5cd34c0593d91092967447899da85dbe39ece6a2f91f7e2e08cf22567d3ab000d568a25aeeca0e028344a73822269c7cebbbd6b4d8942167d3ec279f4c02c42566ba1032017ef44f6cf16391b0e83b56d1b0e8086578a7cc7016bf5d337611833e62b287625601d5a31ea37af2fa75f108172f6f026ec2f124d6cfb8627871001e6f57187acbd66118c9b6feb577bc6af106450bf039f14263a737981385c07006fee71f23da", 0xe8, 0x0, 0x0, 0x6, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000400)="bd5a098f0b68db4c32a8800a9d5bc6f6f23068b11fc5fb08064f97069f0d561e4339c4d7ae592b7795547c8fa778b908d40a6a476d33acd65b", 0x39, 0x1f, 0x0, 0x2, r0}]) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r7, 0x0, r7) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)="70479897c9db9c2cd9365d7a6b0a4f3b64582c0ef361f6469decc15b6ceeb1ff3b236879063b802f7a9bc5eaf47921adc280eb743840f200cea5426dbf3cd6d2ad05981c8d972fb29a879abc0a941ab62b6dde276ad8cb88b625c88d251ebe749efe15e52859bc30956e20143ebdfb379f9a08432acc73ab8797259c40cadc4ddcb964e07986c79fe6148c8ba2cafe5eeb99b7d8b218f01ae411096583f884146159132908780f484c5ff585afb76d4e8bdb", 0xb2, 0x0, 0x0, 0x3}]) 19:07:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x82000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2290.345046][T24356] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 34) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:52 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(0x0, 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:52 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000a4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:52 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x27}, @local, r8}, 0xc) lseek(r2, 0x8001, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x83000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:53 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(0x0, 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2290.641049][T24377] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2290.703695][T24386] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2290.722998][T24388] FAULT_INJECTION: forcing a failure. [ 2290.722998][T24388] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.735623][T24388] CPU: 1 PID: 24388 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2290.745764][T24388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.755818][T24388] Call Trace: [ 2290.759088][T24388] dump_stack_lvl+0xd6/0x122 [ 2290.763670][T24388] dump_stack+0x11/0x1b [ 2290.767828][T24388] should_fail+0x23c/0x250 [ 2290.772247][T24388] ? mempool_alloc_slab+0x16/0x20 [ 2290.777269][T24388] __should_failslab+0x81/0x90 [ 2290.782033][T24388] should_failslab+0x5/0x20 [ 2290.786531][T24388] kmem_cache_alloc+0x4f/0x300 [ 2290.791335][T24388] mempool_alloc_slab+0x16/0x20 [ 2290.796205][T24388] ? mempool_free+0x130/0x130 [ 2290.800890][T24388] mempool_alloc+0x9d/0x310 [ 2290.805395][T24388] ? ext4_map_blocks+0x5a8/0xf00 [ 2290.810332][T24388] bio_alloc_bioset+0xcc/0x530 [ 2290.815113][T24388] ext4_mpage_readpages+0xe55/0x1140 [ 2290.820400][T24388] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2290.826325][T24388] ext4_readahead+0x99/0xa0 [ 2290.830901][T24388] read_pages+0xb6/0x540 [ 2290.835145][T24388] ? lru_cache_add+0x13e/0x150 [ 2290.839952][T24388] page_cache_ra_unbounded+0x3d2/0x430 [ 2290.845416][T24388] ondemand_readahead+0x58c/0x7c0 [ 2290.850442][T24388] ? filemap_get_read_batch+0x3e2/0x410 [ 2290.855985][T24388] page_cache_sync_ra+0xaf/0xe0 [ 2290.860922][T24388] filemap_read+0x3ad/0x1220 [ 2290.865509][T24388] generic_file_read_iter+0x75/0x2c0 [ 2290.870792][T24388] ? __fsnotify_parent+0x340/0x440 [ 2290.875997][T24388] ext4_file_read_iter+0x1db/0x290 [ 2290.881118][T24388] generic_file_splice_read+0x24f/0x330 [ 2290.886662][T24388] ? splice_shrink_spd+0x60/0x60 [ 2290.891604][T24388] splice_direct_to_actor+0x2aa/0x650 [ 2290.896967][T24388] ? do_splice_direct+0x190/0x190 [ 2290.901987][T24388] do_splice_direct+0x106/0x190 [ 2290.906844][T24388] do_sendfile+0x63e/0xbb0 [ 2290.911345][T24388] __x64_sys_sendfile64+0x102/0x140 [ 2290.916546][T24388] do_syscall_64+0x44/0xa0 [ 2290.921009][T24388] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2290.926900][T24388] RIP: 0033:0x7f56c00b08d9 [ 2290.931307][T24388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2290.951126][T24388] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2290.959559][T24388] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2290.967571][T24388] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2290.975545][T24388] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2290.983516][T24388] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2290.991488][T24388] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:53 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x8) 19:07:53 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000b4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:53 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x5, 0x4, r0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0, r0}]) 19:07:53 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(0x0, 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:53 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x84000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:53 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2291.118244][T24409] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2291.194011][T24415] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:53 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x85000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2291.280833][T24415] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 35) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:53 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fsetxattr$security_evm(r2, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "c3444b54b2518af0a0721a212a345e3f7819b82f"}, 0x15, 0x5) 19:07:53 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:53 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000c4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:53 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x86000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2291.520258][T24435] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2291.624866][T24446] FAULT_INJECTION: forcing a failure. [ 2291.624866][T24446] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.637516][T24446] CPU: 1 PID: 24446 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2291.647656][T24446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.657705][T24446] Call Trace: [ 2291.660988][T24446] dump_stack_lvl+0xd6/0x122 [ 2291.665582][T24446] dump_stack+0x11/0x1b [ 2291.669777][T24446] should_fail+0x23c/0x250 [ 2291.674267][T24446] ? kmalloc_array+0x2d/0x40 [ 2291.678887][T24446] __should_failslab+0x81/0x90 [ 2291.683704][T24446] should_failslab+0x5/0x20 [ 2291.688323][T24446] __kmalloc+0x6f/0x350 [ 2291.692515][T24446] kmalloc_array+0x2d/0x40 [ 2291.696995][T24446] iter_file_splice_write+0xd5/0x790 [ 2291.702280][T24446] ? atime_needs_update+0x239/0x390 [ 2291.707539][T24446] ? touch_atime+0xe0/0x250 [ 2291.712057][T24446] ? generic_file_splice_read+0x2a9/0x330 [ 2291.717809][T24446] ? splice_from_pipe+0xd0/0xd0 [ 2291.722727][T24446] direct_splice_actor+0x80/0xa0 [ 2291.727701][T24446] splice_direct_to_actor+0x345/0x650 [ 2291.733134][T24446] ? do_splice_direct+0x190/0x190 [ 2291.738191][T24446] do_splice_direct+0x106/0x190 [ 2291.743017][T24446] do_sendfile+0x63e/0xbb0 [ 2291.747430][T24446] __x64_sys_sendfile64+0x102/0x140 [ 2291.752647][T24446] do_syscall_64+0x44/0xa0 [ 2291.757055][T24446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2291.762988][T24446] RIP: 0033:0x7f56c00b08d9 [ 2291.767398][T24446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.786980][T24446] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2291.795480][T24446] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2291.803429][T24446] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2291.811384][T24446] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:07:54 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:54 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x87000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:54 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:54 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000d4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:54 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0xc0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x66be5000) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) [ 2291.819430][T24446] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2291.827375][T24446] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:54 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:54 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000e4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 36) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x20000a, 0x1959cc4a) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x8844) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:54 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x88000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:54 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:54 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300114700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:54 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r2, 0x0) 19:07:54 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300124700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2292.489299][T24500] FAULT_INJECTION: forcing a failure. [ 2292.489299][T24500] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.501938][T24500] CPU: 1 PID: 24500 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2292.512128][T24500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2292.522181][T24500] Call Trace: [ 2292.525448][T24500] dump_stack_lvl+0xd6/0x122 [ 2292.530039][T24500] dump_stack+0x11/0x1b [ 2292.534195][T24500] should_fail+0x23c/0x250 [ 2292.538613][T24500] __should_failslab+0x81/0x90 [ 2292.543377][T24500] ? __iomap_dio_rw+0x139/0x1010 [ 2292.548367][T24500] should_failslab+0x5/0x20 [ 2292.552886][T24500] kmem_cache_alloc_trace+0x52/0x320 [ 2292.558171][T24500] __iomap_dio_rw+0x139/0x1010 [ 2292.562945][T24500] ? kvm_sched_clock_read+0xd/0x20 [ 2292.568063][T24500] ? raw_spin_rq_unlock+0xf/0x20 [ 2292.573009][T24500] ? update_blocked_averages+0x650/0x690 [ 2292.578641][T24500] ? plist_check_list+0x151/0x160 [ 2292.583735][T24500] ? __cgroup_account_cputime+0x4f/0x110 [ 2292.589388][T24500] iomap_dio_rw+0x30/0x70 [ 2292.593743][T24500] ? ext4_file_write_iter+0x521/0x11f0 [ 2292.599469][T24500] ext4_file_write_iter+0xa59/0x11f0 [ 2292.604757][T24500] ? ext4_file_write_iter+0x521/0x11f0 [ 2292.610291][T24500] do_iter_readv_writev+0x2de/0x380 [ 2292.615490][T24500] do_iter_write+0x192/0x5c0 [ 2292.620079][T24500] ? splice_from_pipe_next+0x34f/0x3b0 [ 2292.625525][T24500] ? kmalloc_array+0x2d/0x40 [ 2292.630119][T24500] vfs_iter_write+0x4c/0x70 [ 2292.634646][T24500] iter_file_splice_write+0x43a/0x790 [ 2292.640006][T24500] ? splice_from_pipe+0xd0/0xd0 [ 2292.644998][T24500] direct_splice_actor+0x80/0xa0 [ 2292.649926][T24500] splice_direct_to_actor+0x345/0x650 [ 2292.655300][T24500] ? do_splice_direct+0x190/0x190 [ 2292.660339][T24500] do_splice_direct+0x106/0x190 [ 2292.665187][T24500] do_sendfile+0x63e/0xbb0 [ 2292.669600][T24500] __x64_sys_sendfile64+0x102/0x140 [ 2292.674809][T24500] do_syscall_64+0x44/0xa0 [ 2292.679344][T24500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2292.685349][T24500] RIP: 0033:0x7f56c00b08d9 [ 2292.689751][T24500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.709373][T24500] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2292.717800][T24500] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2292.725893][T24500] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:07:55 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300024700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:55 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:55 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:55 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x89000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2292.733851][T24500] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.741807][T24500] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2292.749768][T24500] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:55 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'threaded\x00'}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x21a00000, &(0x7f00000001c0)="f137f355f86b4726373711db2e95ef429274e11ef274122d42a94f3e3781c3e28d07932e662c386a299ce710132ab490dd7fb564ac9367d45ef95b2a659ff2f0240cea88f1b87c86294421269760ac96a27709beefd6caf962f425aad046c5d6c8fd6893b158b4cdbe0f4c05a94ec2650727ec157cb4545dd8444e9b42e3bdde8910193eb847631a47f50e7da8525ae601c62138c096839c9e7c975cafa939bf61e83c0ac773959553c00c6d2d6a36cea55dbf6829a868ba1746d232ca4705a8ddfc28141cfa8f0b01ce2c6e3e5ba0c60b087339a7352f4b5f3b7e36604dc2ad8a1d508283a15f07154a9bb3f3efad1fd7154994e1", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000003c0)="e62a13a7ff0d40681901b2c533884de7f761cccb577c866d7a0f556230c1384103a10237f55fc9a2cc87efc2b886848f761f2ff7999090c92206a1a45d28c8680a5aa72efce01410e25db8987a4143277fc77d695aaa01b457b4bd8bae14490a84e4c53e479b053310893e4528cfeb2148828b34d07107ca9ea6b907c3cbee7572be47607be35d80cb66db1e30abed713fb382fe99b16de7ffed27501c4250aabe61fb06a1be46044d3acdee9e7a9179127edd62d6bfd96ebc97639252e172a0b35925a67f20be5d1c8fe76cad99c54f6255c5062db63ed4cfb7075070ceac2772fa929c31cc7984655cebe02135ca99be9bf9908ea24d50") 19:07:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 37) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:55 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) 19:07:55 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300044700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:55 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:55 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:55 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="0410b59785bab30a75677edfff0f0000"], 0x15, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) process_vm_writev(r1, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/230, 0xe6}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/107, 0x6b}], 0x8, &(0x7f0000002a40)=[{&(0x7f00000025c0)=""/4, 0x4}, {&(0x7f0000002600)=""/94, 0x5e}, {&(0x7f0000002680)=""/248, 0xf8}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/104, 0x68}, {&(0x7f0000002840)=""/133, 0x85}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/18, 0x12}], 0x8, 0x0) 19:07:55 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300054700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:55 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) [ 2293.407039][T24555] FAULT_INJECTION: forcing a failure. [ 2293.407039][T24555] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.419672][T24555] CPU: 1 PID: 24555 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2293.429877][T24555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.440026][T24555] Call Trace: [ 2293.443399][T24555] dump_stack_lvl+0xd6/0x122 [ 2293.447987][T24555] dump_stack+0x11/0x1b [ 2293.452147][T24555] should_fail+0x23c/0x250 [ 2293.456682][T24555] ? mempool_alloc_slab+0x16/0x20 [ 2293.461699][T24555] __should_failslab+0x81/0x90 [ 2293.466463][T24555] should_failslab+0x5/0x20 [ 2293.471037][T24555] kmem_cache_alloc+0x4f/0x300 [ 2293.475807][T24555] ? ext4_inode_block_valid+0x1cc/0x210 [ 2293.481363][T24555] mempool_alloc_slab+0x16/0x20 [ 2293.486281][T24555] ? mempool_free+0x130/0x130 [ 2293.490954][T24555] mempool_alloc+0x9d/0x310 [ 2293.495504][T24555] bio_alloc_bioset+0xcc/0x530 [ 2293.500276][T24555] ? iov_iter_alignment+0x34b/0x370 [ 2293.505547][T24555] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2293.510583][T24555] __iomap_dio_rw+0x8d8/0x1010 [ 2293.515572][T24555] iomap_dio_rw+0x30/0x70 [ 2293.519903][T24555] ? ext4_file_write_iter+0x521/0x11f0 [ 2293.525354][T24555] ext4_file_write_iter+0xa59/0x11f0 [ 2293.530750][T24555] ? ext4_file_write_iter+0x521/0x11f0 [ 2293.536476][T24555] do_iter_readv_writev+0x2de/0x380 [ 2293.541795][T24555] do_iter_write+0x192/0x5c0 [ 2293.546387][T24555] ? splice_from_pipe_next+0x34f/0x3b0 [ 2293.551905][T24555] ? kmalloc_array+0x2d/0x40 [ 2293.556522][T24555] vfs_iter_write+0x4c/0x70 [ 2293.561125][T24555] iter_file_splice_write+0x43a/0x790 [ 2293.566498][T24555] ? splice_from_pipe+0xd0/0xd0 [ 2293.571339][T24555] direct_splice_actor+0x80/0xa0 [ 2293.576356][T24555] splice_direct_to_actor+0x345/0x650 [ 2293.581719][T24555] ? do_splice_direct+0x190/0x190 [ 2293.586736][T24555] do_splice_direct+0x106/0x190 [ 2293.591579][T24555] do_sendfile+0x63e/0xbb0 [ 2293.596024][T24555] __x64_sys_sendfile64+0x102/0x140 [ 2293.601222][T24555] do_syscall_64+0x44/0xa0 [ 2293.605666][T24555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2293.611757][T24555] RIP: 0033:0x7f56c00b08d9 [ 2293.616161][T24555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.635764][T24555] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2293.644427][T24555] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 19:07:56 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) 19:07:56 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000153000/0x4000)=nil, 0x4000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:56 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2293.652398][T24555] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2293.660364][T24555] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.668340][T24555] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2293.676302][T24555] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:56 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300064700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 38) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:56 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) 19:07:56 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f00000001c0)=""/168, 0xa8}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/231, 0xe7}], 0x6, 0x9, 0x938) 19:07:56 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) clone(0x100, &(0x7f0000000080)="23e2c5a3399ebd41016ef0176011f1bea55da8e70b8647aa7399443cc986dd14eaa53982e5b6c7571388fe6a6bb7c4bba41a4ded8333939abc26f26e7cc0b162f66e44324ff08a8a5ac3e6c7a94b26410e29aa955ed034283ea0c1de13ccec398b348ed178e9ad0259292fdd9c2910bf08d6a0f1a122130c6470aed817d8ffeb5982961e4fa933f07b9b111a57fc99001d97c76234fe271ae7781587da526e4d89f3af8ab4d9edf7771108eb6e1dd1db8cb483ce10e6b9", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c6ea284ffce8eb70154a7bdc6e41c6b5d8f8faef5a90789ddfa6289aa299a92f193a5572302cb3e5dc0469446f9d10748435b62410180ead1ff173150b2e7b55b820500b5696940943a27846d802823a") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:56 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300074700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:56 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:56 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) [ 2294.291265][T24604] FAULT_INJECTION: forcing a failure. [ 2294.291265][T24604] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.303917][T24604] CPU: 1 PID: 24604 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2294.314055][T24604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.324267][T24604] Call Trace: [ 2294.327535][T24604] dump_stack_lvl+0xd6/0x122 [ 2294.332115][T24604] dump_stack+0x11/0x1b [ 2294.336265][T24604] should_fail+0x23c/0x250 [ 2294.340682][T24604] ? mempool_alloc_slab+0x16/0x20 [ 2294.345753][T24604] __should_failslab+0x81/0x90 [ 2294.350515][T24604] should_failslab+0x5/0x20 [ 2294.355152][T24604] kmem_cache_alloc+0x4f/0x300 [ 2294.359981][T24604] ? __blk_mq_alloc_request+0x270/0x290 [ 2294.365560][T24604] mempool_alloc_slab+0x16/0x20 [ 2294.370408][T24604] ? mempool_free+0x130/0x130 [ 2294.375077][T24604] mempool_alloc+0x9d/0x310 [ 2294.379571][T24604] bio_alloc_bioset+0xcc/0x530 [ 2294.384326][T24604] ? submit_bio_noacct+0x7ab/0x7d0 [ 2294.389505][T24604] iomap_dio_zero+0xac/0x340 [ 2294.394125][T24604] iomap_dio_bio_iter+0xa62/0xbc0 [ 2294.399150][T24604] __iomap_dio_rw+0x8d8/0x1010 [ 2294.403896][T24604] ? raw_spin_rq_unlock+0x1/0x20 [ 2294.408821][T24604] iomap_dio_rw+0x30/0x70 [ 2294.413144][T24604] ? ext4_file_write_iter+0x521/0x11f0 [ 2294.418651][T24604] ext4_file_write_iter+0xa59/0x11f0 [ 2294.423960][T24604] ? ext4_file_write_iter+0x521/0x11f0 [ 2294.429404][T24604] do_iter_readv_writev+0x2de/0x380 [ 2294.434716][T24604] do_iter_write+0x192/0x5c0 [ 2294.439399][T24604] ? splice_from_pipe_next+0x34f/0x3b0 [ 2294.444836][T24604] ? kmalloc_array+0x2d/0x40 [ 2294.449425][T24604] vfs_iter_write+0x4c/0x70 [ 2294.453924][T24604] iter_file_splice_write+0x43a/0x790 [ 2294.459268][T24604] ? splice_from_pipe+0xd0/0xd0 [ 2294.464119][T24604] direct_splice_actor+0x80/0xa0 [ 2294.469031][T24604] splice_direct_to_actor+0x345/0x650 [ 2294.474381][T24604] ? do_splice_direct+0x190/0x190 [ 2294.479424][T24604] do_splice_direct+0x106/0x190 [ 2294.484251][T24604] do_sendfile+0x63e/0xbb0 [ 2294.488647][T24604] __x64_sys_sendfile64+0x102/0x140 [ 2294.493885][T24604] do_syscall_64+0x44/0xa0 [ 2294.500565][T24604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2294.506508][T24604] RIP: 0033:0x7f56c00b08d9 [ 2294.510911][T24604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.530509][T24604] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:07:56 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) 19:07:56 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8000, 0x6, 0xc7, 0x7fff, 0x8, "c6453ad91badbc62821ca020efabca38e0d489"}) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="4089f2ffffffffffffa0"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x2e) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:56 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300084700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2294.538994][T24604] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2294.547031][T24604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2294.554987][T24604] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.563021][T24604] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2294.570982][T24604] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:56 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x40000) io_setup(0x1, &(0x7f0000000180)=0x0) fdatasync(r0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x10) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:56 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 39) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:57 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 19:07:57 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:57 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() open(&(0x7f00000002c0)='./file0\x00', 0x400483, 0x1) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) gettid() write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'threaded\x00'}, {0x20, '++]\xbf('}, {0x20, '.:'}, {0x20, ')'}], 0xa, "c36dc5133ef53be596197b370d23263ba4e89176245da43f593dc1bf41c2d030bdecb774f284864405132067cc2f77dab4b9a4bf2f5e43eaa99e3f80358e71d99cd6cbe03735e4280614cf21282a45882558b2f2da8f14f1fd2f45ed546055bd54b25fecdd187cfa176454781ea94160605f31f70d0f8b2ceda0ce6912b1dbded31c277efb09"}, 0xa6) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x9, &(0x7f00000001c0)="2d41acd99454c2bb3b8f1dfa2dc6a2302d01b76a21de8f9ad9aa1082d6ae2c2c14340d4998588a0a85b443944c2992ad053e629ec60fa49eafb1f8bf205c4db3a58198357abbd34c6aba7ac9872883e05e69609fdc87ac6ef902e77d652b332d3b047b36bed14b15e35489cb49d653f5a5df0f82393efe2df48ddc6160baace7a14b240be866e9ad7d2d7beb8a0992aa038cff93c21ae29291f2aa0fb7ecdeb062342e33d8df48bd34e019fb1de621fc9059c45da6a67709b9af6b5fb512d5b64999db9237441cdab0fd") tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:57 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:57 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xfffc, r0, &(0x7f0000000200)="7139dd21ced2f37f866e270319c6578ec48f90533176f4a94d2dfb130d8bdd7b0cde2da2dee43a911ac2780c346c1935bc6d93c7d6cfb5260347a75e5bebcd5bf78a86d02406ff09ae00aff77464be1ec55fbc1da5e2546eb3b54e7829bcb14aad62bba900c77265a42b04292c6560d78b9bf240de95d961b391deb3e8ff03f9e8551f18aec6bb5849cd670b5fa7a3d678774cb09453cd964c13f8d1e45b3a13c37f311e4c5b39b41e52e04a64239c5a86621373e4ba9f121d6972a4b744969f29d5be54bb35f1102283af3bebd60c544def4f4291119d682e9fcf29abe043e85a5bddb62a71cc59e4b4b60d24477aa9da84ee8a195f3b", 0xf7, 0x3, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="587dda3981d4e83499d3460df644355a6216d48316af7b7fb96fb8be24498eacbb6fbfc8d88f7bf1fc50d8223f47697864ebb97241bbbffef85651ce27b8c079c277fd330a1cfa52e3d083725eed92512127d47657f07861e4424b6072bf1dd5b9568c740a71491867c34f9d0eb1a992c100d83e04ea520e712da0d87170", 0x7e, 0xe0e, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000400)="330ed1c970f09ed056fe9aa6cc1fee454ead0741e0d033f6981f90854ff4c0b350a26a1078d716de7afa5befcf43ffa238ec9b95a72d63f6a1e197b90fa42bd9948c74b663ff86253489f543927b8cf253809db3299ff6576092bfc7a524bf8a31669a6278986a11977b8f9102fc28e4b99322893c0d16729f4ab27336d0c47ef403a2b404e510981887d1e3070f09960dd7526acc76c7fcbb8d1c470e0a42a229ca91af4a066cdc26e34fafcb73", 0xae, 0x100000000000000, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x1, r2, &(0x7f0000000500)="d6f31344bc5c68a97938", 0xa, 0x4, 0x0, 0x3, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xfffe, r6, &(0x7f00000005c0)="f94a9e1e3d46a61fb841647cf6e4c6c951c12a7a11970eae7df3b14dd8ae08d78f6bd9d8f6b853e6b5866bdb0d7a5267f3b5db06aaf42167228d8f3185f79d9d67721b20efff421e2b087d1e093e13ed5b5ce900bd3d6f9332438f99a4b627cd8a8a34065eabc9ce8e7cf4c297d06c1fbd36eccf1020e67b570967d0a0862c969914a327b93356b510bcd0825f45641c59561259d76b34cf4ad972c9db9d901d9b8485bad574628fefba98255d8492a36bce8ead744b2ef19bd9a5eefbc9266e7b49c790f4b7848e322bfe275992c093288ad8b2db91c106267d8bed6f6cd7f0e7912d277c312ec015447d9028f50fb2e08a44947d5c49", 0xf7, 0x3ff, 0x0, 0x4, r3}]) ppoll(&(0x7f0000000040)=[{r3, 0x4a}, {r0, 0x8005}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000001c0)={[0x6]}, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x80400, 0x4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2295.107967][T24648] validate_nla: 25 callbacks suppressed [ 2295.107975][T24648] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:57 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 2295.165651][T24657] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2295.209129][T24663] FAULT_INJECTION: forcing a failure. [ 2295.209129][T24663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2295.220290][T24657] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2295.222364][T24663] CPU: 1 PID: 24663 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2295.240548][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.250621][T24663] Call Trace: [ 2295.253902][T24663] dump_stack_lvl+0xd6/0x122 [ 2295.258567][T24663] dump_stack+0x11/0x1b [ 2295.262806][T24663] should_fail+0x23c/0x250 [ 2295.267299][T24663] __alloc_pages+0x102/0x320 [ 2295.271970][T24663] alloc_pages+0x382/0x3d0 [ 2295.276405][T24663] __page_cache_alloc+0x4d/0xf0 [ 2295.281270][T24663] page_cache_ra_unbounded+0x1be/0x430 [ 2295.286873][T24663] ondemand_readahead+0x58c/0x7c0 [ 2295.291899][T24663] ? filemap_get_read_batch+0x3e2/0x410 [ 2295.297596][T24663] page_cache_sync_ra+0xaf/0xe0 [ 2295.302439][T24663] filemap_read+0x3ad/0x1220 [ 2295.307128][T24663] generic_file_read_iter+0x75/0x2c0 [ 2295.312416][T24663] ? __fsnotify_parent+0x340/0x440 [ 2295.317544][T24663] ext4_file_read_iter+0x1db/0x290 [ 2295.322715][T24663] generic_file_splice_read+0x24f/0x330 [ 2295.328243][T24663] ? splice_shrink_spd+0x60/0x60 [ 2295.333549][T24663] splice_direct_to_actor+0x2aa/0x650 [ 2295.338926][T24663] ? do_splice_direct+0x190/0x190 [ 2295.343928][T24663] do_splice_direct+0x106/0x190 [ 2295.348755][T24663] do_sendfile+0x63e/0xbb0 [ 2295.353170][T24663] __x64_sys_sendfile64+0x102/0x140 [ 2295.358385][T24663] do_syscall_64+0x44/0xa0 [ 2295.362871][T24663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2295.368782][T24663] RIP: 0033:0x7f56c00b08d9 [ 2295.373545][T24663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2295.393398][T24663] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2295.401835][T24663] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 19:07:57 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 19:07:57 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2295.409794][T24663] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2295.417757][T24663] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2295.425715][T24663] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2295.433679][T24663] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:57 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000a4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:57 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r0, 0x6, 0xffff, 0x401}) fallocate(r3, 0x71, 0x1, 0x9) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:57 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:57 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = dup(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x8020, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}, {@version_9p2000}], [{@euid_eq={'euid', 0x3d, r6}}, {@obj_user={'obj_user', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, '\xb2/*)*'}}, {@fowner_gt={'fowner>', r8}}, {@fsname={'fsname', 0x3d, '\xf0'}}]}}) [ 2295.585039][T24680] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2295.685064][T24692] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 40) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:58 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000b4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:58 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x90000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:58 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}], [{@subj_role={'subj_role', 0x3d, '*$:[(%^(.'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x30, 0x66, 0x65, 0x66, 0x32, 0x62, 0x64], 0x2d, [0x32, 0x63, 0x39, 0x65], 0x2d, [0x31, 0x65, 0x52, 0x35], 0x2d, [0x31, 0x50, 0x37, 0x66], 0x2d, [0x33, 0x35, 0x61, 0x35, 0x37, 0x32, 0x33, 0x5c]}}}]}}) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:58 executing program 0: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000181300034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:58 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x0) ptrace$setregs(0xf, r1, 0xffff, &(0x7f0000000080)="83b6ba972147a7eb97990cefb1a9013018f0033f2329b58da1c1bc563f53e19d8b6f96fddca19116550460a9e67e69c08bd6bdadb5f8f8ea4a4810e8a10cb237b89dc268d382bba96fce410f7b438e31ece37b03c3ce6bb5cf418c7c713bcadd2f0294401126a8b9fdc9f29e6176f78391b3cd5811ddd74f1ded523173a9746434184f631222a14b838765f92f03ac0a7a40a2229d143020a44f9adf611cb70b6b124e1a69144ab289598fabd2a15c") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2296.015529][T24706] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2296.032113][T24709] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 19:07:58 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) (fail_nth: 1) [ 2296.073581][T24715] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2296.121994][T24715] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2296.140261][T24716] FAULT_INJECTION: forcing a failure. [ 2296.140261][T24716] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.152879][T24716] CPU: 1 PID: 24716 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2296.160733][T24722] FAULT_INJECTION: forcing a failure. [ 2296.160733][T24722] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.163025][T24716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.163038][T24716] Call Trace: [ 2296.163044][T24716] dump_stack_lvl+0xd6/0x122 [ 2296.163067][T24716] dump_stack+0x11/0x1b [ 2296.163084][T24716] should_fail+0x23c/0x250 [ 2296.201975][T24716] ? mempool_alloc_slab+0x16/0x20 [ 2296.206995][T24716] __should_failslab+0x81/0x90 [ 2296.211743][T24716] should_failslab+0x5/0x20 [ 2296.216319][T24716] kmem_cache_alloc+0x4f/0x300 [ 2296.221062][T24716] mempool_alloc_slab+0x16/0x20 [ 2296.225893][T24716] ? mempool_free+0x130/0x130 [ 2296.230551][T24716] mempool_alloc+0x9d/0x310 [ 2296.235108][T24716] ? ext4_map_blocks+0x5a8/0xf00 [ 2296.240069][T24716] bio_alloc_bioset+0xcc/0x530 [ 2296.244814][T24716] ext4_mpage_readpages+0xe55/0x1140 [ 2296.250089][T24716] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2296.255967][T24716] ext4_readahead+0x99/0xa0 [ 2296.260455][T24716] read_pages+0xb6/0x540 [ 2296.264681][T24716] ? lru_cache_add+0x13e/0x150 [ 2296.269510][T24716] page_cache_ra_unbounded+0x3d2/0x430 [ 2296.274953][T24716] ondemand_readahead+0x58c/0x7c0 [ 2296.279973][T24716] ? filemap_get_read_batch+0x3e2/0x410 [ 2296.285536][T24716] page_cache_sync_ra+0xaf/0xe0 [ 2296.290371][T24716] filemap_read+0x3ad/0x1220 [ 2296.294982][T24716] generic_file_read_iter+0x75/0x2c0 [ 2296.300558][T24716] ? __fsnotify_parent+0x340/0x440 [ 2296.305675][T24716] ext4_file_read_iter+0x1db/0x290 [ 2296.310878][T24716] generic_file_splice_read+0x24f/0x330 [ 2296.316417][T24716] ? splice_shrink_spd+0x60/0x60 [ 2296.321419][T24716] splice_direct_to_actor+0x2aa/0x650 [ 2296.326785][T24716] ? do_splice_direct+0x190/0x190 [ 2296.331790][T24716] do_splice_direct+0x106/0x190 [ 2296.336620][T24716] do_sendfile+0x63e/0xbb0 [ 2296.341048][T24716] __x64_sys_sendfile64+0x102/0x140 [ 2296.346230][T24716] do_syscall_64+0x44/0xa0 [ 2296.350657][T24716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2296.356550][T24716] RIP: 0033:0x7f56c00b08d9 [ 2296.360951][T24716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.380540][T24716] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2296.388935][T24716] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2296.396894][T24716] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2296.404853][T24716] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.412815][T24716] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2296.420782][T24716] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 [ 2296.428742][T24722] CPU: 0 PID: 24722 Comm: syz-executor.0 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2296.438889][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.448983][T24722] Call Trace: [ 2296.452242][T24722] dump_stack_lvl+0xd6/0x122 [ 2296.456815][T24722] dump_stack+0x11/0x1b [ 2296.461045][T24722] should_fail+0x23c/0x250 [ 2296.465452][T24722] __should_failslab+0x81/0x90 [ 2296.470270][T24722] ? alloc_pipe_info+0xac/0x350 [ 2296.475353][T24722] should_failslab+0x5/0x20 [ 2296.479841][T24722] kmem_cache_alloc_trace+0x52/0x320 [ 2296.485243][T24722] alloc_pipe_info+0xac/0x350 [ 2296.489907][T24722] splice_direct_to_actor+0x5f7/0x650 [ 2296.495263][T24722] ? security_file_permission+0x7c/0xa0 [ 2296.500788][T24722] ? do_splice_direct+0x190/0x190 [ 2296.505806][T24722] ? security_file_permission+0x87/0xa0 [ 2296.511398][T24722] do_splice_direct+0x106/0x190 [ 2296.516328][T24722] do_sendfile+0x63e/0xbb0 [ 2296.520722][T24722] __x64_sys_sendfile64+0x102/0x140 [ 2296.525912][T24722] do_syscall_64+0x44/0xa0 [ 2296.530341][T24722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2296.536290][T24722] RIP: 0033:0x7f109a18c8d9 [ 2296.540691][T24722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.560276][T24722] RSP: 002b:00007f1097f04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:07:58 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r2, 0x0, 0x9) r3 = gettid() tkill(r3, 0xb) tkill(r3, 0x3a) open(&(0x7f0000000080)='./file1\x00', 0x501002, 0x0) tkill(r2, 0x10) r4 = gettid() tkill(r4, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x7fff, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="55ce9921b6c75c68780e5185b56ec128b8879c85c6c0c66633c979702e0ab8644dbdd8e3ac407dde94f6600092a6feac6d2806fd5d0cf1075cf2b5eb8437dabc069e8c11d898d132e8b58aeb1a9f6687308bb43760b4e6ac613f4d727d465ef85f1336e6ebe5ccee91cae5d28c3a95cbf23d8cc7e8e176bda4ed181434a7c5190a68d71943050c9eea51d99478762f3a626a6478", 0x94, 0x7}, {&(0x7f0000000300)="c5fad943e8ce15fadc139635c445e468a11b8bd17c72fa6286efb283137a9b16fed3f1dbc5658179cf01167741a070bac180abbdf789c4a4d7ab841f9920886b2d5518a865ae8536ca689c2de38b3fc63a90158be6681998079435aba71631508ce1b4d5a0ed2130628ee87ceb231686674442f5e34f", 0x76, 0xeec}, {&(0x7f00000003c0)="57a89f7d8d829d0cd362abf716ec963a8a86590d081a30a1bb115795b8c979344c2bfcc6faf0738348b294d228d5a0ac9be0f680e065f3663b3e13b716e7e8a33b8550fd63813e54d4932a294860ca88ab225946", 0x54, 0xe78}, {&(0x7f0000000440)="06086490b63e0d2bd873e18ccce6031658bddef4f8b7b3a43ae1f8fc796d393631419295fc20753928a7e878119a506258714ac0b55f8fecefea7a449cb33eda6fd00ceebd1fabc3cbabfb3d66d95b836adf070ba565accc8e52eb415929", 0x5e, 0xbdfd}, {&(0x7f00000004c0)="fff61b31ea9a383e5c65363127edcb06f2da8b1c113623d8688af4747cbcd1d9d66507a591e9496f6396856a73ee5f4a6a93c5940f89f9146c2e0f4c03fff78c866c1dec4cc20bbcbc5caafa4f6b4158d78502ad57fab5e260757fb8950ad98291b7cdb41850be1e3c5c5ccf5202d0503d0142bbd0f65afca264e7cf9f1874bac1ff5df5da137e60f7f4c13bbfbe8b3ac6f05a59ebf0ae9493021c5163fe1291d0095942ea22dbf2fc6865235c3cb9980179dfe9d8d80b724b72c9782f9170abd86e09", 0xc3, 0x4}, {&(0x7f00000005c0)="7eaf9b86fc69b35c20d9c581fcc497bebd3efcbd884c0320612f827f2d6b39b5df7af7b577b60837c2264750192857f81b404c2bc6d7f62a05855e35ef074030238b1c3c4c432e636efcbabdf7898ad22a310a6bd69a1cedb69eb247fa68bdd02c0fff4e3843d338ecf65815fdc30a7a95595c4eb3c4cce463c6aa87ca998526f090f8c0f781512a44c8716c5c2c45278aff13f8d1efdd0d506a4985de402226af0fce21f1429c2abe62eac4f7d5508ce83e8327a3bd726e64d0a44ce27d1329cb2c1295fbc4bd74bce864", 0xcb, 0x9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d696e5f62617463685f74696d653d3078303030303030303030303030303030362c6772706a71756f74613d2c71756f74612c67727069642c6a6f75726e616c5f6173796e635f636f6d6d69742c746573745f64756d6d795f656e6372797074696f6e2c64656275675f77616e745f65787472615f6973697a653d3078303030303030303030303030303831392c66736e616d653de02c2a2c646566636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c646f6e745f61707072616973652c686173682c736d61636b66737472616e736d7574653d21252c002a5ea9d6064bf0"]) rt_sigqueueinfo(r4, 0x1e, &(0x7f00000000c0)={0x1d, 0x5, 0x7}) wait4(r3, &(0x7f0000000780), 0x2, &(0x7f00000007c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$incfs(r5, &(0x7f0000000880)='.log\x00', 0x222040, 0x0) 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000c4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2296.568678][T24722] RAX: ffffffffffffffda RBX: 00007f109a290f60 RCX: 00007f109a18c8d9 [ 2296.576626][T24722] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2296.584578][T24722] RBP: 00007f1097f041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.592561][T24722] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001 [ 2296.600506][T24722] R13: 00007ffe88ea991f R14: 00007f1097f04300 R15: 0000000000022000 19:07:59 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r4, r0, 0x0, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:59 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x91000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2296.726381][T24731] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000d4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 41) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:07:59 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010004000000000000002f627572"], 0xe) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:59 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x92000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:59 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000e4700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2297.021482][T24759] FAULT_INJECTION: forcing a failure. [ 2297.021482][T24759] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.034142][T24759] CPU: 1 PID: 24759 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2297.044314][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.054376][T24759] Call Trace: [ 2297.057643][T24759] dump_stack_lvl+0xd6/0x122 [ 2297.062411][T24759] dump_stack+0x11/0x1b [ 2297.066568][T24759] should_fail+0x23c/0x250 [ 2297.070983][T24759] ? kmalloc_array+0x2d/0x40 [ 2297.075632][T24759] __should_failslab+0x81/0x90 [ 2297.080440][T24759] should_failslab+0x5/0x20 [ 2297.085373][T24759] __kmalloc+0x6f/0x350 [ 2297.089692][T24759] kmalloc_array+0x2d/0x40 [ 2297.094149][T24759] iter_file_splice_write+0xd5/0x790 [ 2297.099446][T24759] ? atime_needs_update+0x239/0x390 [ 2297.104696][T24759] ? touch_atime+0xe0/0x250 [ 2297.109188][T24759] ? generic_file_splice_read+0x2a9/0x330 [ 2297.114900][T24759] ? splice_from_pipe+0xd0/0xd0 [ 2297.119741][T24759] direct_splice_actor+0x80/0xa0 [ 2297.124675][T24759] splice_direct_to_actor+0x345/0x650 [ 2297.130040][T24759] ? do_splice_direct+0x190/0x190 [ 2297.135069][T24759] do_splice_direct+0x106/0x190 [ 2297.140006][T24759] do_sendfile+0x63e/0xbb0 [ 2297.144419][T24759] __x64_sys_sendfile64+0x102/0x140 [ 2297.149611][T24759] do_syscall_64+0x44/0xa0 [ 2297.154084][T24759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2297.159972][T24759] RIP: 0033:0x7f56c00b08d9 [ 2297.164380][T24759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2297.184055][T24759] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2297.192466][T24759] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2297.200482][T24759] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2297.208757][T24759] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300104700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2297.216866][T24759] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2297.224831][T24759] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:07:59 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:07:59 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) llistxattr(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)=""/162, 0xa2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt(r2, 0xfff, 0x5, &(0x7f00000007c0)=""/184, &(0x7f0000000880)=0xb8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) write$P9_RREADLINK(r5, &(0x7f00000008c0)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x3, 0x2, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1, r0}]) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000640)=""/138, 0x8a}], 0x8, 0xb9f2, 0x80000000) dup2(r3, r2) 19:07:59 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x93000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300114700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:07:59 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) gettid() r2 = gettid() wait4(r2, 0x0, 0x8, &(0x7f00000001c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:07:59 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300124700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 42) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:00 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) ftruncate(r0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f00001b5000/0x1000)=nil, 0x1000, 0x7ffffe, 0x20010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000200)='X', 0x1, 0x7, 0x0, 0x3, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9a, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0x100000001, 0x0, 0x0, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, &(0x7f00000002c0)="789e9a59b90e1692c9397aa383679c2985ec28f93de81446d9ffeddb8a0b458f6a6260f0024b245cd900c0721869a47d344ac7442076b53b52f97bafa9438f0caf7a5d7c8bff03c132b29fdfb523c32594b0e4573351ce26b311d0bdeff288ad5eedc46937115f48f42a8faf181e4ae617", 0x71, 0x2, 0x0, 0x2, r5}]) fallocate(r2, 0x0, 0x0, 0x1000f4) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1c7) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x0, 0xa99}]) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) syz_open_pts(r7, 0xa2400) 19:08:00 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x94000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:00 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034702bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:00 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 19:08:00 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034703bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2297.927004][T24815] FAULT_INJECTION: forcing a failure. [ 2297.927004][T24815] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.939685][T24815] CPU: 1 PID: 24815 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2297.949839][T24815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.959940][T24815] Call Trace: [ 2297.963213][T24815] dump_stack_lvl+0xd6/0x122 [ 2297.967811][T24815] dump_stack+0x11/0x1b [ 2297.971971][T24815] should_fail+0x23c/0x250 [ 2297.976414][T24815] __should_failslab+0x81/0x90 [ 2297.981184][T24815] ? __iomap_dio_rw+0x139/0x1010 [ 2297.986127][T24815] should_failslab+0x5/0x20 [ 2297.990692][T24815] kmem_cache_alloc_trace+0x52/0x320 [ 2297.995997][T24815] __iomap_dio_rw+0x139/0x1010 [ 2298.000763][T24815] ? kvm_sched_clock_read+0xd/0x20 [ 2298.005875][T24815] ? raw_spin_rq_unlock+0xf/0x20 [ 2298.010935][T24815] ? update_blocked_averages+0x650/0x690 [ 2298.016558][T24815] ? plist_check_list+0x151/0x160 [ 2298.021623][T24815] ? __cgroup_account_cputime+0x4f/0x110 [ 2298.027251][T24815] iomap_dio_rw+0x30/0x70 [ 2298.031601][T24815] ? ext4_file_write_iter+0x521/0x11f0 [ 2298.037056][T24815] ext4_file_write_iter+0xa59/0x11f0 [ 2298.042384][T24815] ? ext4_file_write_iter+0x521/0x11f0 [ 2298.047980][T24815] do_iter_readv_writev+0x2de/0x380 [ 2298.053189][T24815] do_iter_write+0x192/0x5c0 [ 2298.057772][T24815] ? splice_from_pipe_next+0x34f/0x3b0 [ 2298.063224][T24815] ? kmalloc_array+0x2d/0x40 [ 2298.067820][T24815] vfs_iter_write+0x4c/0x70 [ 2298.072322][T24815] iter_file_splice_write+0x43a/0x790 [ 2298.077775][T24815] ? splice_from_pipe+0xd0/0xd0 [ 2298.082612][T24815] direct_splice_actor+0x80/0xa0 [ 2298.087539][T24815] splice_direct_to_actor+0x345/0x650 [ 2298.092898][T24815] ? do_splice_direct+0x190/0x190 [ 2298.097987][T24815] do_splice_direct+0x106/0x190 [ 2298.102875][T24815] do_sendfile+0x63e/0xbb0 [ 2298.107296][T24815] __x64_sys_sendfile64+0x102/0x140 [ 2298.112597][T24815] do_syscall_64+0x44/0xa0 [ 2298.117019][T24815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2298.123000][T24815] RIP: 0033:0x7f56c00b08d9 [ 2298.127411][T24815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2298.147019][T24815] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2298.155437][T24815] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2298.163401][T24815] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:00 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x1, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2298.171350][T24815] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2298.179424][T24815] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2298.187395][T24815] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:00 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r10 = open(&(0x7f0000000980)='./bus\x00', 0x2200, 0x9) io_submit(r1, 0x9, &(0x7f0000000a80)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x101, r2, &(0x7f00000001c0)="1d288b09eef61a469e1c8e4d13724ed5b941dc060b24cd20ca5833f58262e04c1816be878ada0b6efafbb9fe7c092b81354c923d1d4633a97a42b61f298b37a05ba74c67c7eb6a1e2602a0655e8b8b0fa38e1e92a94cd6e3b9da194f7e5fbc06a3d8eeb41aeb451fc7eec886190289d7f9be9a5b2659187612ae5761deb5bbc5aaa3b7f1be7a1f9a5007fd51f04666a6e4d9572c2c5b7267d3e4959e3a67a736971347435f06525908ba50606d49fb0dcb8a75109369d66193d19ce4fc5dcde83822439806b567f58a8c346de1fe6ce33e88c4d88ca0495240dc00b5dc0cef4bf5", 0xe1, 0x1f, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000040)="47970d5d1fc10569679115c94fba2a11ce22da42146e5ae1102a7b58eeeb1b021572722a43eda98132d624e56be7dc6f7596f626502f4f1cbccccba68a001caba7c107dcec30cd92672380ba8d5553c68000644c161d1e0ea10fbe", 0x5b, 0x4, 0x0, 0x1, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2a7428e11f206842, 0x7f, r3, &(0x7f0000000300)="b9e21bc6ecf78dd4db5ab327510711446b010c82e1d3fa63fcdcc2b2d2e600b6ea9bcfd114e516cf73ccd437d9d8f4a51b56bdce432853143e605a77", 0x3c, 0x9, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f00000003c0)="c873ba32b5e1def1f45c66002acbcf9e53983fc06cf809f95213b10ea12cde3150910d1ea0fb2de59fb95302cd1feb37f55a98d82f591917b7a0c58e20dcbd9de894e0d163f78436d488f66f419887773d36ff5fcf2cdd098ff32172f3104e3640d2ff378f59fd31e9781fdd82b7bfffea18bc3dfae33c279e2e93816a136a3b3cb444f965ac8f08750fe9bcfe05", 0x8e, 0x398, 0x0, 0x1, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x32c398b984add94e, 0x40, r5, &(0x7f0000000580)="f50ad610f1c2f7a6766c514708764914a50a7f6eeb19aaf47026801d178d036a0c5cf168c81aa45bbe729c6a27fd24c87190f150be39ba0a45e2c3945ee7c7f122a0761f84ba997cf98544c1a10d06f1502ae278651ad53b7c12febea8ef20e6a9125e265a84f2a152282665f0a1990810b3859147f52bc47c76ec7bb348dacafdaf829640fd600c71baa98109c386d1c3402f8d2fbfbbad9a045010aa3c17e0a28fff8ffd1c2e92350aab6789fa112dc4183f5c0000b7978b121840c8f19d48f698f7ade04cba5091c8883406bef1b2e8514497ec2e3301a61847b99875c76293291e545c4faf6a554fe6227c7dfb1b2eb2011a330f69a330fdeb35c6b7d1", 0xff, 0x2, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f00000007c0)="3c77163feca4c681c35a9125a4f894fb63591ad187fa6357c7241b2267321cbecf01d8a8653b36e4e1f7502b421bc72f59be2d607e25f2aae7171ed6abdf2d6fd0ef2d23369fa0a7293a563b5f172db3690f6cfd9bb31ac47ed58943d30a759f8f82a7ec45e3beb95f17900d9644e936d21c132118fddf7cdd3df7cf9185efef925005b5ba04989dc32adf38793ebdb5c2f93f42d6d37e80c3b6d6c08d4940e09e52e066d60a537397f3e3fcc9e354d80b661aa18d7e94c8762742a23470cb670565ca7cd9344b001e9cacacf16a20342ec8d5737a7a5e22a3bbf9", 0xdb, 0x8, 0x0, 0x5, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x3ff, r7, &(0x7f0000000700)="6e8acac92f9481d0d057ec54554ea62d5713b9f748994607d8ed6871f1c1d5d37fbe0c491e35daebcd611d05126da6c60f7568f46f06", 0x36, 0x100000000, 0x0, 0x3, r9}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000008c0)="274b752e9546f5ff8b5694dbe2d56b5469b5e9a69d0a9f07cc754246b805f143af1e19a4d00ae434961d176ae0f7cc451a720620e79e71f4547541c0af0e2b3e01cc7461013562854124b11d82eb91eb39672b009d09fd0c3407ee044caf9c52faad0e63f3fe6dab3378e8b4d9c1c1268708ce59c7f2772c6453d68a692e3b4ea4dc9fd1b231432f2a4b0e9ee3998156deb59c0c6ff51255ee81b16f53571e835320a7f65c", 0xa5, 0x7, 0x0, 0x1, r10}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000a00)="636caf997e09f0b62e", 0x9, 0x100, 0x0, 0x2}]) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:00 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034704bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:00 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x95000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:00 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) syz_open_procfs(r1, &(0x7f0000000080)='pagemap\x00') ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:00 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034705bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x2e55e12d5b4fdd1a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 43) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:01 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x96000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034706bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffffffffffff) 19:08:01 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000800000) r3 = gettid() tkill(r3, 0xb) ptrace$setsig(0x4203, r3, 0x6, &(0x7f0000000380)={0x9, 0x1, 0x8001}) r4 = accept4(r1, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000000)=0x80, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/158, 0x9e}], 0x2, 0x0, 0x8) [ 2298.825566][T24880] FAULT_INJECTION: forcing a failure. [ 2298.825566][T24880] name failslab, interval 1, probability 0, space 0, times 0 [ 2298.838258][T24880] CPU: 1 PID: 24880 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2298.848411][T24880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.858458][T24880] Call Trace: [ 2298.861753][T24880] dump_stack_lvl+0xd6/0x122 [ 2298.866381][T24880] dump_stack+0x11/0x1b [ 2298.870623][T24880] should_fail+0x23c/0x250 [ 2298.875384][T24880] ? mempool_alloc_slab+0x16/0x20 [ 2298.880403][T24880] __should_failslab+0x81/0x90 [ 2298.885185][T24880] should_failslab+0x5/0x20 [ 2298.889703][T24880] kmem_cache_alloc+0x4f/0x300 [ 2298.894468][T24880] ? ext4_inode_block_valid+0x1cc/0x210 [ 2298.900060][T24880] mempool_alloc_slab+0x16/0x20 [ 2298.904906][T24880] ? mempool_free+0x130/0x130 [ 2298.909578][T24880] mempool_alloc+0x9d/0x310 [ 2298.914087][T24880] bio_alloc_bioset+0xcc/0x530 [ 2298.918861][T24880] ? iov_iter_alignment+0x34b/0x370 [ 2298.924056][T24880] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2298.929149][T24880] __iomap_dio_rw+0x8d8/0x1010 [ 2298.933931][T24880] ? raw_spin_rq_unlock+0x1/0x20 [ 2298.938866][T24880] iomap_dio_rw+0x30/0x70 [ 2298.943197][T24880] ? ext4_file_write_iter+0x521/0x11f0 [ 2298.948649][T24880] ext4_file_write_iter+0xa59/0x11f0 [ 2298.953971][T24880] ? ext4_file_write_iter+0x521/0x11f0 [ 2298.959423][T24880] do_iter_readv_writev+0x2de/0x380 [ 2298.964667][T24880] do_iter_write+0x192/0x5c0 [ 2298.969308][T24880] ? splice_from_pipe_next+0x34f/0x3b0 [ 2298.974754][T24880] ? kmalloc_array+0x2d/0x40 [ 2298.979414][T24880] vfs_iter_write+0x4c/0x70 [ 2298.983985][T24880] iter_file_splice_write+0x43a/0x790 [ 2298.989368][T24880] ? splice_from_pipe+0xd0/0xd0 [ 2298.994209][T24880] direct_splice_actor+0x80/0xa0 [ 2298.999134][T24880] splice_direct_to_actor+0x345/0x650 [ 2299.004545][T24880] ? do_splice_direct+0x190/0x190 [ 2299.009580][T24880] do_splice_direct+0x106/0x190 [ 2299.014421][T24880] do_sendfile+0x63e/0xbb0 [ 2299.018858][T24880] __x64_sys_sendfile64+0x102/0x140 [ 2299.024056][T24880] do_syscall_64+0x44/0xa0 [ 2299.028518][T24880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2299.034461][T24880] RIP: 0033:0x7f56c00b08d9 [ 2299.038921][T24880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.058641][T24880] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2299.067042][T24880] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 19:08:01 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000001c0)) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000003c0)={0x0, 0xfb, 0x1015, 0x4, 0x3f, "693e4b06b0e87218ed4784e5e87fc546", "ff113c1c19763798f351ef3f480678e5dba43d734903b1254088d632643941b99257045dc84cbf3afd52d5a6c173e12171f0b12f05134a986e5f5ca3941c882599ed89a17c805087406b965e9c3cf745ee324ac5d5d7fd3396c08604e80aa0920115aa6a601225ba629d1e55988974b09b6255959b74f0fd047d2de30145b683ec8bee5bb5e01835db08d3a3c228ca5bac8e562801d1e01da14451cd7c820450b8c3ed57301726b1b0f8f2e2601b53a5c36d2f45895dafab98de6682324e72f5f240880c5be980e449b878bee3c3929fb6962576290ef99bf5529c32c95393d611d0b5cd98c699a404e692bc9c577adf0c567fa3db3b565299128ebe485f0bdd112b5759395e329bbff8c6e6b2795378e9dd1c2488254b84cc202656ac4bbd556db86cf8957aaaece633228c9db0fc63cbad3ad7f4e5a6d585ba75b76ef94a622c4b6ad5ad56be527e942934927b1d98e4008f2798301999e043e6ced850f76b9b413047a58014e16365e439be7e847def3a3257f615a2355dae260f58b7dd4111b8249633050109e2999bdfe8cd069c0877b51cd45cb541329c5e33c9d6513b78db5c7a7f07c6b7033d388d6f6bc9231c6d6956653e37e7ee82d98c46d8cbdd59fdcee6ef4fd1823e4f55c788ef313f190ba138847b865bff13536872aa6fea70f243ea10fd80b5908257f4bc0c5294e7eea57277e7b6cf16b126d4b5975405a426c3c69be4360abcc557650bd338372468531aadf88ebacdd7c7b943729c734be997f19317e17241453447c607e243949ca5100ec11466a3b216662d6560c60be69b5ad6a2db432774fa6288d7379668dc33dced9b9e42386713ee7ad1001da9211ca89ed0c80debd0832fd55036d20fd9b57a4a57a6556a3a984873003717d5f398faa4b5509f873354e88239d84e31c3e82aaa7e9d70693f3c30fc70f3a0899218329d24e4f5adc9fafa70c11c3f6dc2a131527d3a5c778a4120980ffecb38c6d8ca688bf999850dd87116bb886640ae93695adf4dd6006c32570c3e721eca076656199cb16263d2b716903d061c78c71a45bcf11a22fae24fd376c15c0b57d546d5899d9867c8099486ef093d1773d46c4c234b90cee922488ab37dc92b77ac75af032dddd7734595aa7cd5115309705fc0008db2d7c5dd77fd9a5addf4144a693dd6a765194d366fb3bea7446c1d8b8a76952df47456b63242c194b548c1c0366d3b20365d3bfe4ec668ce4aeafac645a5cee954952e11262f7a92a6a38a7cd14bf4f5448d888dc635f96f6303c50fca8de04b8ad55afdeac3e1cd9c04999c98958169d11c059273cfab1909d7a019b9b162b6bec4399498d34b672cb8819e0a47b2675f9ec25cc4009f1c8ced066b1ecedf0ac05748ab1c3129f3fc9a1f6445c76f5ce92f6f9b4b1b2513db7b9580243bb2cedee3ffc10581ece2787ff7d5419a4d82a81e5f3270be3e40e47978c12cac13c18587eaa195db5ebbe6961542ba5b9cf4cece1d3fe9d179e5bde33618e5f92a8a89dcebc6ad0855ecc082454d5b70bd804243591cd13309edeec5e2b9bce0258d777ccb730a254a12ade993e051265bcc38b03aae1c3e16facbd9b115dae465c9da043502b79138044295d392b7d9bcb05c96da6259ed365dd63a40308cdf0d095be73f9ff3f49b5a366fea6069a130bb8eb249545f729a196305e1cd7986311fac09831880eea1ac37b2f8bdc158812ac4a994bcc36d2382393c913619559e58bccad85aa53700d63461e09f66c38330aa488a9d939f6a02412e5d078ff0460ccc526eaccc478c18b3650daeb2c16096c48badf9bc76420921e6429907941887df1fa8a15208cd3c0b1d40508b94370d5b0a95c212ab96e7222745a8ac153be9cace3a5096f510eb0388eb9c6ffe95dcecedafa2dc3e455b0839495f931861d8a33c25a9f048f466f8469b298f467ebef53f855ff9f92e872a21bdff2d7572eb9a21d38338d0bbdf25438626c4de1143a14e4acaad336649574c063352b7666f872173515ff3481451eb84a96e63877323a91dae52b19be0c653fa74d6ffce2430e5697c972007506125c5183ab4a6687de708d1dfe8bdeb9632793d639041d6bff3babbec3e00c926c4b962810e4ae2e545579f909ea664d9f971ab2c460e0e0505457460756c0707dbcaf69d10591729d1e5e27c776195f0547ec75f14781e5bfe2046cc07dd6fc1a3844ce0b9fc7826a17b6da2f1255a2911885f1e6b9ff764a3b6b1f33c9f9381428b8b701b7125193a69856bbb08eb66990810d821cc73c0ebaeb523c920bddb000e8bfae09b09f6026f95682e89d8e07107c7d5a3070346dfe01b3b58b5151e3f63775bc96a40bab861bc54b1b578c25b5c6b20ef689b208c14f8d3021f26cc9c9a62a40f38a9b2e03e458569e137da34a5418a94f1feefef1c28d39dc449c95a344c9b32cb06d56a9486baad1ad229133a9ffca07e816cb2e9c06317edff816ac4301620409e6c9a5513a9239bd70466f545428f17a6ca24e44b942bf8ddd4c459da4c5c029dc14f5aa4e7fb8ed00ce8a8437ccf300521adea66d01d249847e812401fe13e3dc7f0bae4b3f08917ab52d99ea17f11b842fffb21a4a3c859bc0ab1ef23a29b4a3fee414a505e3ee1c1df4a1b7bb6283e7888e736cdf7d3bc517447bad138b891ff6de56b2b66d242a41d99152012687a299fa4c29e366b94f521c1935c0cb0630edba2f3c7d140d73c64e80f8d97b3350ef408f7b2649db800aef7cb69b5cb5588cf2ff136185e285f16fc2d7a05e7dbe6d8892e8d7ad0d97e765d34870952e63e754e16220225ee6a875a61c10d1d6628a9eecd56768d3f16b03afe7e0ee31fcfb67d97f3c961444c889e16e87d8fc7c0e0ebb507f237edc3891063a9ca023b4fe8d337fd2f0cbf30ce3830da1a8132832bccf1c4ee4bf0f5d201e3f82337adec2a7ec94f8e09bacac02675d061b7fe3082aca622b4bab0db65b55baceb61f6fe9a9f8cbf4b07a2522db5dd3531b1a1508563a2bfbd6645bc8cd5e72cd5ce510f5d6a63ae2e8dc411cf3ba7ce4a56138f1fb3b27309d593e528697ace1c8b8e1ba50c46b4c39095a67e80e0fffc041407c48c962f6665c219c8f0582bffbccc6f787a74b3bb50045108bed0ed36288b41378453bb57d639286ea1f70e160fdede556ef15d1652b04a853d32d78f0c98c61f908a6ed717442ecdffb62a2b4dd71e8966427f0cee4f9a721b5aeee7a904abe4af509913f02ee1e6ea4226212642a8fe25711ee829122168ca9bf89bc8f12a6c10a7d4c178d619651ad462a621579c17b1869edfc175033071fd8376a5a45fd6eae2e13c8d8b258ef13d9511ff2498859655c9be8cbf16d1abf7eac4912c1be3e533b8b828dc66ac08013a37cf72f0aa294b9d4d8d732e65cf52b75cdaf0fefac33b81d2c6d4ac23105b880d881e044a0467a3fd2081e6bfc70af9e0d5ce8e17c6b1e97c1c4d9f576da4839a464303480eddf56e4726a163e36b0e533d345456ae476c8778a17899c29008a5c728f926a2b0b98e9a7a57c283c20a7690387d82170c27c8ab48d20c199a3f88f21b736912585baeaf54a816dd8c4ddd605ccc268118a71cc5effe923e8510b93c31d3dbd6e669f83c5044de1365480efd0d1a322cb3ebefc2a7887e9c52a44a810767798232a9fab0e35d74c6dbe1800c49008ae408fc2c1ed8253e2ff00b6795745adc6dddab4381d913c3a5dabb25d9bf04843b9e4701ab4f48263454c1edffe115ef1ae363c47759aa9fdce21cbb69529dbc9bee3ae93d83452f48c775ee09c71a7dc312c98b8d9095d398e1bc400bb8a1b0f1261c5dadfce69b1b73f65bd6d3682da486fcf11f6f7a5535a3d5343c97c966eace9a5cb404b2774b1040dda54c91bfba5c75f94b8970b44191db5fb95748acd815b98e2180a3c03d52de9505acde8ac8cbcfb85e52c653ed1896439cfadf000042bec071c91c986e088b0aaad0d4469b34d4f72117f8bc622bbb38457d68582e923d403264bee6d5217c57ecdc6289238aca3ea00d2dc5b174e1b1e34826f803f10ac13edeb05c2af1072f572bd366cd6314eb7bb94a41981dd7b46b41590a2d07f19b7162bffe05ccfce26782be2af65a867113ccb712c12cef8adf294d2596efa5dc9a91bec5733f893e12066a4f433acefb5e41b4b62dcb3e1b92699d045fa54f5716b21f87112ef2bc65a43e3706bae5a81dc3cd919206378887f2b64e605c3e25cd851c82566fdba5a72c41f2b2881b28cfe26a82ca026c1bcda34755fa3c2e3ccef8ad810fc99e637dbda14c147b12d91008406acb3632b36393c4a43bb248ec05fdaa34f770b3dd87a042eeddf5b106e7122c00047d5cc93ffe27838e07bc4d9899b0ba4c6bd083613ea30b08e720d8bb892741a8e0980d906a5e79954b537586721a4760f0fcd4cc57b239505fa0b915e6f58ee978ce688b2451557f7480d9db7a4c88c6a8d713e63f1c30f096ff2decb641d3644edafaef82b4ebdde14949199b4a54656677719146a3cf5840e955bff70585a154bf968812914e574066ecd38480e3a73833d38fed460be20be8d0312a75c562cc53cc7c692879d54dbc90f765ea01e654f336699ce1d131c420b67e7825f865732b45f744e9dde1ec7159ac1412b24a40f176e2e7210a68c3c7bccd63cc4662cb0aa91b1f6d927330d9bfd5f6a35bdec1910987ccc1682a38a3675b8052dfd8cda4ef7450072dbc7852650b9a8a7810455b0116d1bde1df040007d7094ef14b27ca8adaa9ea7c20c27642585f49649487759dba6ef527456404b1c84dc5075ff63399ceac57b27b0e201182327f649775827838606aed89536ba1f0d336aeb482e11c914f974bc22ed73292aa9c17f5e0a5c7d6510bd875a71fe9574761fcc846175bbab83ea6c06302273470543076a88417c15b795eb26b2ce2a61ec619017eed9e15e9f77313d4a75a33f1297b915eaebb4e3a931fd35cbfd05caf78ac2ed6dfd260b6c278c0d7a0bb473d3d9838efb13d4b61942c18afe7d09b60cb3f7e885b83df80ec81b0b71bde6eecebdd745588704e5a56734d58d9f683a2883661154a19fb3d1a22c4695d71ed7703a94fb3724c1cb543b9b5d8a12148751c547b7d6028a55d26b81d0e40ce00848a5dbbea8a48477bf6fff8339b864a98ca159ac63bd9317e1331d98d5009af7282bc7713d4ba39119b35a82d150724af3284e1f33ec17760e3f9f446a1043ba18e83198505435a355aa032e20692bbbaec45f78ded363235cba123c81da65b718ec1ecc51be4b26cf18e06601d180e29fe3da944110f3b13b0f8d33245075df2a78dc2d891d4dd3219e70a1201931074c48ec96b599e3e022571001da6d96ba703dd12a647711904861bb9a92c5fb34dc2deedf7853a50ddb0eb6d7f9cbb541b447278b15cea71268bce8d99874c09e4b24daac82104d977d32cc109e8d15c6ea46e8a554cb3b6dd0e4ce6e51fdce91270691d7af86990059324a527324d355b2866946df34210c7688e7ce5ca0e32cccaed29c694a667b50d692fd2f3717dedf4a8d72cd0c2a5f3e73e697df4ac8902515a891c02480b413f57aefa9220a1ae2843c93df554933542c3fdf54e780d8992daabe40fe0ed45b17b63a9245ff1051e80cd6c2aa7a4275c10052779e5f42078edb8205eea900a1e6c9d26719f4a8e8d95b22bbd496fa6003a4b3ed435db93a15c0fa3f42223757ddb15e145943ead8cb96f6f332fef49da9b182006fd20cda3cc242901022957ab477fbcd161cf077e38"}, 0x1015, 0x3) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:01 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034707bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x97000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2299.075009][T24880] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2299.083064][T24880] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.091027][T24880] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2299.099018][T24880] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:01 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) openat(r2, &(0x7f0000000000)='./bus\x00', 0x141800, 0xc9) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034708bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x98000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034709bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 44) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:01 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xa12e, 0x101002) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003470abb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:01 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x99000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:01 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) waitid(0x0, r0, &(0x7f0000000280), 0x40000000, &(0x7f00000001c0)) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2299.747053][T24937] FAULT_INJECTION: forcing a failure. [ 2299.747053][T24937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2299.760302][T24937] CPU: 1 PID: 24937 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2299.770450][T24937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.780498][T24937] Call Trace: [ 2299.783774][T24937] dump_stack_lvl+0xd6/0x122 [ 2299.788388][T24937] dump_stack+0x11/0x1b [ 2299.792543][T24937] should_fail+0x23c/0x250 [ 2299.796957][T24937] __alloc_pages+0x102/0x320 [ 2299.801553][T24937] alloc_pages+0x382/0x3d0 [ 2299.806613][T24937] __page_cache_alloc+0x4d/0xf0 [ 2299.811482][T24937] page_cache_ra_unbounded+0x1be/0x430 [ 2299.817051][T24937] ondemand_readahead+0x58c/0x7c0 [ 2299.822078][T24937] ? filemap_get_read_batch+0x3e2/0x410 [ 2299.827656][T24937] page_cache_sync_ra+0xaf/0xe0 [ 2299.832513][T24937] filemap_read+0x3ad/0x1220 [ 2299.837104][T24937] generic_file_read_iter+0x75/0x2c0 [ 2299.842397][T24937] ? __fsnotify_parent+0x340/0x440 [ 2299.847508][T24937] ext4_file_read_iter+0x1db/0x290 [ 2299.852696][T24937] generic_file_splice_read+0x24f/0x330 [ 2299.858237][T24937] ? splice_shrink_spd+0x60/0x60 [ 2299.863187][T24937] splice_direct_to_actor+0x2aa/0x650 [ 2299.868557][T24937] ? do_splice_direct+0x190/0x190 [ 2299.873625][T24937] do_splice_direct+0x106/0x190 [ 2299.878473][T24937] do_sendfile+0x63e/0xbb0 [ 2299.882926][T24937] __x64_sys_sendfile64+0x102/0x140 [ 2299.888117][T24937] do_syscall_64+0x44/0xa0 [ 2299.892527][T24937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2299.898607][T24937] RIP: 0033:0x7f56c00b08d9 [ 2299.903030][T24937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.922703][T24937] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2299.931113][T24937] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2299.939082][T24937] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2299.947051][T24937] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.955018][T24937] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2299.963050][T24937] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:02 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003470bbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:02 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:02 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) clone3(&(0x7f0000000700)={0x4080400, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x8}, &(0x7f0000000540)=""/206, 0xce, &(0x7f0000000640)=""/77, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r2}}, 0x58) io_submit(0x0, 0x7, &(0x7f0000002880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x80, r0, &(0x7f00000000c0)="77323f9fec540891b9c56fc3e15efcb0fae845d19c", 0x15, 0x7d}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f00000001c0)="839a77210d9edbe1768e3e35842450d6710d787ccc6a566c16b6ff9e9710fc5202cb185af92158c234ffd9da39b6f6c47bc079974e760b598bbaf76f8b0f", 0x3e, 0x7fff, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000000240)="63e5e243a2b1a83c1b7fe067bf67447c86abcd2c935eb0b8f19cd684efba4f606bfc1d1e6be894bbb05df924af3123bd42e59991997ddb43e900b3f49eacbfbf45c8b787b309245cb9b468939c3760b101974ee600adba8b8717afa3012575eeceea6ab8dd116b2b91c5d9424b30ffc667058869ae32620fc532651554344ddd26a3daaed5f5a439a7939672328d0307f49e5ffc9cd0dbc3364d15c9812ab7d3bd4d7e1699561f3ae90c853492dd25dca56025de294f115753c20d1a8d3cca6066b786c0fb9ef13a623412824c1f51beb9462f489f4037d967a16a0a5139986c3737", 0xe2, 0x8, 0x0, 0x0, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x1ff, r2, &(0x7f0000000380)="c0b0e989ab5651c15941bacbbb3627626e493dc0e77dc3699528b93b357abf668d239d3490acbac741e1652596b58ad294b0aca987b8aa4986b9bbc8bd95ae899870e33e808ea28809e74dbcddd15acc472dd2224a2804cc2312c59133374c6c75c3dc8231e856a90274106e8fb1", 0x6e, 0xfffffffffffffff7, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r2, &(0x7f00000007c0)="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", 0x1000, 0x80000000, 0x0, 0x2}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r8, &(0x7f00000017c0)="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", 0x1000, 0x7}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, &(0x7f0000002800)="edfb0f77d056f2abcd6e8e1d6f56f20846d4e38f2e8bd647736a572fa216daf54e555053f6f1492bdb206be21369204010e33626add704d72874ef68dad9d9eb", 0x40, 0x0, 0x0, 0x3}]) io_submit(r1, 0x0, &(0x7f0000000540)) [ 2300.161358][T24947] validate_nla: 40 callbacks suppressed [ 2300.161366][T24947] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2300.222450][T24949] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2300.262133][T24949] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:02 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:02 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:02 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003470cbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:02 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = getpgid(0x0) ptrace$cont(0x9, r0, 0x10000, 0x3fa) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c34c2, 0x89) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) wait4(r1, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) prlimit64(r1, 0xf, &(0x7f0000000200)={0x1f, 0x9}, &(0x7f0000000240)) 19:08:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 45) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:02 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = gettid() tkill(r3, 0xb) wait4(r3, &(0x7f00000000c0), 0x80000000, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:02 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001c40)={{r4}, r3, 0x1a, @inherit={0x78, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYBLOB="68f827d0a9421a39e5c101fa603577febe4c246f81beabbc659f5cf31b5830340262571855afdd0000c7e3c64758b6aa252fe19e1b2e44938e903d22bea750b4340bf2794d3ea8f8d855491005346df5eddf64f2807d277122172ee809818d0af27283836c213fa9dc63efef0d6f8913fd73933a87bd6efc9535f1d537defdddfb2c5496c6ce615f788e9ff3c6fe02d039c61738178927521bcd4cd84bf918f17ff858781849959a22bccaeaa72420b02b2c77b313c33b026200c49d7a3c231f555a5ed896ed0b01a34e985e6c548f2b874867399fddf165cfb86eaaf40289e718ae090e99dc692db581c0a012ca3b24", @ANYRES32=r2, @ANYRESDEC]}, @subvolid}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001c40)={{r8}, r7, 0x1a, @inherit={0x78, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYBLOB="68f827d0a9421a39e5c101fa603577febe4c246f81beabbc659f5cf31b5830340262571855afdd0000c7e3c64758b6aa252fe19e1b2e44938e903d22bea750b4340bf2794d3ea8f8d855491005346df5eddf64f2807d277122172ee809818d0af27283836c213fa9dc63efef0d6f8913fd73933a87bd6efc9535f1d537defdddfb2c5496c6ce615f788e9ff3c6fe02d039c61738178927521bcd4cd84bf918f17ff858781849959a22bccaeaa72420b02b2c77b313c33b026200c49d7a3c231f555a5ed896ed0b01a34e985e6c548f2b874867399fddf165cfb86eaaf40289e718ae090e99dc692db581c0a012ca3b24", @ANYRES32=r6, @ANYRESDEC]}, @subvolid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"78f15b4ff75f3941199c6b82016829c8", r3, r7, {0x8, 0x5}, {0xff, 0x3}, 0x13, [0x2, 0x7fff, 0x1, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x10000, 0x7ff, 0x8, 0x2, 0x6, 0x0, 0x0, 0x3]}) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2300.460894][T24970] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:02 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:02 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r6, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r8, 0x0, r8) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000000)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r0]}}], 0x118, 0x24040010}, 0x20006000) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2300.535573][T24978] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2300.618186][T24978] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2300.648591][T24988] FAULT_INJECTION: forcing a failure. [ 2300.648591][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.661227][T24988] CPU: 1 PID: 24988 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2300.671375][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.681509][T24988] Call Trace: [ 2300.684775][T24988] dump_stack_lvl+0xd6/0x122 [ 2300.689445][T24988] dump_stack+0x11/0x1b [ 2300.693596][T24988] should_fail+0x23c/0x250 [ 2300.698001][T24988] ? mempool_alloc_slab+0x16/0x20 [ 2300.703023][T24988] __should_failslab+0x81/0x90 [ 2300.707784][T24988] should_failslab+0x5/0x20 [ 2300.712298][T24988] kmem_cache_alloc+0x4f/0x300 [ 2300.717081][T24988] mempool_alloc_slab+0x16/0x20 [ 2300.721924][T24988] ? mempool_free+0x130/0x130 [ 2300.726605][T24988] mempool_alloc+0x9d/0x310 [ 2300.731098][T24988] ? ext4_map_blocks+0x5a8/0xf00 [ 2300.736028][T24988] bio_alloc_bioset+0xcc/0x530 [ 2300.740785][T24988] ext4_mpage_readpages+0xe55/0x1140 [ 2300.746070][T24988] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2300.751980][T24988] ext4_readahead+0x99/0xa0 [ 2300.756505][T24988] read_pages+0xb6/0x540 [ 2300.760737][T24988] ? lru_cache_add+0x13e/0x150 [ 2300.765516][T24988] page_cache_ra_unbounded+0x3d2/0x430 [ 2300.770971][T24988] ondemand_readahead+0x58c/0x7c0 [ 2300.776025][T24988] ? filemap_get_read_batch+0x3e2/0x410 [ 2300.781610][T24988] page_cache_sync_ra+0xaf/0xe0 [ 2300.786455][T24988] filemap_read+0x3ad/0x1220 [ 2300.791046][T24988] generic_file_read_iter+0x75/0x2c0 [ 2300.796326][T24988] ? __fsnotify_parent+0x340/0x440 [ 2300.801429][T24988] ext4_file_read_iter+0x1db/0x290 [ 2300.806563][T24988] generic_file_splice_read+0x24f/0x330 [ 2300.812118][T24988] ? splice_shrink_spd+0x60/0x60 [ 2300.817051][T24988] splice_direct_to_actor+0x2aa/0x650 [ 2300.822411][T24988] ? do_splice_direct+0x190/0x190 [ 2300.827439][T24988] do_splice_direct+0x106/0x190 [ 2300.832362][T24988] do_sendfile+0x63e/0xbb0 [ 2300.836843][T24988] __x64_sys_sendfile64+0x102/0x140 [ 2300.842174][T24988] do_syscall_64+0x44/0xa0 [ 2300.846591][T24988] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2300.852520][T24988] RIP: 0033:0x7f56c00b08d9 [ 2300.856922][T24988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.880110][T24988] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2300.888510][T24988] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2300.896469][T24988] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2300.904433][T24988] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:08:03 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003470dbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2300.912394][T24988] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2300.920371][T24988] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:03 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) clone3(&(0x7f0000000380)={0x2010000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000001c0)=""/177, 0xb1, &(0x7f0000000280)=""/170, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) close(r1) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) unlink(&(0x7f0000000400)='./bus\x00') io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:03 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2301.078154][T24999] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2301.152004][T25002] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:03 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x282) [ 2301.207813][T25002] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:03 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_uring_enter(r2, 0x4b9e, 0x49d3, 0x1, &(0x7f00000001c0), 0x8) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="f3a08ae6127866a22a5a43fd6f94b58234ff141e3597f984ee5ccdb4e9334740d424e5c1c52b5b258cf2cb7eee72efd99efb88ae20bb8b6460f377356349570531a6fefa90c816788de9e809d0d8bb3e6a4d1e1f6dc6d49be4a87a5d4ad5652fdd691942e55a62f7eb24ccea3e0348642a4b8084d824a75a94b9fb8f9e7a540ff321156f", 0x84, 0x0, 0x0, 0x1}]) 19:08:03 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:03 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003470ebb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 46) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:03 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="90c6050000ee2ecd019f009f5f000000f006", @ANYRES16=r0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x400005d) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 2301.438208][T25018] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:03 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034710bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2301.548867][T25033] FAULT_INJECTION: forcing a failure. [ 2301.548867][T25033] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.561487][T25033] CPU: 1 PID: 25033 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2301.571634][T25033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.581687][T25033] Call Trace: [ 2301.584975][T25033] dump_stack_lvl+0xd6/0x122 [ 2301.589568][T25033] dump_stack+0x11/0x1b [ 2301.593718][T25033] should_fail+0x23c/0x250 [ 2301.598131][T25033] ? kmalloc_array+0x2d/0x40 [ 2301.602726][T25033] __should_failslab+0x81/0x90 [ 2301.607545][T25033] should_failslab+0x5/0x20 [ 2301.612098][T25033] __kmalloc+0x6f/0x350 [ 2301.616257][T25033] kmalloc_array+0x2d/0x40 [ 2301.620669][T25033] iter_file_splice_write+0xd5/0x790 [ 2301.625957][T25033] ? atime_needs_update+0x239/0x390 [ 2301.631149][T25033] ? touch_atime+0xe0/0x250 [ 2301.635660][T25033] ? generic_file_splice_read+0x2a9/0x330 [ 2301.641393][T25033] ? splice_from_pipe+0xd0/0xd0 [ 2301.646239][T25033] direct_splice_actor+0x80/0xa0 [ 2301.651171][T25033] splice_direct_to_actor+0x345/0x650 [ 2301.656581][T25033] ? do_splice_direct+0x190/0x190 [ 2301.661595][T25033] do_splice_direct+0x106/0x190 [ 2301.666455][T25033] do_sendfile+0x63e/0xbb0 [ 2301.670879][T25033] __x64_sys_sendfile64+0x102/0x140 [ 2301.676140][T25033] do_syscall_64+0x44/0xa0 [ 2301.680554][T25033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2301.686451][T25033] RIP: 0033:0x7f56c00b08d9 [ 2301.690858][T25033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.710562][T25033] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2301.718967][T25033] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2301.726928][T25033] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2301.734979][T25033] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:08:04 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x3a, &(0x7f0000000000)=0x0) socketpair(0xf, 0x0, 0x3f, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x8750, r2, &(0x7f0000000080)="e2060820a75195bc3e3115ea1b42b5", 0xf, 0x1ff, 0x0, 0x2, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r3, &(0x7f0000000240)="6df78187a9a6825df85d0930f434aa4b9f7a8db70d14fbd007c837c6402652310224675ae313c42936d422cb8eeb00fbfcd93b1f018253cf110b0bfc3fd4ac77e5c129e8ee8e7c2a33ecea5b0e01cd66411bd539385c6c1fd53552fd29f52dde46106a05833a2e5d59ee", 0x6a, 0x76e3, 0x0, 0x1, r5}]) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r8, 0x0) r9 = epoll_create(0x6) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xd0, r9, &(0x7f0000000340)="f67ae109973532dc8461c12a97cbc165eefe4be22deadc9de61ce46574a63f0e5f02ea85e7cceb0aa4ba4491bd6e9e1bdc3bcc959bfe75e23673ddd4e207aa234114e89d74023a48553a214b499b33d5bf379a362caaacee826421f485e8b0aed18519e6f81074eefeb410745b2f928677446963699f0b1ab1f9466ae3d25758a76307a98a49ae9430789e598e0df12b92994b5037f5f04c39fd021780a7c999a6fb0470a24528d487715d0c1bc922e678f271109da3810380d1efe55c9430292a2edd09ea69584c7260caa72b6a8be17353791662bef4fc78ac0d3bda03", 0xde, 0x3, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="fe96302d0393911266f39dfa24d721c47457065e6ba758b97a45fce974ec2ce535eeb9e0987dddcccab092ecfddeaabf8decaae71ecf6b95419a", 0x3a, 0x2, 0x0, 0x2, r3}]) fallocate(r7, 0x0, 0x0, 0x1000f4) io_submit(r6, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:04 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:04 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034711bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2301.742939][T25033] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2301.750970][T25033] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:04 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034712bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:04 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa0000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:04 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) dup(r2) r3 = eventfd(0x1f) fallocate(r3, 0x0, 0x0, 0x9) io_submit(r1, 0x0, &(0x7f00000001c0)) 19:08:04 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() finit_module(r0, &(0x7f0000000080)=',**+.]:\x00', 0x1) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYRESHEX]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:04 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034716bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:04 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = gettid() tkill(r3, 0xb) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r3) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 47) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:04 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034717bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:04 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa1000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:04 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="0f53579f", 0x4, 0x95, 0x0, 0x3}]) io_setup(0x6, &(0x7f0000000000)) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r3, 0x0, r3) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:04 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2302.385157][T25102] FAULT_INJECTION: forcing a failure. [ 2302.385157][T25102] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.397792][T25102] CPU: 1 PID: 25102 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2302.408466][T25102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.418517][T25102] Call Trace: [ 2302.421798][T25102] dump_stack_lvl+0xd6/0x122 [ 2302.426399][T25102] dump_stack+0x11/0x1b [ 2302.430591][T25102] should_fail+0x23c/0x250 [ 2302.435002][T25102] __should_failslab+0x81/0x90 [ 2302.439768][T25102] ? __iomap_dio_rw+0x139/0x1010 [ 2302.444713][T25102] should_failslab+0x5/0x20 [ 2302.449210][T25102] kmem_cache_alloc_trace+0x52/0x320 [ 2302.454492][T25102] __iomap_dio_rw+0x139/0x1010 [ 2302.459592][T25102] ? kvm_sched_clock_read+0xd/0x20 [ 2302.464987][T25102] ? raw_spin_rq_unlock+0xf/0x20 [ 2302.469925][T25102] ? update_blocked_averages+0x650/0x690 [ 2302.475557][T25102] ? plist_check_list+0x151/0x160 [ 2302.480595][T25102] ? __cgroup_account_cputime+0x4f/0x110 [ 2302.486302][T25102] iomap_dio_rw+0x30/0x70 [ 2302.490631][T25102] ? ext4_file_write_iter+0x521/0x11f0 [ 2302.496158][T25102] ext4_file_write_iter+0xa59/0x11f0 [ 2302.501439][T25102] ? ext4_file_write_iter+0x521/0x11f0 [ 2302.506896][T25102] do_iter_readv_writev+0x2de/0x380 [ 2302.512098][T25102] do_iter_write+0x192/0x5c0 [ 2302.516702][T25102] ? splice_from_pipe_next+0x34f/0x3b0 [ 2302.522192][T25102] ? kmalloc_array+0x2d/0x40 [ 2302.526776][T25102] vfs_iter_write+0x4c/0x70 [ 2302.531313][T25102] iter_file_splice_write+0x43a/0x790 [ 2302.536677][T25102] ? splice_from_pipe+0xd0/0xd0 [ 2302.541513][T25102] direct_splice_actor+0x80/0xa0 [ 2302.546446][T25102] splice_direct_to_actor+0x345/0x650 [ 2302.551823][T25102] ? do_splice_direct+0x190/0x190 [ 2302.556895][T25102] do_splice_direct+0x106/0x190 [ 2302.561739][T25102] do_sendfile+0x63e/0xbb0 [ 2302.566155][T25102] __x64_sys_sendfile64+0x102/0x140 [ 2302.571356][T25102] do_syscall_64+0x44/0xa0 [ 2302.575766][T25102] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2302.581672][T25102] RIP: 0033:0x7f56c00b08d9 [ 2302.586082][T25102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2302.605708][T25102] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2302.614191][T25102] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2302.622258][T25102] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:05 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034718bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2302.630230][T25102] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.638198][T25102] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2302.646288][T25102] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:05 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) fallocate(0xffffffffffffffff, 0x42, 0x401, 0xfffffffffffffff9) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa2000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x13) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:05 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003471ebb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:05 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa3000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 48) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:05 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034721bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:05 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa4000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 4: r0 = syz_io_uring_complete(0x0) sendto$inet6(r0, &(0x7f0000000000)="c17297663b97a13c5aac2c534c44263acd88295fc75a8e2ae35948b0450de7c191e4b35b4a00463020235dddcf688237d564235bd015166b300082638e77dd075ad00db49d04cf32bbd57f6fd6934e52487dcb325ef21bee3f13e9df0dffcb986c7e5ff7ecdf82869ec30f6b1452b686c2833de4bbd50c4e8f2fddbd89ec19c824a7c684d612753dfcb20619f8f40eb1e10fd28dac5ecee39facb1f66c33cf85ebdc9e8703090613299bc331c1b1a2c15b4ea5652179", 0xb6, 0x4008040, &(0x7f00000001c0)={0xa, 0x4e20, 0x9, @remote, 0xc15}, 0x1c) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount$bind(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x159a01, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000140), 0x8, &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) clone(0x40002000, &(0x7f0000000280)="09f195255c050918a1dea1a0d02c441cc2dc24e351bdb9d8e69d36f48a9dd4f7169b70ea5820a22f99cd5aa4e31e89d1460c114da42e7dde5f6b8b32ef00d2da19dd5aada0e999cdd6994c65dc403ea5069921ec4a991877205457b5b8611e1566bc5440f50a330a962b10a35b257003c787c096cc9bd05eabb9a958c995920fb244dac7b16dfc0f60b1fb1ec2a4237c6660a056eec03ec3f76ccd7ff10b51602ff64f0852d182dfe22f67ad241a413fee3a358baba023024489b4938aa6ffd582e8aa5533450606a3da497a06d844c90a0f55059652b111d7eb299c864f1ca28cf3a0fc689299757e289d4246", &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0)="001e948b92ec264ba7d3e0108607ad5a") sendfile(r1, r3, 0x0, 0x4000000000010046) [ 2303.266727][T25155] FAULT_INJECTION: forcing a failure. [ 2303.266727][T25155] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.279381][T25155] CPU: 1 PID: 25155 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2303.289528][T25155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.299586][T25155] Call Trace: [ 2303.302856][T25155] dump_stack_lvl+0xd6/0x122 [ 2303.307481][T25155] dump_stack+0x11/0x1b [ 2303.311628][T25155] should_fail+0x23c/0x250 [ 2303.316039][T25155] ? kcalloc+0x32/0x50 [ 2303.320117][T25155] __should_failslab+0x81/0x90 [ 2303.324926][T25155] should_failslab+0x5/0x20 [ 2303.329426][T25155] __kmalloc+0x6f/0x350 [ 2303.333576][T25155] ? scsi_queue_rq+0x133b/0x15a0 [ 2303.338547][T25155] kcalloc+0x32/0x50 [ 2303.342529][T25155] ext4_find_extent+0x21c/0x7f0 [ 2303.347384][T25155] ? blk_mq_dispatch_rq_list+0xebc/0x1080 [ 2303.353133][T25155] ext4_ext_map_blocks+0x115/0x1ff0 [ 2303.358318][T25155] ? xas_load+0x276/0x2a0 [ 2303.362672][T25155] ? xas_find+0x1b0/0x3c0 [ 2303.367000][T25155] ? ext4_es_lookup_extent+0x36b/0x490 [ 2303.372456][T25155] ext4_map_blocks+0x71e/0xf00 [ 2303.377266][T25155] ext4_iomap_begin+0x4b0/0x630 [ 2303.382281][T25155] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2303.387518][T25155] iomap_iter+0x39c/0x470 [ 2303.391930][T25155] __iomap_dio_rw+0x698/0x1010 [ 2303.396691][T25155] ? raw_spin_rq_unlock+0x1/0x20 [ 2303.401669][T25155] iomap_dio_rw+0x30/0x70 [ 2303.406086][T25155] ? ext4_file_write_iter+0x521/0x11f0 [ 2303.411596][T25155] ext4_file_write_iter+0xa59/0x11f0 [ 2303.416874][T25155] ? ext4_file_write_iter+0x521/0x11f0 [ 2303.422330][T25155] do_iter_readv_writev+0x2de/0x380 [ 2303.427624][T25155] do_iter_write+0x192/0x5c0 [ 2303.432210][T25155] ? splice_from_pipe_next+0x34f/0x3b0 [ 2303.437664][T25155] ? kmalloc_array+0x2d/0x40 [ 2303.442254][T25155] vfs_iter_write+0x4c/0x70 [ 2303.446753][T25155] iter_file_splice_write+0x43a/0x790 [ 2303.452124][T25155] ? splice_from_pipe+0xd0/0xd0 [ 2303.456968][T25155] direct_splice_actor+0x80/0xa0 [ 2303.461982][T25155] splice_direct_to_actor+0x345/0x650 [ 2303.467348][T25155] ? do_splice_direct+0x190/0x190 [ 2303.472367][T25155] do_splice_direct+0x106/0x190 [ 2303.477221][T25155] do_sendfile+0x63e/0xbb0 [ 2303.481641][T25155] __x64_sys_sendfile64+0x102/0x140 [ 2303.486843][T25155] do_syscall_64+0x44/0xa0 [ 2303.491276][T25155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.497179][T25155] RIP: 0033:0x7f56c00b08d9 [ 2303.501592][T25155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.521319][T25155] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2303.529728][T25155] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2303.537697][T25155] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2303.546164][T25155] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2303.554160][T25155] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 19:08:05 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034725bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:05 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="40117174d21d07cbc951494e77463b5d914298947a9942"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2303.562115][T25155] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:05 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0xf8c, 0x9}, {0x5}], r4}, 0x18, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:05 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034748bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:06 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x5c58fe, 0x382) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa6000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 49) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:06 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003474cbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:06 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() r1 = gettid() ptrace$cont(0x7, r0, 0x1000, 0x800) tkill(r1, 0xb) wait4(r1, &(0x7f0000000000), 0x8, 0x0) rt_sigqueueinfo(r0, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0xe9}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x176, &(0x7f0000000300)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06bde4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407000000005a85c5179eb66078a47ca95c3cf2b4bbe43dfc4c9fd1f45d508db8af6501c8c412830bc816914e357e6f780b1d39b6a63efa915684fd337e4bcc91a00d4fe2d13188a7aaba58e9ce2b9fee477bdccc5b74ab8039967a017c3eed59a84cecfb0d725eb9ac65225d9bfc34bd8f80d177ba6574dd6c9fb8404495c79eb3438e78b504bdfe8c26cbe48af83a088611222ea619995b72502e4e06f95bb5bcfdec5e9d0e4f8dba159e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2d) tkill(r4, 0x38) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) gettid() 19:08:06 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x800, 0x1) ptrace$setregs(0xd, r1, 0xfffffffffffffff9, &(0x7f0000000080)="1f1f8bb4600ccfc2e54655591594b32a48e6cad82c0ab2fc5b0191a859ec999ab2c69763788826f409c62a21f9db2d9934259f4d69b32b9ce3591b5fc424f8edcd3402212bf4ffc9a1ee35affc176337a82a7a27b2a035c4b2dbb21a3dbb3d820a289c124c419a6ccef57795b524f751783aeb2fabb321f92b") tkill(r1, 0x2c) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00') fallocate(r0, 0x4c, 0x1, 0x2765) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:06 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa7000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x1000000a, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x0, @tick, 0x7f, {0x1}, 0x2, 0x2, 0x6}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x10) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000080)) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034760bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:06 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xd8080800, &(0x7f00000001c0)="8a22158f012a4a1ca0b0a0a50a1cc9b9ce95ae72dfdb62461c674a02c952e09b531497a32e25b3a1cd5e958ca04373d2a3bff11b083f56e7388416da3828f2f1fc237ff26c166fbb2cb3e53acc31d0adb6017e29f737f87257ee4591c63a74f53415a04ea2c1b8a52ff0ebac9675d17678053b3237912f917ae6898e858328c6af8e0d7759e8fd599f6655944678810e33464332fb6d42b04de2fd1b92985842c37b3c2c4b1232640f3798c5548eac787f9eb00d9e825b948490bb11fb666ec2c7ae84f47d32b47c437c7e0ad5c20333a614017cf279c0fd3d", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = gettid() r2 = gettid() tkill(r2, 0xb) tkill(r2, 0x14) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2304.158031][T25220] FAULT_INJECTION: forcing a failure. [ 2304.158031][T25220] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.170757][T25220] CPU: 1 PID: 25220 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2304.180934][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.190982][T25220] Call Trace: [ 2304.194253][T25220] dump_stack_lvl+0xd6/0x122 [ 2304.198854][T25220] dump_stack+0x11/0x1b [ 2304.203006][T25220] should_fail+0x23c/0x250 19:08:06 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) clone(0x0, &(0x7f0000000140)="5ada943afcd04fd61a04056df7f9458208ee36928f32f070e6e16bc27cf2df6aa3376b943ce354868c836801b19226154c39f677d584fcbb4d470e0440fc796e07f8e29fa7a20bc8cad394e60ec2c8e451ec5ff1570361c3d979cbd3c2f4cf19b1e6944da0ad5ff7025d882fdfd991e44226a43af938dfa0d889e77ee5b9915433951e9d7a5e7d699bf8dd961f18", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000200)="50e9bf6f0988c5d17783f8c74c88e83d298d687f46cf108ec38800f5085a7072eba5a5d361a7f20e05f1458e2c43d2eb64b3f501ac6f3d76144f2db6ee06c7b3470120ef0b006590545b0c10f285f8483c745ec65962c570210d8a2f91d82ddb860b54be4cb2bb42a4ddc861854ad64cb6b2b51547f3dc6db8bfbfee8818a99aeeef77e90fc42ded4a8f486988181bd823fbf9dc715c7333eb6310e26ca35c828820e23b9b9ad76a28dddc0dd09d047aff5892e1b56f657c08c59de5e3c6accd0f727784bda8ffcec9fd483f44b945251a440f38fef44e68129d1497db43e8166a622f616fa72f5a5fea9628ee356309c67a6de1abacfe63") r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) gettid() clone(0x80006200, &(0x7f0000000300)="48fe6d1a8077b794a656d316119903ac99f7964e66a2b7c755f6bc39b0a5a1677145f8ff80d03e5251daeea31f13efe27a1a3fc14c0183f786204b9eb02beef38f6383552a863ab8afa1206f4ef7c6b619622527f3d06da41fcc5d2f1bab6ab92aa41279f5722821a7f88c0e17ea7e37ee821810dd8e50a7b6d6c20f2ac0590aa0f12d4916b22b2eead302b831303ed47828831d3d27e505dbc2a108cd2d98b65ebc80909cfc5d1d58018c7ec99050d55bbe793d62e492922c40be5be7c9dfc24d9fc1ae6dc6c342ca4733efd8b44c357f1fe05f10e4057c7f3a13", &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b5edf30f300cf111ab75272cdbdf4a76292ef2ba02a33d3dca5d9801841502d36d38b1c7860ef5ff40aa1c1a3711099a9f217838ed436b86ad583c6863b14662a49b541f7d467b48ac971c6074aadd81084acedf7d6589cfa6846f0c4099726d4c15131c586b190a23208543ee99ea5efd182854cdae7f010537895e98dc5f46fce972b4eb7cd063ac7a3dcf1ac0503e1bd197217fe6b7b64deaca7773cae080e45dc08e242dbb0695bd9d75562be14916a056bd9d71be") sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) r2 = gettid() tkill(r2, 0xb) ptrace$cont(0xffffffffffffffff, r2, 0x5, 0x7ff) [ 2304.207422][T25220] ? ext4_mb_new_blocks+0x317/0x1fc0 [ 2304.212736][T25220] __should_failslab+0x81/0x90 [ 2304.217507][T25220] should_failslab+0x5/0x20 [ 2304.222081][T25220] kmem_cache_alloc+0x4f/0x300 [ 2304.226873][T25220] ext4_mb_new_blocks+0x317/0x1fc0 [ 2304.232039][T25220] ? ext4_find_extent+0x7b2/0x7f0 [ 2304.237101][T25220] ? ext4_ext_search_right+0x246/0x540 [ 2304.242572][T25220] ext4_ext_map_blocks+0x15ed/0x1ff0 [ 2304.248375][T25220] ? ext4_es_lookup_extent+0x36b/0x490 [ 2304.253930][T25220] ext4_map_blocks+0x71e/0xf00 [ 2304.258727][T25220] ext4_iomap_begin+0x4b0/0x630 [ 2304.263582][T25220] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2304.268904][T25220] iomap_iter+0x39c/0x470 [ 2304.273232][T25220] __iomap_dio_rw+0x698/0x1010 [ 2304.277998][T25220] iomap_dio_rw+0x30/0x70 [ 2304.282321][T25220] ? ext4_file_write_iter+0x521/0x11f0 [ 2304.287807][T25220] ext4_file_write_iter+0xa59/0x11f0 [ 2304.293088][T25220] ? ext4_file_write_iter+0x521/0x11f0 [ 2304.298540][T25220] do_iter_readv_writev+0x2de/0x380 [ 2304.303820][T25220] do_iter_write+0x192/0x5c0 [ 2304.308457][T25220] ? splice_from_pipe_next+0x34f/0x3b0 [ 2304.314003][T25220] ? kmalloc_array+0x2d/0x40 [ 2304.318595][T25220] vfs_iter_write+0x4c/0x70 [ 2304.323354][T25220] iter_file_splice_write+0x43a/0x790 [ 2304.328720][T25220] ? splice_from_pipe+0xd0/0xd0 [ 2304.333561][T25220] direct_splice_actor+0x80/0xa0 [ 2304.338489][T25220] splice_direct_to_actor+0x345/0x650 [ 2304.343855][T25220] ? do_splice_direct+0x190/0x190 [ 2304.348876][T25220] do_splice_direct+0x106/0x190 [ 2304.353771][T25220] do_sendfile+0x63e/0xbb0 [ 2304.358293][T25220] __x64_sys_sendfile64+0x102/0x140 [ 2304.363584][T25220] do_syscall_64+0x44/0xa0 [ 2304.368007][T25220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2304.373904][T25220] RIP: 0033:0x7f56c00b08d9 [ 2304.378469][T25220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.398079][T25220] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:08:06 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034768bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2304.406553][T25220] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2304.414514][T25220] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2304.422480][T25220] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.430492][T25220] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2304.438543][T25220] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:06 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa8000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:06 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000055000/0x4000)=nil, 0x4000, 0x300000b, 0x82031, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r1, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@nl=@proc, 0x0, 0x80800, 0x1, {0x0, r2}}, 0xd1) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 50) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:07 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003476cbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:07 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa9000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:07 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) r5 = eventfd(0x7fffffff) r6 = eventfd2(0x9, 0x80800) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_submit(r4, 0x4, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x6a3, r2, &(0x7f00000007c0)="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", 0x1000, 0x0, 0x0, 0x1, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40, r3, &(0x7f00000001c0)="87d3ed526a7dcc306465b79d73b3c2ee517d719164c9e545be3d0de8604ed3325c74ff3ee4a354bdf937e051ac9b8db377e88101f5d6ea576f3a94a1c05f7523dc147262c4f94aa971b28fbd9596d4fbb8059ce4b9d325bb6a0b35b2cc3df53ef11f4563433ca776e53f0b1020", 0x6d, 0x9, 0x0, 0x2, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x7f, r0, &(0x7f0000000240)="b6cc0b165fcf888e6992d1bc3ed59d4a676494784f36580b59b60e45b70ff09d6f2fe2f6ca506163faf2dc84b5bf84a5ec8c23e374930fd45c499e0e9082e416f1ace09d1da05da489b8dfe45b7b7f6fc63c4c70819f7a3a8ec146f64ae2b29742c0a66d219f16dd4576bfca7cdf9a1c093ab62fbe56f443631a9058ca54df473b9e28a6259be89715f040e620dd2bdba8f677", 0x93, 0xfffffffffffffffe, 0x0, 0x3, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x641c, r3, &(0x7f0000000340)="bb9c544534174d582f1517d912d7c6375275a68715ed60825156e41f94ea3a28bb563531a2815c5ed19e65b92a0bcf10016c7e0d5c490c7bbc9e95e1147afe052c533bfab13b5746af1cad67781c356ac236d861e0d255b3cf4e7081facefd2a2ac6164e0aeeaa290105170406131fafbaecb68708b74065c65348efee2fb460d322b77e090e87c8", 0x88, 0x8, 0x0, 0x4, r7}]) fallocate(r2, 0x0, 0xa4, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:07 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034774bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2305.027806][T25272] FAULT_INJECTION: forcing a failure. [ 2305.027806][T25272] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.040511][T25272] CPU: 1 PID: 25272 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2305.050735][T25272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2305.060797][T25272] Call Trace: [ 2305.064070][T25272] dump_stack_lvl+0xd6/0x122 [ 2305.068659][T25272] dump_stack+0x11/0x1b [ 2305.072819][T25272] should_fail+0x23c/0x250 [ 2305.077231][T25272] ? mempool_alloc_slab+0x16/0x20 [ 2305.082256][T25272] __should_failslab+0x81/0x90 [ 2305.087065][T25272] should_failslab+0x5/0x20 [ 2305.091571][T25272] kmem_cache_alloc+0x4f/0x300 [ 2305.096409][T25272] ? ext4_fc_track_range+0x90/0x140 [ 2305.101635][T25272] mempool_alloc_slab+0x16/0x20 [ 2305.106483][T25272] ? mempool_free+0x130/0x130 [ 2305.111164][T25272] mempool_alloc+0x9d/0x310 [ 2305.115660][T25272] bio_alloc_bioset+0xcc/0x530 [ 2305.120421][T25272] ? iov_iter_alignment+0x34b/0x370 [ 2305.125618][T25272] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2305.130726][T25272] __iomap_dio_rw+0x8d8/0x1010 [ 2305.135523][T25272] iomap_dio_rw+0x30/0x70 [ 2305.139866][T25272] ? ext4_file_write_iter+0x521/0x11f0 [ 2305.145376][T25272] ext4_file_write_iter+0xa59/0x11f0 [ 2305.150735][T25272] ? ext4_file_write_iter+0x521/0x11f0 [ 2305.156301][T25272] do_iter_readv_writev+0x2de/0x380 [ 2305.161505][T25272] do_iter_write+0x192/0x5c0 [ 2305.166100][T25272] ? splice_from_pipe_next+0x34f/0x3b0 [ 2305.171554][T25272] ? kmalloc_array+0x2d/0x40 [ 2305.176147][T25272] vfs_iter_write+0x4c/0x70 [ 2305.180721][T25272] iter_file_splice_write+0x43a/0x790 [ 2305.186092][T25272] ? splice_from_pipe+0xd0/0xd0 [ 2305.191065][T25272] direct_splice_actor+0x80/0xa0 [ 2305.196002][T25272] splice_direct_to_actor+0x345/0x650 [ 2305.201371][T25272] ? do_splice_direct+0x190/0x190 [ 2305.206392][T25272] do_splice_direct+0x106/0x190 [ 2305.211261][T25272] do_sendfile+0x63e/0xbb0 [ 2305.215678][T25272] __x64_sys_sendfile64+0x102/0x140 [ 2305.220918][T25272] do_syscall_64+0x44/0xa0 [ 2305.225413][T25272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2305.231316][T25272] RIP: 0033:0x7f56c00b08d9 [ 2305.235734][T25272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.255370][T25272] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2305.263782][T25272] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2305.271749][T25272] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2305.279850][T25272] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.287818][T25272] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2305.295785][T25272] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:07 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39000000130003477abb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:07 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x10000) r6 = accept4$unix(r0, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) io_submit(r1, 0x5, &(0x7f0000000680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000000)="7c224d33456a267e645d0b8fc0d30a7ff173803caf4fd2efff68ae1d14a9f7106a723417fa5d6a4d49bdda9a4abe73dead7ab1ce432634c58978aacfb4c8d83f448da5bd3bcbbc5196262fc3ea7fbd24b6ad8baefcfa14006828436b", 0x5c, 0x81, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x8001, 0xffffffffffffffff, &(0x7f00000001c0)="5f6e0173346b8a0f213e8f722370a031011c6a8423d42a2453ef8105e0cd3acb3b60e1c20934876e4516d4025578aeb1142e4a71d5cad3481ca5f34c67be99ecccd2a6720c578f2ff91b153e9f7d8c9fd50b2be1df0c210ad8bcf1019913376ddc5e2037456d7f8483e11094688022cae2f0128b8e9053244b4f62c78bc6c5031ae981fbc11cac7ac90a562d966a07563525860beba6709be575576ae5df91eeda64a173", 0xa4, 0x5, 0x0, 0x1, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x5, r5, &(0x7f0000000300)="e0679d51be07e6cc8a99960a51b9818cd0bf444112005f86c0e2dfe80e5c0a39e46c8039982402d77a94e19cc2012142a37a207ea739476874d8abadea53a1d6019b78ff2d452831ba8276f94b162eeb11acf4b6a6ece149efe499f2613b92f9e35a859e20585a440e998cfa9f26a8aeb01348c4356a42a8872b1304f3e8588f57f012f52a8b99157e597b045708ff704f76ce0ca8ab4d1d4c24b547b7590553addc89f84b65690a40030eac5f3e7a", 0xaf, 0x4, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7ff, r6, &(0x7f00000007c0)="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", 0x1000, 0x10001, 0x0, 0x2, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x1000, r8, &(0x7f0000000580)="612493dca3203fbb52a75acb3455d04e0a82fc990179bc5e93d718b6effcd8e2193e6224492e02644127e3a88cc9658b3eedb4ddb57e712409b5ff934e6a578b2612f566f16d54471d689aefd316d703dad75f8cf9bb1e2188700c7b51e14c16e1fb187e296bd6ba60ad1f894d40fa8c1e2eb374927ac3d98f18032cfcc31a77233534df54cea3370f0d1dad6cbacb4ca4b045c68985236044fca59b3213665a2fd373999c2095c10fb681329ff77e67abfb68a0080fa6f3581a20", 0xbb, 0x6, 0x0, 0x1, r9}]) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2305.448339][T25282] validate_nla: 47 callbacks suppressed [ 2305.448351][T25282] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.508376][T25286] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.530929][T25286] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:09 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000347fcbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:09 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:09 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xaa000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:09 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x1690fe, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 51) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:09 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000535c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000537c0)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8b, "019d0a8572c110"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000547c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "50cc64cd04f1cc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r11}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000557c0)={0xdadf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}, {r7, r8}, {r9}, {}, {r10}], 0x81, "d79e1014f29391"}) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2307.259218][T25298] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2307.314967][T25302] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2307.345884][T25301] FAULT_INJECTION: forcing a failure. [ 2307.345884][T25301] name failslab, interval 1, probability 0, space 0, times 0 19:08:09 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xab000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2307.348017][T25302] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2307.358592][T25301] CPU: 1 PID: 25301 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2307.376875][T25301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.386913][T25301] Call Trace: [ 2307.390181][T25301] dump_stack_lvl+0xd6/0x122 [ 2307.394763][T25301] dump_stack+0x11/0x1b [ 2307.398932][T25301] should_fail+0x23c/0x250 [ 2307.403359][T25301] ? mempool_alloc_slab+0x16/0x20 [ 2307.408413][T25301] __should_failslab+0x81/0x90 [ 2307.413172][T25301] should_failslab+0x5/0x20 [ 2307.417674][T25301] kmem_cache_alloc+0x4f/0x300 [ 2307.422453][T25301] ? __blk_mq_alloc_request+0x270/0x290 [ 2307.427999][T25301] mempool_alloc_slab+0x16/0x20 [ 2307.432845][T25301] ? mempool_free+0x130/0x130 [ 2307.437537][T25301] mempool_alloc+0x9d/0x310 [ 2307.442037][T25301] bio_alloc_bioset+0xcc/0x530 [ 2307.446794][T25301] ? submit_bio_noacct+0x7ab/0x7d0 [ 2307.451899][T25301] iomap_dio_zero+0xac/0x340 [ 2307.456533][T25301] iomap_dio_bio_iter+0xa62/0xbc0 [ 2307.461558][T25301] __iomap_dio_rw+0x8d8/0x1010 [ 2307.466354][T25301] ? raw_spin_rq_unlock+0x1/0x20 [ 2307.471391][T25301] iomap_dio_rw+0x30/0x70 [ 2307.475724][T25301] ? ext4_file_write_iter+0x521/0x11f0 [ 2307.481212][T25301] ext4_file_write_iter+0xa59/0x11f0 [ 2307.486586][T25301] ? ext4_file_write_iter+0x521/0x11f0 [ 2307.492042][T25301] do_iter_readv_writev+0x2de/0x380 [ 2307.497310][T25301] do_iter_write+0x192/0x5c0 [ 2307.501890][T25301] ? splice_from_pipe_next+0x34f/0x3b0 [ 2307.507342][T25301] ? kmalloc_array+0x2d/0x40 [ 2307.511945][T25301] vfs_iter_write+0x4c/0x70 [ 2307.516463][T25301] iter_file_splice_write+0x43a/0x790 [ 2307.521825][T25301] ? splice_from_pipe+0xd0/0xd0 [ 2307.526667][T25301] direct_splice_actor+0x80/0xa0 [ 2307.531642][T25301] splice_direct_to_actor+0x345/0x650 [ 2307.537000][T25301] ? do_splice_direct+0x190/0x190 [ 2307.542066][T25301] do_splice_direct+0x106/0x190 [ 2307.547676][T25301] do_sendfile+0x63e/0xbb0 [ 2307.552117][T25301] __x64_sys_sendfile64+0x102/0x140 [ 2307.557332][T25301] do_syscall_64+0x44/0xa0 [ 2307.561751][T25301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2307.567692][T25301] RIP: 0033:0x7f56c00b08d9 [ 2307.572182][T25301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.591788][T25301] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2307.600195][T25301] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2307.608165][T25301] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2307.616122][T25301] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.624132][T25301] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2307.632196][T25301] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:10 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3900000013000347fdbb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:10 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) ftruncate(0xffffffffffffffff, 0x4) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_submit(0x0, 0x8, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)="eca4c3d4fae1f62655aa4dc9c412dddb0040ef896a0e6011bbe1282785df88f9a6b70386c3d50138fe48eff38753c7d42f470332a98e7acc1ceacca5aee24e43ead2faf647d55b2a041a29573efcb9c25b07771ea397c21961510baad87a882889b651f1abab27e174a0e10a4b4b9f033e4feaa07dfe85e1f2bde15758f5f0e49cfa2f7124cfaf777ac9a5a5c3bb2a26f84218389f44924b271b784adb90efde8fa60795f8ce4756fc8f566987ad04785d5af1fab2dbe7d0e05c9eb959d12b665fb84be761eb191103047357471c86dc4a1a8bd6ee70c063f91510fc2a8575c5efe49ef7f4739777b20ffa3b3a", 0xed, 0x9, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf3da, 0xffffffffffffffff, &(0x7f00000002c0)="258b134acb1622db1f52abeafc10e13c8588cd6355eaee186b5b663d5456e99db86f163c07ad9dd58cd0f67cf2c6aeed71122d8ba852e698e2baf01d2b97ad1b76c64cab237b2843d0cfab85cce457d495b37f61a23a35f3c118304d03113937f584aadde79ac2edb1ee9cbc6e09a6a61bdeb4ef728c6e4f6331fbe7035b58189efeaa6a1b0c4bcdfcdf14dd1a856b876f28f432751e3549d8679afe5d14843890529afd065ca36ccc2ab62faabce930fb63eb752c77f805b0bffe6c93211dc7275f4d8d5ab1b292aa9627329a253b1f9de015b978cb5165094ed62673c3a9abd62d60dcfbda2e5fff13682caf2b", 0xee, 0x0, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x800, 0xffffffffffffffff, &(0x7f0000000400)="62a8e7ddaaa992361e18bfa175c056fe16748f997a201589edbb9d29675832ec57d871548f9766ed621829598e7c0cffd0e0ec88914425ade9472d7e288a2c333131c1debf1b49a661f5a10c9268fb95882a4917f780b0b44778e1d2e785d0ce67e8efd2e1b92009aee953c207d5a84d2e7b5a98f9884417a9d1207917dc945a51f32561d8021feb6c06c72df6a68f6a6747f9b1f39bc96eb43a752baa2c46602ce480b1e4846f0b91cb0356c75b0e93875f8075e24c84e188c96e96e8523302c149816e162d44b89955c6ed9db8cc8829f4739eff601d222d", 0xd9, 0x8, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000580)="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", 0xfe, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="64c5a7b4038ae29520dfe12ddcac9bf80743ebaf02a8c36d0029580afb4d682d1bd2f31e5461e0d50e9c0263b471d9817bf6bdc92061ee51d202d3c937b8354e579cefb8207957df4e10cc0e58b832221a37eecc14b29dcce509df6ce762aa57570bbd55c7b4922cc62d54ea5505f904", 0x70, 0x0, 0x0, 0x3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000007c0)="1f6b9952122f1f385377f7c81d3b8b2cba8eb9e8fd1f5be86f3e991500df026fd9d138b983d5a911187cc3c6e225e616c7c3923bd77f5957fe4fdde77422d029e78754fef8acac34d7f12b17fdc4e68b249c894cb8bee252aa35dffc47c4b781f209fe33b8af0d7ad06e38", 0x6b, 0x5052, 0x0, 0x1, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="1b9b8974591704d77391598d6bdb2ab4cd6683722a5fb33a2b5acf59695d683fd9", 0x21, 0x0, 0x0, 0x3, r2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000900)="5cbc12a4f30c4dad938f4494deb96d408db0d909733c08c679d301b72991879f54565e89ce9c8f691538100c49231fe1c801cc3ca6e4ab2dc3c12a92bc02a34281f5ee9293b3da1b1278160623fb5d20aa7eaeef8013cb1bdb367711af36121da3e7b774d527eb8f06ab79869dfc9ed061523b9d363b2ddd22bbd15c5e93ee1dc1a708eaf93c873a6d228eb3258f7e4d9e5277ceed465f395d8049d83bf88ac4be6363e02e0ba241e9b79c2550a3b261969e27cc111403757819fa5023", 0xbd, 0x20af, 0x0, 0x1, r4}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x108) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1}]) 19:08:10 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xac000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2307.789914][T25317] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2307.854041][T25321] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:10 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x40004, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="ea5914efaf6440a6d0c84cb5883e254b0df534064050f61940f7939b5ca7fba517084c154983366d7aeed72630a7f858a02ff54436920cdcfd1e709fcc366cfbedc964f5207e197f1d1f7d358d70f63d1483fd3f555c322633de8a9ba8f937524464f5b9e3f015401f14b6a99710ffcd688f9f0b36273fd48328fd2e477b27f6ef69ed1ef71400c0cbcb7183739c134ac79dd8cd6c8316b171a3074c09566f93c7a341e93a6fc74381965c4575f5a501c2c17c474ccc05d7fb3ec2cc04c5b458b78c435d411c9487ff0d49d4cd28e7b895b3b4", 0xd3, 0xfffffffffffff801, 0x0, 0x1}]) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) close(r0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x118) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000007c0)={{r6}, r7, 0x0, @unused=[0x3, 0x6, 0x1, 0xffff], @subvolid=0xe7b}) fallocate(r6, 0x62, 0x0, 0x800000001000f5) openat(r3, &(0x7f00000001c0)='./bus\x00', 0x40200, 0x40) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="58a046dc06e8371f2956abb9e5e1f2d7b0786e112972e10b697b93cd52ee11097cc4abb2bf2faa39a7eda5a343da1fad177c2deea89713a9d4fc8b25ea18ed61cb58c91a5a7e95ed829bfc1b1e913b6e3c04469192ff77cf4a3888a5fdfceaf3912ef8a350b2ae206036507d568d1afee2409104c0b47d2554073159e414f37f21690882bbe605af787411ca74695b1f25660c8718", 0x95}]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000003400)={0x0, 0x10001, 0x6}) [ 2307.907500][T25321] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:10 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xad000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:10 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb0ae1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2308.098728][T25334] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:10 executing program 3: r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x4) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) lchown(&(0x7f0000000080)='./file0/file0\x00', 0xee00, 0xee01) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0xe4310, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x733, 0x0, 0x1, {0x0, 0x0, r0}}, 0x7) 19:08:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 52) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:10 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:10 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="4068c07a3c76789f334b5b7f7893316892c0d5be834e04ae547eef075763c9633fec0fdaeb03b9c833c480a0601d5bd395048b3d9b3ca583e86a135b0c7934773669021fa90c45f1aa8a246996fa99d4ba3c3c52b68554ec8c4ba9e85953f488f67dfe040c4c8c3a58fb6bc726c2a60a9679da19c6a48928c2728a1b34e60618a24aca0167dd7d4a07c7445a295023db6bfd3abae330bfd6f93d9133450eb3be7e9e0694f6ea153ac0b76788ac97d3c577f2db32c676a9048444ba0b83ffe5965e02df7b8f7963e09934dd43cb61c5274cb515a2270e4e9d8f5bd491bb67334a49c307dc52"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:10 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb25e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:10 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xae000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2308.276375][T25355] FAULT_INJECTION: forcing a failure. [ 2308.276375][T25355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2308.289655][T25355] CPU: 1 PID: 25355 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2308.299897][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.309947][T25355] Call Trace: [ 2308.313244][T25355] dump_stack_lvl+0xd6/0x122 [ 2308.317921][T25355] dump_stack+0x11/0x1b [ 2308.322074][T25355] should_fail+0x23c/0x250 [ 2308.326566][T25355] __alloc_pages+0x102/0x320 [ 2308.331162][T25355] alloc_pages+0x382/0x3d0 [ 2308.335596][T25355] __page_cache_alloc+0x4d/0xf0 [ 2308.340447][T25355] page_cache_ra_unbounded+0x1be/0x430 [ 2308.346261][T25355] ondemand_readahead+0x58c/0x7c0 [ 2308.351284][T25355] page_cache_sync_ra+0xaf/0xe0 [ 2308.356141][T25355] filemap_read+0x3ad/0x1220 [ 2308.360749][T25355] generic_file_read_iter+0x75/0x2c0 [ 2308.366127][T25355] ? __fsnotify_parent+0x340/0x440 [ 2308.371332][T25355] ext4_file_read_iter+0x1db/0x290 [ 2308.376463][T25355] generic_file_splice_read+0x24f/0x330 [ 2308.382080][T25355] ? splice_shrink_spd+0x60/0x60 [ 2308.387038][T25355] splice_direct_to_actor+0x2aa/0x650 [ 2308.392419][T25355] ? do_splice_direct+0x190/0x190 [ 2308.397485][T25355] do_splice_direct+0x106/0x190 [ 2308.402348][T25355] do_sendfile+0x63e/0xbb0 [ 2308.406844][T25355] __x64_sys_sendfile64+0x102/0x140 [ 2308.412040][T25355] do_syscall_64+0x44/0xa0 [ 2308.416513][T25355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2308.422418][T25355] RIP: 0033:0x7f56c00b08d9 [ 2308.426826][T25355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.446775][T25355] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2308.455178][T25355] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2308.463145][T25355] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2308.471108][T25355] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.479075][T25355] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2308.487035][T25355] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:10 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4feff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:10 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:10 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xaf000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:11 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4fffe06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:11 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x139) r3 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:11 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff03008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:11 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb0000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 53) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:11 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff04008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r1) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:11 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb1000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:11 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff05008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:11 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x24030, r3, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000080)={@loopback}, 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xef48) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x6}]) [ 2309.154864][T25406] FAULT_INJECTION: forcing a failure. [ 2309.154864][T25406] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.167554][T25406] CPU: 1 PID: 25406 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2309.177726][T25406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.187769][T25406] Call Trace: [ 2309.191038][T25406] dump_stack_lvl+0xd6/0x122 [ 2309.195627][T25406] dump_stack+0x11/0x1b [ 2309.199828][T25406] should_fail+0x23c/0x250 [ 2309.204301][T25406] ? xas_create+0x3fb/0xb30 [ 2309.208802][T25406] __should_failslab+0x81/0x90 [ 2309.213563][T25406] should_failslab+0x5/0x20 [ 2309.218063][T25406] kmem_cache_alloc+0x4f/0x300 [ 2309.222822][T25406] xas_create+0x3fb/0xb30 [ 2309.227196][T25406] xas_store+0x70/0xca0 [ 2309.231419][T25406] ? memcg_check_events+0x23/0x3b0 [ 2309.236594][T25406] ? get_page_from_freelist+0x55e/0x830 [ 2309.242134][T25406] ? cgroup_rstat_updated+0x34/0x100 [ 2309.247485][T25406] ? xas_find_conflict+0x422/0x4c0 [ 2309.252597][T25406] __add_to_page_cache_locked+0x20b/0x4f0 [ 2309.258313][T25406] ? workingset_activation+0x270/0x270 [ 2309.263772][T25406] add_to_page_cache_lru+0xa0/0x1b0 [ 2309.268970][T25406] page_cache_ra_unbounded+0x274/0x430 [ 2309.274425][T25406] ondemand_readahead+0x58c/0x7c0 [ 2309.279439][T25406] page_cache_sync_ra+0xaf/0xe0 [ 2309.284371][T25406] filemap_read+0x3ad/0x1220 [ 2309.288958][T25406] generic_file_read_iter+0x75/0x2c0 [ 2309.294313][T25406] ? __fsnotify_parent+0x340/0x440 [ 2309.299418][T25406] ext4_file_read_iter+0x1db/0x290 [ 2309.304523][T25406] generic_file_splice_read+0x24f/0x330 [ 2309.310059][T25406] ? splice_shrink_spd+0x60/0x60 [ 2309.314995][T25406] splice_direct_to_actor+0x2aa/0x650 [ 2309.320366][T25406] ? do_splice_direct+0x190/0x190 [ 2309.325406][T25406] do_splice_direct+0x106/0x190 [ 2309.330244][T25406] do_sendfile+0x63e/0xbb0 [ 2309.334660][T25406] __x64_sys_sendfile64+0x102/0x140 [ 2309.339895][T25406] do_syscall_64+0x44/0xa0 [ 2309.344309][T25406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2309.350192][T25406] RIP: 0033:0x7f56c00b08d9 [ 2309.354605][T25406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.374205][T25406] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2309.382839][T25406] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2309.390904][T25406] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2309.398947][T25406] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.406978][T25406] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2309.414944][T25406] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:11 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff08008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:11 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb2000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:11 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) recvmmsg$unix(r0, &(0x7f00000062c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/3, 0x3}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000003940)=[{&(0x7f0000000600)=""/21, 0x15}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f00000027c0)=""/197, 0xc5}, {&(0x7f00000028c0)=""/92, 0x5c}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000740)=""/43, 0x2b}], 0x7, &(0x7f00000039c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{&(0x7f0000003b00)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003b80)=""/107, 0x6b}, {&(0x7f0000003c00)=""/72, 0x48}, {&(0x7f0000003c80)=""/47, 0x2f}, {&(0x7f0000003cc0)=""/230, 0xe6}], 0x4}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000006140)=[{&(0x7f0000003e80)=""/67, 0x43}, {&(0x7f0000003f00)=""/182, 0xb6}, {&(0x7f0000003fc0)=""/237, 0xed}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/116, 0x74}], 0x6, &(0x7f00000061c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x4, 0x0, &(0x7f00000063c0)={0x77359400}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000006400)={0x80000000, 0x20, 0x5, 0x6, 0xf, "8f0a5b566752684e404d6f755d51ee75298dfe"}) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r7 = fcntl$dupfd(r0, 0x406, r5) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r10 = fcntl$dupfd(r9, 0x0, r9) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000068c0), 0x440002, 0x0) io_submit(0x0, 0x5, &(0x7f0000006940)=[&(0x7f00000064c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000006480)="24d9f4d2903861", 0x7, 0x4, 0x0, 0x2}, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000006500)="644d801bb9dca5f77f9d0857d4547d21f1b98d102e0e341e6b81b59f80774dcf492f093889e04b9ee8c657ec6b0bb0cccddc9b9f6eb0731f77e68aa9e6532d7239ab2f95f6cb73070245b58c01a1dbe434aa3585948bc119c10952960dfbaa4036e865e14e556394da75483b5c1d15773b96b269465ec68cba38e813c18708a9b5367954eab0bcf5948041ccbe42e88d769dacb124b0d96b7b377c77feca94b52e6cdf3ec645366c2ece3049e307181c67152e96379e428537067280b0baa36481a7ce80de37db3a277383f96ccec78ebd747915ac8ef991294201b8de01487fe72328e0d5cd480b8f6bc1d0", 0xec, 0x4, 0x0, 0x2, r7}, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x6, 0x101, 0xffffffffffffffff, &(0x7f0000006640)="61e1d85786a9bf9d5ee40a52328c3271771d78b23f061918e90b7f48fbf68e7a7168a5f1c5f2221f1e784cbb9377e9d19882ee6e94f8a02d11078a923522b05d3356c85a93dc9122677c7a56b22c01740798cbef93227e167dfae608857678b806b09caa40ade6952087d4f9a837c7630bd983cb8f59f21837e355bf6484de1b78ccae1d", 0x84, 0x7, 0x0, 0x2, r1}, &(0x7f0000006780)={0x0, 0x0, 0x0, 0x6, 0x7f, r8, &(0x7f0000006740)="9a", 0x1, 0x9, 0x0, 0x3, r4}, &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x80, r10, &(0x7f00000067c0)="95333d1851bfe44f515f66d5024443d4201a78acbb124a1d973b2eb6ce76371a75850a03bdbeeaecbebbced3a95c6c2fac519e14b66edaeb4d93fea95916be9054f041da6cf607acf84f40739155526fecf6d0a2c6ab5bd4469d9fb05553a0716389de47c08c5de9d67055f6c78522e8fb6f4c3633bbdb674ad612a55e915863447e03ca4c5dca59d05762cc9105191ec3f3a81b9edb136cde8e88a0ffe3c270eaea5d4f83383bbb07d9ab219e41c1b8c27928af99250589443a1bc49bffac8b2d67da5d5032b36b62aa67e7d3688a478e6fab38132e8550f730fd", 0xdb, 0xffffffffffffffff, 0x0, 0x1, r11}]) r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r13 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r13, 0x0) fallocate(r12, 0x0, 0x0, 0x1000f4) io_submit(r6, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:12 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff09008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:12 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff21008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:12 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000064880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000064a80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}], 0x0, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000064c80)={0x0, 0x0, "d85409c80c6cfd504834532b26935a803bba4972669bb34bc608921d1532b41b6f2a0fd1ba46148e4535eb18e00aa0313bc7ea74c940ee0da496ddf2634c44a4187ea3e09cb493edbb2749acbb3618a56ec89afa70d10552752f71846ed5e10afada0f63f504cc0c0beccb4967da26806c9ac42d86f72b2667c66d38be8cd6a72cbc9d086503c060792407a40e700edd47255c02d5baaee6d032578afb19cb1d39a470b80d68656fa2621edb6e8edadeb7f37c0f4f719a9787a2056fed53be0b8fba2e39645c92691e679ffcfc704e88900ebe4ff7b64ed5cdfb387b736a6563554050716158b0b5d7d02eab35402e01cfeee1079322d746f8f6b296dbe7014f", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000065c80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000065e80)={0x0, 0x0, "9cb6795cb6725bd07dbcb1abcb3d9b1fb715c54c48728fa458fce88d1fa8b371aca6877a8d2189b27b4ebab66ef8c46579a0feef531a34d673f0b7bc59dc434acbee8d06437facb7ec165d95b314b94482c596b9070c55fa0619fe7946cc70a35b6dceaa54206e81d8a57584b6c43e11f2e9a6f00b627ff29ada08729ff1df59f2ffb43e25ebec7ca5dd486cd35f41747bcb16d129f130b130bf017ef197f35c4a7a2dc209691b1db852150cf437f2b7d1956ace8f9bec3148f49625f8bc55d14abeaccf8b558fb351facdf235d5e367a314818579326040ba7c2d4859e1cd27ce7f1760acf42dfc2b50a50532aa1093269e4f7287ecfa6e648383867ff1d960", "1532e9cc87b91ec737b94b706bc146a5396d7b21a7e5592ca140bb0d62f232930198d698bcef25aab58167fda9d5b673a75bd2613d17050ba6c9c66328855ff9ca1ae555d6781eb32e33bf2c2d2b7e92ef3f98fabe26859cf1e8306bc90735bea290581a288fd58f2531616877fe2ef60b40813c582523a5d976ce184e79648f94d85619da4ca69a43ac5412f0a74782db539931f4e55d4760b99d3eb48e73fadf6da42e9a738e8118623ea8763bed1b2b450b2f73823344f514a6fba687e7abf949fe712ce955e59579070a28352ead90355e63117d1505141343cdc2cbab73cd5fa584e6572b26964e948a7605073a385196a968a20ff403635cd3cb9220b73df8d86dc52d28241e4c72757082b2e75d5e51e085711948d69baaacf42129427e514b5a4e848e8adfb9c8eb22e561ac9e34a2e6711caa282ac495fd57f013ed646223a8966803afceb9dce34bb39225293ea35ea845b100284919ecc9e4a5da48629a68777bd830682e844f22dfcd8107141ffc72247863aecde4d3151d85a8832dca34b8a7e0da14d23b3492ef7753e3af0c2d8dca0362f320ef9edddf344dc65b00511e0b42f2fb7473e1c079252d02ebc39e35b47108c7e4d3e204e40997704bb38c0718f7b7fbb952b7ed902ed8b65cc8f00c06f2c885865961fd28ea6cd37c22db09efc681d97455b7488ee27c9dbf9057b5a658a9182d42f1d5f032ca43a16cb362bab71ce83b5614a560fcef47d8e509b6b9c34e1ddaa243c02e2e8173b2ee0432803e0c7eab7f125008a3afbbb1b18b15cab1d7e3c187efbaa1fdc25893629f12c2c2af5ad4d42924f53f8675505c920c19ec8a2fc0923ceda1b6a758130a2a18c60ce8b973ba84ae0f89df48c484414ed0a87a71233ce6415573cf19deaddcec97ce2de416cb8da9cb912d03568e084cbeb286a4da3664b9f2e8426dc904e3a5ac7e3296b34c1dca5c71248d5e55be78a3a834db2cdf3de9f538c8bd5b05eb2e0b439639294c4ae032da15d8f1870cb22bbed12ecad2a1315220c2b00d75a23db2a13574d9994a0944aac6c06dae17c06637263b76b20945bb89c1e941ee2aca4427700c57d6b92cc20c5d104fd0df3695ffac318e36fc9b8d0cf538454a12f30c9f58c825e5ca79eedcbeb7d21600824886531fc17842ddfb7b700e613697e240f14725784bfdf4c2dc3513ee3cca4121b6c513b7a7a0bb45ad7c7f4dbe22bf353e0ad6a13503be9f891406a9f4909b320fe284641faea5d8520830931fd2c6dc5a8733390f5ecca3011103bcc51ff996c0f9f27a13227dbcb8f58f27fe25714f6e814080be82174b1812801027ac2856aca67bafa015027036ba8627c7cd3951d411635f7c021cb67740dddd587810a66ef2641dfd626865db5e42a22540b39205d2a46afe6591a9a50471bd3a036d40159455647776293e927022c0becc220359329aaf5773836be88cadace023de3c4cef54e039db9d365a7ca9c4dbd8f82e4dfb668446248dca65c25100355719e5d424df2187e2f2645bb03bd9ad20ef48ca5fc77478c1d0c07718309fb8eb3d3aea0975676920ee278c20d780a29e85f83e9f0169cb4c01b834f455645675db82835be478e5f632ed21fcc7f4ae2611da3e8d8e03766fb649870eb9e11f349c77b43e49ba28c900c9655aa4655cd7e1bb461acdc6a33818bc422d46ebb90b3e5dd99d41d3bcac23cef370268b3a4073343f661a36334e258b4f7e7f0a69159de1cb45359f45be588f86911e8aba4410dfd4530830aaa62df992deb5d0ab72fe6619aaaddaceb85879ec13cd76a0e0afeb73ab48a28242d39a6220cf777f3770cb37345f7aec4169bc33a6e7b3980e2e22d38518a12a1a0e774b326e30d08d03b7007bc538267876ae8d16cfc7a37209ba1b49fe786b90279d2a1c1de9f16d86266e05d57a7ebe7d5a81605a1ec9832f64abf7614c2096e3fa849d6fa760d93384a5702e376666d90dad6d39a0764a817bdb4b81ca435fe50eacd8cfdef4306e972d5d4f0746546b32ba966fef7902758ebfdab695b81d8bddff7848e1309df9988159d175675e7ec539c17a050d78407c67b03f76d67b4cade2f91a1a1cd6728217c3ca3ae4d927779380129edc2ff2f869fe7f44fe126159a1894ee3a9b3dbd0d8c6cd1c522862e6ef2206b3f51cc16ce7592a6c5ce504708c6c24f522c9365b92ef5ae8b784b20955e9479645b98844dc9a93db7c09f7e0fc1084402ba9b59c1438a215039380e9d68dd5937184200989a4e5c39eb7211cb3ffd30aca11b31f4f71ad75ef95ceba0e4cdcdcb51470e05908b42ded012966e62f0d3a42a8c07b54ffd79b27becc3d772d614b80580780800bf4755cf3313fd0ff6e6ff78f2f55a0bb6d08ac35c340bfe7b17cfee47838f6f4d2c7c91714e24bea3528dbb73d5f97354120b5a64418fdd7f9eb7fb596373782c39dc26817b3ba8e26d17ae9fbc3d84c29256d09686da9aaedc8402db0b110a6c741a99b22ae854d6132d379a7a636b3b9a80effdcc7b346efaaba8b6e21eba68d70546ae5a513360ebfbe34799b0a282ce61880b4f7e0b2f85e3595fd76c2ac258e37dd0f0188d4f3b1abe29b538a113ad999d4987e711a9a3e843c8889f01c684dbb318c13c88b5e810670ea3ab3377eb47cf6300d2f807574ea7afd27ca97132fb8c23031daddc45c1326dfa814b882a16e56be5d0ccee2a64970ca93016da101b535361870e55e32d8840f07fc45441aedd2a2be559fc711e2014a4b9e9e34d999d4d3ed5ddcd0a3ea840ae63ecc6e508646719643a509ffac0a1ce856f98162b798a1c9b56d7e59c4b3393ba766b929039c75c420f32e9d1bfb65d60f5a166c84521814457888e2f8afc4dd0f5fae0d9515cedc45f53ddb3448076680ed4871c59adcdc40fc271f48b323ef7bbd1bf4cfd3301e678e3b1c38feb1e04b499f0361642d97f0fbcc1535a818153a8ce60a675e54a3829b73d0e19eda0452095638ebfa2e3a08c0fe44f1600d6150bd38ba751e177c35ce3e549dc7ddd193dea4db9a8066bd7a5376973d21d68f162580cbb36acc851a227409159c6abc42a793ffaa6637ba6d900e0e4ffe0ddecba383a495361e0ca64679d0b6f98e99abe209e2d10fef55bd29aa9223962099bc4c14236e688ee13a39b886b75b6564eff3f95c52afac58c551e04ba86c8670e82d94a92084d618f717b8ffb1cb34b9469cdb161d34db45c48e63252d4b5106917c62c3a24793d7fbf7f586c671e8bbd1e1277724aaf719c77a1e189272a79f9cc20efd180ab2dab339e8a7d5deeb5b713f5add5de686eaac8d5fb50633c2892c756f0c0ccad2d741dec30d42e55929bb01cd90a68a0ddaf1e3cd464a884411b80cb16437c8c2e280f76ab8cf5f81f807dd2e8d255ac42ab2438dfd891763e7fac0c5bc5b4e77476f73b2ab2d3b97983c3cb3b7a8c36c555a0ed320ecb0eff4cd7c812cd343e4a8d508cf924ad787fdfb33f03fd52149e79705c77f40a13342d12a9685d8021d1ed6329e940c20bdeb30cf7bcce69e9969beff96ccac9603791c729568b2110cb926a8f729bc720087dd892f49df569c46fe55499183c1d331ff8ab6c8e9bff331e58ca045267797efa4c555fc977535f0b3cc9bdf0bd15727874032adbd96413bbed079cb23ae5bfe981d24c596b9d468473192ac5b0e1993c12b685e79d3aba6dedb2b7bb16b0ad1e343e1f35e24de184fc9c0bbbd07c26889690f63a5746652d02ebe028f51efc5fe007e77fe14a402dea717b36cf34ffdb622d2fe6055782bb8ed5fc6fc3af8af3199c4272188e568423c88e8544551d22423461b16fd66eef0cddfb4bec7b542fe24b56d27027dec69d34cc0f35838d7bb33ee665dec9e7eb5d65965471d72c720750530063fbf98724ccadcb5e3afd410b09b2f37b323b48b3308ab6817534521b0713fcee9cb7a4a34b64627c951cc2b602ec480fe62438c7825008a115a7f14096d88d7d815b05b8f1ec3dc4710533bb9e9c36426576f2a6c53523b7036471b819c855d6aee068c9e1b2237aa1e432b2cc7454a6cd1cb7f003144788fc8602f9c41869355197035410158c702719c4e4606843bf1fbda104550872ca6c2944ab0e0340e9d8d2dcdef47517537f18b880dfe9681b1ee573cc74fec91574ec13c10002fe4e74025b918a365f9bec42424a0a5d1f1f45f2746064acbcdae6e0cd4f2b3eca524d858d2be14293d03d86d4eaf89ed35eae4fee4d48c1c2074503fb5e9c014c1211750c243d3e37cab056c87e532617f7e862f0b25f7f7184d7beb10c46843f2a3087ec25f53f45b580c20c2a2dd4583b392a18219c7011eafc74cff1c9f04e6c9e5fa4853f866a1be532ca9aa8f458bf5f6ebe2f9242be399324123b786d062fe8f166fc039ffe93ee952b9b0e94e966a2314ae83c8d7943832fbcd5b76a69ce7b3d021c992b4054cc1c8ebe6652a458687fefcd58728cf5ef21662a4439df970e2afa6ab255b5984cd4ad57d5e9eca4fd84cfd47ba6affd03589a9acd3954f55193589cf74aafbabeb0feca56e7902908e1e01e49454d10490a868069403f5cf0caff107c107d29017f876e35659600b77a88691c1a47a2dc8d76dcd268701d9edc3a6fb87f80f7072076287e7216a394dd03e2209d01d745a36064c0c54ea65e6c96c940d4c3d691fa00f56df7f405992f84ba21411bb119b0a4577100447019ffb74cfdaba5956878380ee82fdf184489ad0a2b83f83148573a1afdb95854b8d6937acd6da0e936d43f2bee6bd8386b31b49776ca1163c830b032bf0b83862e46d4965c9f0a1e6045d5cfc20f6a4ff2a3f4846ca1dc560cbd5d1586f3d035b36e28e1b99636fdfb22dcf4b68a7c451e00c1bf9fd60cc8fcce8cc7102bc08b95664ea1969f2141d1361b671f21d0121209936ba14ec3ac40b1aac2e2b02cf1c01c360023d5b5742a0deef6e8acff5f1aa1cf5418eeead952561a8571864f7ed394498cde236db6cb850e46c63a839ef31298af5e8184f5d31af1762b7cc08aa5f07e9e188028fe2997fd7ab1dfe48498c2ccfb75fdbfaac76f493c24385a318b164b760cb5214947eeab9ce6445ef2cff84d000ebfb2faa963c6c4102431f09d50bdda48535eb88810d59d3105b130b7a988f2fa4ee278a7f7d075a02d8618b04767b9c6cc8fa225d46ade070736bcb0366871066e79f69330479fb0106c089f9729340ad6cdb188c7480619efa32f94619dbb3467cfda221d6e4551ccaa654674fcc54f9e69eb6e28598b5c099262cce05e8b3f1fe2a4619e1bc2d178e04b5f14263c86e1a39fb8cf70111597188561bfd99e72b0cba49590282320c8440d7a050c71a9de8737bdffadf07f5e3b4cf39378c5238e10610f562fdb701b3fd5325baf9fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000066e80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000067080)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4, r7}, {0x0, r9}, {0x0, r10}, {0x0, r11}, {}, {}, {r12, r13}], 0x4, "3491bf326b12a4"}) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 54) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:12 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb3000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:12 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x2005, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r3, 0x0) close(r2) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:12 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x873}]}]}, 0x20}}, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) r2 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) tkill(r2, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:12 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffffa7028603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:12 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06028603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2310.053035][T25470] FAULT_INJECTION: forcing a failure. [ 2310.053035][T25470] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.065691][T25470] CPU: 1 PID: 25470 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2310.075956][T25470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.086008][T25470] Call Trace: [ 2310.089279][T25470] dump_stack_lvl+0xd6/0x122 [ 2310.093872][T25470] dump_stack+0x11/0x1b [ 2310.098025][T25470] should_fail+0x23c/0x250 [ 2310.102440][T25470] ? mempool_alloc_slab+0x16/0x20 [ 2310.107463][T25470] __should_failslab+0x81/0x90 [ 2310.112233][T25470] should_failslab+0x5/0x20 [ 2310.116735][T25470] kmem_cache_alloc+0x4f/0x300 [ 2310.121611][T25470] mempool_alloc_slab+0x16/0x20 [ 2310.126454][T25470] ? mempool_free+0x130/0x130 [ 2310.131193][T25470] mempool_alloc+0x9d/0x310 [ 2310.135700][T25470] ? ext4_map_blocks+0x5a8/0xf00 [ 2310.140634][T25470] bio_alloc_bioset+0xcc/0x530 [ 2310.145476][T25470] ext4_mpage_readpages+0xe55/0x1140 [ 2310.151166][T25470] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2310.157060][T25470] ext4_readahead+0x99/0xa0 [ 2310.161597][T25470] read_pages+0xb6/0x540 [ 2310.165855][T25470] ? lru_cache_add+0x13e/0x150 [ 2310.170657][T25470] page_cache_ra_unbounded+0x3d2/0x430 [ 2310.176261][T25470] ondemand_readahead+0x58c/0x7c0 [ 2310.181302][T25470] page_cache_sync_ra+0xaf/0xe0 [ 2310.186325][T25470] filemap_read+0x3ad/0x1220 [ 2310.190986][T25470] generic_file_read_iter+0x75/0x2c0 [ 2310.196294][T25470] ? __fsnotify_parent+0x340/0x440 [ 2310.201448][T25470] ext4_file_read_iter+0x1db/0x290 [ 2310.206552][T25470] generic_file_splice_read+0x24f/0x330 [ 2310.212185][T25470] ? splice_shrink_spd+0x60/0x60 [ 2310.217204][T25470] splice_direct_to_actor+0x2aa/0x650 [ 2310.222563][T25470] ? do_splice_direct+0x190/0x190 [ 2310.227577][T25470] do_splice_direct+0x106/0x190 [ 2310.232523][T25470] do_sendfile+0x63e/0xbb0 [ 2310.236969][T25470] __x64_sys_sendfile64+0x102/0x140 [ 2310.242168][T25470] do_syscall_64+0x44/0xa0 [ 2310.246655][T25470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2310.252550][T25470] RIP: 0033:0x7f56c00b08d9 [ 2310.256956][T25470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.276556][T25470] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2310.284969][T25470] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2310.292966][T25470] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:12 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = eventfd2(0x4, 0x1) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x40, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x6d7, r3, &(0x7f0000000000)="70c8e097496e8d6a8a88986d80", 0xd, 0x6, 0x0, 0x2, r4}]) 19:08:12 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb4000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2310.300924][T25470] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.308887][T25470] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2310.316849][T25470] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:12 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06038603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2310.483046][T25486] validate_nla: 35 callbacks suppressed [ 2310.483056][T25486] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:12 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20005800104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$setopts(0x4200, r1, 0x3, 0x720699f2cca24405) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2310.537981][T25492] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2310.563910][T25492] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:12 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x50, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) io_submit(r1, 0x8, &(0x7f0000002cc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xc, 0x8, r2, &(0x7f0000000000)="f57f91f8c08004a0b51dfaf6d1b857e092e1865e2aadcaf43560f5cf5b1a1574fe4357231a3b510182e2e29668a9fedc42ad3664431a975c9e7b8f9c337e559e871279b0d12725066690550d640bdaa600", 0x51, 0x6, 0x0, 0x3, r3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0x8001, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf, 0x2, r5, &(0x7f0000000300)="861772b60e3db433e1400b0d2916962ac142fd150cae278b5fb4f2ddf29eb9f5eda9a9bbd2dced94c6df1f9bff07d67c64df5cc3fbb1b60cb50ab9d6980f162f445310006a67b8aece86b85fb29f01709d05c89cec3f92b9cff868b1fb773122a619ad550f7b02e9d4cb4b1736ed037d94e3c4bdcaaeceac21ef1e609148a264b6d33fb6ea57d41375c511887769849c9bd6f05a283c2a", 0x97, 0x7ff67e9d, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000003c0)="e1806c50191866961cddf4c03a781f00fb49052693b2fafe7ec1e7a88453a5cad02225cabdaaaee3dfdd0bcf8d9188fa1ef303211ef72f0cb9fc12064e019aafed4070a492c03652580728bcf7ec67128a15d0c0c02d2e0a325dae782c592a3b", 0x60, 0x4, 0x0, 0x3, r7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, r3, &(0x7f0000000480)="7b2e7bfef03dd6636b007b3c42ad81ea07c4e70c4542d3c5056656bdafc2294ccbbd94b194753f5cb8743bc30cadeb18ece6db3c1309fe3a27a5bbe4c857e406f842c372cc28ec43bd38f66da8641272150ae9955cc30836ba64818e0a7e67a55d7de613ce0f0243567e22", 0x6b, 0x1, 0x0, 0x3, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000540)="f7af084efa175637d49310992cab0cee53a4728ba93cd41f4208609ada3af1270fb843073d1eb8962f2907de6e51db128a933444ac9ddc13c9227677b1d6103549e1519bb0fcb1069029764d8dcb56f74cb7c09113cf1c1ec289763353c518581443f4e3045212c74d894b21eb", 0x6d, 0xfffffffffffffffa, 0x0, 0x3, r3}, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x1, 0x78, 0xffffffffffffffff, &(0x7f0000002b40)="1a80894cd730e1055334dcd0a8abe0d5bf26cdee8dd5e015497ca63afac214b14a37f63172216d1695c6312adc907012249ebc25b0cd63e1ce58a7717bac175d076c0b09a78630955aba286095243f18bac2b34185ff05601b83ced2ae9076a6cf3441172489a9aca05bab7195a4da315340115d55ac0fb85591c4263bcd3cfb890cee13", 0x84, 0x1, 0x0, 0x3, r0}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000002c40)="39e3b1cab664ea3b0fa30a24c52b6dfb91b437e1df31c9521248176987132fb0adeda70eb0b27a774dd44ba262b1bc7a8e333456a906", 0x36, 0x0, 0x0, 0x3, r3}]) 19:08:13 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1c30c2, 0x18e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:13 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 55) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:13 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06048603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:13 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/213) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0cd77c324735d626191646cd7a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f0c4e7ef0"}, @NL80211_KEY_SEQ={0x7, 0x4, "d3da1c"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d579755805"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "62c9"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r5, 0x0, r5) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r5, &(0x7f00000007c0)="9677499f570928b3aa8602ae6df8eabe274a5e02c27eff13c376a1d7095ee291b897cf65fefa61dec5b7d100afec54f6e3085096922d4683e86f5d6563c03ca838d14e3da5dcc4bb37473853f7022ec77371da96a1c06ffc564f2aa466b0e5ea69746000fd9d8f072be9b65cda82f8ced712e0b7e8c7c5db0c3ee6e532b742e9455afc90ffbf7c94f7dc154c10f1a212d1508e5373246b81232a18a865db5c16c797f67f4c3e6ef623bc036d9c8a26a23aac8535efc8482a9372baa43cf6a45771d7bfc7d875326bf3c93a3cd902988fea6e3807179f3a374559a063f58c9cf1f3ac21b6a7a9578922d2b0a17d4dc4ed95e72175478181f03c982e110507b8b1f913bf4823b65c22b076523b50a6ab80fc21d377f9eb9b8c93ca36316d25f4e674ba223401caf3d9170054f727cdeff0492087142473459fa4c2a7282b5a25087432039b123b7fc3a24139ac7f01ef9c53bb518b49725522972c6d7bdd272321ee90f3487c6e0bf75bd9a9e97ce8c1ae9afcc4e5c6598bcc0e2e98974deb789cb1b7184313d94eafe0fa23eb8f4a23b30529f4afe3c37ba315543536e3808c884200e60bd4fa7a9c262c2cfad35a46496749041445b8b2c23f0fe7adae1cc3bfddd0afd0e9b17020805b3e1c93fda16b850a80c9a2740cbce85cc9dbc7aaecf8740bfa68efd5c580c16540c37dea6852df806d81d851179fa8792fcd6553e69c24cc01ee2581d6935e297d1c9649b162ce0356d52f0616e13c42532f79131a82210ef77dfde1a0eb11a91d7a1959f88ea7bbfd0a0dab95f37083a59bf2e5e6b4f4d70d9f639817535275b159982b20581865493591153d7398d871f367453f86139d5ba994722600a89adada73c7e64b6b4c93b6c67c82ce6dfcb1b3475e797a456961c3e027385184df2e4883a2e25ca4014daa70595d361f3e5f86abccf25b8554669a8ca77eb3eb4da82d391247fffa1c9687cb44f7d1eb50d193abb845afbdc84a01b2d5bfdeacf66cc12fa6eb9ad1be889797ae8d7d5e664171d4d6e7e7c5819a80891e090498fda8dacd6abdbe48025e6e8d5b57e9aada0ea69ed90130ead6ffbac046483a5bace7cc578bf62149aa01f1b66eac6a0618ceb9133aa122398dcb2f4b62720aaa777e2d3112a305f059150e1d3719e545b10d1306b64bec3ac972a5b36434b7c5202422e8b6d27c9b154c5420e58854ec8086b66151dd1a6bd8ae6debed37eee9eb13c19913c63ca8e714549530feb9cbdfcb470068ae5a058e819480b95599cec2f4d981374fc29acd7e863625c6dc132b085aa2a9aa568fa89c60e6f01d007858eade879b694517d7dfb00de2ca16df58c985545c333690ed6413f6d63b52ab953a4d7b6c67dfac82ae105b3da2ce0c458dbaada7439c51ea029b71e55e6d778252d0bbf78aec11ba317e4305c21f59cd348c5a59f2ffbe2f0e326808f77d15d7d5e100e523697aefea45727309874a435995e91a4ad4f1f87aeba3278f2cc5453561b7b4a5272db9576da3581e5a66745246d71e0a1710ebc105e4e3b7db4b86748afe6f082b6ca74b4af6ca03dd31f5ed8976cf53f7489d0372d6f779e67d699d1d0012b3ab1dc2aede7302cf73303d1a8dd5b495e74b9f641136351c0f63e959e5a1f8f7551603988e3f16adc51d735ee6be68eb439aa86ce21e4e791852c585a186c301c3bcd8dd2e752463b6d8e94c5224c7217de37280742333e373b1ba333d4d3aa89f8323a32b9079a5a84f5c4982abf4e7ad480d458e38938f26ae3b8d115c8f03e79e9e9573f5ce1c7dabd708fd9dae530f407755be25c2b9ad6c02fa6d9ea259ec1c55b7da7760d9e3cee66a809a4595e132c4f19c1a3251b67eb705893cd4b51c937990119930a4ee9207b609379e9c6ba8c83ae08cac5cb7580e4e20b095dc531a6f594e613bcc62b55a2c1364ff9ff2016c610b913e055f8918c145156cf09ca1498ebae182617fff4b22b158a235ec39e8f1f940e60c7aebae6a4ca078ba864060ae82484f1b62c170fc609bede4311e88a84cf374cd72e54296479d90e48758e7fd8cc7a7a36599d97ce6f263dd6d9c6b46c81cad124da1ecabe666ea03c964f7c715a521ecae527c0134a6fc95ae2d05b724e4e512736b4335cab9fbb7827ac7947cb4ff70a352b6952fba07e692903bff7b6313ce94d696b6909906f46ae7202862a0f0d9990636874ecad1d9e9da8069adb1b2b384790834e5ed02244164e0d54cdabc015efb0b71b2307f700606951501f7f89d1c70e4d87201c28bad25da467de54eccb6848c9aa979a2949b8228a2c25659b9e2398b3b2cf8876919e2ecb2d47f9ac64fa2e2aeaa606040e2941b3432e270af27c435adda65fec962a6915695515f4073ee3ef5426baa90cb7202669265002a66e836fafacfa41851d969d39f17f752ff68d3cc0c16f1872c255c59d484408d21ce37f67cf9a60ffa304a49b9cbec21438bbc79809afcd14e69c909fd4ac1314f97ab62a32d9d51acb1c693f73a91ab30e7c92af333a43f522ae7a9b2cb2e18c268d7571bf2bccba36b6d6a74a0c7c9a77d22e9da57ba83d7dd67954b9683638a533974d58972715c0c7eabf927565b02e1c28ae0dad4af6d4ea96f0ddf6ae3af99881dcd4234670fa59b080bcf137549f379e2752055d1cb247b986c409efb38b87ff9394cd28fb0f13a021923303c88c8a40bd6728e699bded389cd06d0514406a76bea7e157cd35c242dce62865e412f7b3fe5780169722ae071e242ae1698813d5ea5d748feaa3acc50c7ce3162e0c1144a5efa6e9719be3b7564dd1c56db182919e178078d2876b3173b56e6bf8d6df1e84e1f2f9248e321438a9fd7660cf2f5091af8558212af174b524d6624f3c0940bfd9012cf70345a13876c080491727d10c884172c9739287470596f94b19be4be4a7fcf2a670eb1368621b2146a9328084fc55b83e8cfa47d3a6d8232b507556e1ad11f209f61c3a390df39cac646178d43db92562a34e326240c4f0e35652fb8d8d529c7f74aa4176b1e9da74be0aa097c7c15c0b9ec4ddd385c1a38026f40cec40b25bb6a315ae7b4ccd6b5b591fc89f8d896cfcd7cb31f6489072e4c50785a9c6aef1b8269712624c600a3cf2607ed40a703ae8f4c715e57300e649a241ce6d7486ce381d3dd8fa72088139b6bfc4143e6638879067010f4ffa46cf9bec6d37941b9e92244aae6f9ab050e84c21acb4e4ce89139da39b695e9e04a544ae73774c58820f51416aab05377cc0c2aba8fdba1a963a8da08f92a7ebe076c653f8a26b90b4451f493fcf8b1e79063e99161b8f08eca5ab1586b017242f69f270da9a34b97aaecb1d9a1c8fc9fd2c96169f89bb723cbd265f5badd228a6ab28f710bc0e81ae48012dd95f2532411760dbd4aab94a0cc3264b419b733e744246ec984613600ec9d20819873bcbfa48b3be31557367c82c7e8dd530f0a27d896781cdc64cc88041e76ecc1fece6db7c8d56d469cd1d1fec11e717cf5373c4a9648097c0e9579cfd30ae4dd9ff62c471c191e5633aad71dd5bbd6f6b2d75d11dc3f76d3b3d14fff664c8f3d16c550e873a029b1528fbe8d4547727948800a473dff01004450b65abc194b1bf9430078cc92a88c0fbcc3335bc165de78e1b5588d217419894a38c222e4506dd647d5991f967e21032d4734ba050bce53de7074fd54d2e080e783d7ad7cf5e20bd9d84fe8953027a1f8cea95a04fc2bee2e2093935e6c6789ad8693002c787c26e6261cdc30a0398fd714b21ea9864eef61e7d6ad5bcb08ca7bbe08dae49b3b3a6a4752d84d76194abcbae8bb419ebc06f6ee74abe0aafde676571be38b8b6d3348d5ee1fae055fb8f722b339019d11ce4edca21df78e461bc698c8496535dd9a93de882a405185f9245532bc21e71c3ab92e2eb65ce7e2615866424e2fa38ac3888c13a2d9c96fab4aa01c7b1a6bf3c71ef49d39ebfac61b42ab40f6b76d96404923d96e44ed42a847ff45a72e78a34c07a89a9de97980d47ba0450638500cff01f551c38a62b8ffedd2b2c892f4456c7bb4ce57e66af862bc176a7965eb057a59ecf5371820212c6979bcb1e6338bcceb242d99d0cda4ec2a18c3be70aeac7e66fb2dbd4ded480932112f6e0825a3fbe4ee93811cbac6f39a1c66a7b1a57effd6f24ac03ebd83f8584619b9324f9cae7d60e779e5f61a65e166a69994e366b9a5c9b8d615d845b50a422a81d945698fbdb2877d90b9c548d3dca3c516969064f36053b0da423adabc92cb2dfe7eec1082d803f7f4c5b2bcfa10f3533dba5bd9f95eb96a9a723f19ddda2d2a2b83b295ea61238bbeb62e3b334fbe9268dc6ac134d5bc73a7329797ec416c5f683363ce7d93ba2278c1fcd82217d34f8b0b179a794ec5b4bc3fac2bac987500dc2f02e45c12d1903a5d168a4eec39fe58d00b0abd63276e8197bc88214a5cb2ebde348585a029f539196471e2c435d5fd022ccfcc64f0bf425cdc61b05d7384234e268e34be894e3267779242f53413be75fcead07e0e29003dbdf43bced66bb27ff85d704bf09f921f3e6b7b2ff395af155b7687cd497da90d9812348bc1ab96c0d294d9385c16427c61f33b9d4256fa566c4fb6da8fb71dca489d5d85fa4c4b6586f14cc90daf7be20cb599c46db0c939b95658d4b0516e0e106f76e2cc35f2fac052c76e0a99149859b670f9beb9b699b6fb6ad980d1901e6e255ee688bf3079aab99ed7f3b301ed4d5d30b58ad19445cef6ad05befa73fdba202e55d3f437a845d0c8a805229c9ea00491eee7a5a466f28a7170b5ab5aaa09612a6a68546a4b972afe5b9d136947b2ff336240131f821f7da85f0f6de37cc1ac70286b634da04f33776701da38c2315801f564abd5304d2883858214b1ea666465f4bec60803e2779e9fd5f494f9a07a0ba5473b56b7fa5249658308c0b34ba7e437e1dac83be1469ab466194a4efac32af74a3159423f399007f6aa048b8593056a0c4b7c9d51513d4a5cab72e4bde2b9c32cabf2c9645de4978a4c6cffdb64fbb37ea00065e837b7404d96488873f2d61d7c611958b3661b7f441f725a4d63f89b7b97fe1f2974aef157108b5666420201ab9f56c0dd9d19f187cdf63bc809f0fbe3884f815650cfb0fcb3c026bab53121a911ae93813f2e8212a094dcb87edfbf19132856fbddec94fb736288e63db0e9fdd030d50ccc00bace444501df9f409fc1a94783509c106281872fdf54e3c44378f66f653ac8823d1cbd1ae5eedef176f540dbd714aa3a5515bd72c874b4509ef21697130d9fdbc60e568c5181c1c46857331a8a3d7ff2735bbc2225252e6c1a0ddeddf40aaeaa8b74a97627afaa219e7c6e807fd073f8195528117b1dc788397ecac0798822cf4b745ce82fd9f8b18f2edf2beb26d5a8d4371d6bab6a5694ef482db65bdc6f0400bdf7a4e19aa77e97c81222ebed8d9f7896879bd44d88013bf175ed6b6fe04e3ea975dbd3f3c3c7fc4ef704ddb22a6727a003b002f161cd5dabacc209d8af257f026ac1d1963098fd579b0b6fe548ae381c2738ed9229789d78cfacdf5265b66c668c91d1ae442438a92d49db8eaba4f36ed031935f0f55cb7156ef1579fda2cf5df485e90083399837af9fb5350370885fb95cbbe97fccd81c99a7cd62851aef0170687b299f1fb9f35d612f3d0cfb79d9779e3e50b423057c77b53908e5de02e13e39e3d29557d77e5b7f2c288215ac65ad6ca780b09f854a529ecda854f97b2d071378df83bc460086cea3f126c1a540085589aae59ef9cb85", 0x1000) [ 2310.862494][T25515] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2310.922682][T25520] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:13 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb6000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2310.968251][T25520] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2310.980724][T25521] FAULT_INJECTION: forcing a failure. [ 2310.980724][T25521] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.993324][T25521] CPU: 1 PID: 25521 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2311.003474][T25521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.013522][T25521] Call Trace: 19:08:13 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x110) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x0, &(0x7f0000000540)) [ 2311.016955][T25521] dump_stack_lvl+0xd6/0x122 [ 2311.021541][T25521] dump_stack+0x11/0x1b [ 2311.025697][T25521] should_fail+0x23c/0x250 [ 2311.030158][T25521] ? kmalloc_array+0x2d/0x40 [ 2311.034777][T25521] __should_failslab+0x81/0x90 [ 2311.039549][T25521] should_failslab+0x5/0x20 [ 2311.044052][T25521] __kmalloc+0x6f/0x350 [ 2311.048239][T25521] kmalloc_array+0x2d/0x40 [ 2311.052656][T25521] iter_file_splice_write+0xd5/0x790 [ 2311.057928][T25521] ? atime_needs_update+0x239/0x390 [ 2311.063183][T25521] ? touch_atime+0xe0/0x250 [ 2311.067677][T25521] ? generic_file_splice_read+0x2a9/0x330 [ 2311.073407][T25521] ? splice_from_pipe+0xd0/0xd0 [ 2311.078246][T25521] direct_splice_actor+0x80/0xa0 [ 2311.083169][T25521] splice_direct_to_actor+0x345/0x650 [ 2311.088531][T25521] ? do_splice_direct+0x190/0x190 [ 2311.093544][T25521] do_splice_direct+0x106/0x190 [ 2311.098395][T25521] do_sendfile+0x63e/0xbb0 [ 2311.102813][T25521] __x64_sys_sendfile64+0x102/0x140 [ 2311.108095][T25521] do_syscall_64+0x44/0xa0 [ 2311.112515][T25521] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2311.118838][T25521] RIP: 0033:0x7f56c00b08d9 [ 2311.123299][T25521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.142985][T25521] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2311.151394][T25521] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2311.159371][T25521] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:13 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06058603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2311.167331][T25521] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.175729][T25521] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2311.183688][T25521] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:13 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000385000/0x1000)=nil, 0x1000, 0x7ffffe, 0x4002012, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:13 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb7000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2311.267619][T25532] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2311.329198][T25536] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2311.387902][T25536] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:13 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregs(0xf, r3, 0x5, &(0x7f00000001c0)="14f1b04b59a02d8cf5f1293b732c3e0ddce0fa332e0b660199078d77055c1870438563c1e15dbdff70b5090185c643e156d07c31c5a7bc734cd57c1450e5aa35c2f0550418b3a3e87682f8f894ae1430ae86cbd2c449907892fe3dbf3990939054aa595532c585f8147e0921cad94b76b0aa1e11b131d0b45e") gettid() 19:08:13 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x12) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:13 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06068603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:13 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000001c0)="8185508bc4f33477efd65300570d7df1e2f813b046cfd800ee2779a89c2bc0640cfa9c4f0a3853c1d7456648ae9e821e1b3f9e31a4e2a9e64320f564858328f395143ac83ee6ec44f0a3aa4e1a166363f94eb8da891c8924336efb3dc7c9bd1f797dde9054e4aec4fa05d618485f89101e8dc796d9cfceedc0baf4abbf326980925a86722795c62529b378e2a90f", 0x8e}, {&(0x7f0000000280)="882c3022ae5d9799dc43cdedcffbcc59d64a6e4df62ce610d4a52fe396e9ff1cf6e6bf699b54a70673464c0199148f30f448c6641c3649a125d61d97eabd341530e9f08c70d747e89b618cf99f07d34b3391673cb5d3d32be73ee36bf80fdeb86ee2fbdd5d79b406ee19448fad6aba2c8ddb41031527815ce14c74795e7bf463cf0e51c6b66922e25eb7a23e018258c5d6bcdaad94c7dcdda151e1cf3d2f7166fe5b6aadb6e416caaff58cc8b00943efb16f362ffc7db5552869a49da2aa61e0283eb266b6b59924420861bb81a2f5", 0xcf}, {&(0x7f0000000380)="dc13324ad300c1199f30369aefb2d88c335cc53a9eda740378e7a6540ffa1e10002e117f6da3f6bd65341eebc63b7cd9524b432f6df38c3992d2aa7fa11bf9274ce9150cbec6d7e83e46c7479a0ba98b6d73ca6ee12018ba8332c4d422e2ee8c3d96e7f6d3d42ff65cf867468137b1a5e84cae6ed5164979cf99c5f1d1acf5b3a5378cf7a6ead9c2233139a75d5cf5182f60", 0x92}, {&(0x7f0000000440)="f96857790f48efe0960bbd7071a76ee34ca8653eafa8b6b058d0537b0acc377ce4815fe00a9cf88e15cb22015e4d247c619f0be14d281ddcf17b8342ce55d58746173813d3434b32fecdeb71b6ab62f7c00a3ee5ffdffbfd77b21ebd4b8f6c71742a293198f5312ce731b4", 0x6b}, {&(0x7f0000000580)="2da46f7843606e387385ed4758d9aceb3239fa796ab6cbf19aa6e94f28976cb08712e440bdb1176ac4704e9950b5e2d8f7c28e985b43e85d1180db75451839378820109dda54a9350e79efd3d3b068733a3f2dc215b00803e6c017e93adf52228e68e7f63002e3bbd5f2b0aa84660d65d5b68dc9dab68e62e7d9dbbd23cc7d12d498898f2c23ded264c159d926d554952490822da7aff22d0501", 0x9a}, {&(0x7f00000004c0)="66268dee4a409f983b0ff9470cd77cca260cc54f755792f466d7c438e6a4a197b7974115d8a2ba9ff6cac8d10ebfffbcaf7236940c18c32b048055fc690f82e2bff8a229006f84faa30be32203a0e0c9c8ce306069e5da4fce926999288a53f422d37311", 0x64}, {&(0x7f0000000640)="9fa38f13e994fbf5827bb80ebd1003261a8262f091385ba922066e73c80fda4c5b3af3fa6301a445bad64e50c651c2d9cc856221adb321becf80b1608d4debf73df8e692bff2a91927abceeed0ac6219fe95d54b2b422182b0e7e3b2463a01466145e6a2f39999a41d97a58dc068ddea6e18a838cbcf11c0abb3778cd378ad4b2e0fd479282355b5106e10ad80c724c221ffce5e7380bb812510eb6053eb686b6bed763ac711aabf14d830946e0f62fa22ca00e41b2afa64ba610e029923a44d", 0xc0}, {&(0x7f00000007c0)="1d4570984989e36606162c221c8938bcbc997d0373a4f43b69dd7ee6dae65d3e28b2585f27b243c8320e2369c7fe0aecfbc3b80f5e513a6f3d13ac114a18ff774919f2f9decffeee0af0f549b2a0a93f88a2ff5f1ef6e1c8dd8b1faf0e0868ab7fcc82b3deecf05b43fb0e27135f2e7d3f2d61cf90b67082b048875c01becc655e1e2566407b1b0f1ed101771428d5ee17bfa6235d1ccd46fc934024a67a6dcd49d118897a5b5cd216ec41b46bfc2d378049dce9c23c89472ca0a4a99a9b85826da8196861768e8b6f4e6111088f", 0xce}, {&(0x7f00000008c0)="fa03989bcd49a598cd9165fe16ca34dcd763538f318e8325a080ad7d1b73f15dfbdffae59f67fabffd560593fd0686d5d6cbd47fcac7c6e3b927ec7f037d4fb6f7212ebb1607f53a9e9fbb4e40680a217ef2572a49f88960fa5fac8d8ad98b4429e7fec38dd8d0b77d4ec201020e0333079b35d9845e00bfb26a3f06b1efc3b030be949095674004e393afe8a96b71109662fe1bcd68185ceaa3e2db1389bda7e9db04969ee59385436a9321b76b119f42ce42995885a0e21a2e61abcf5135ff86a8795b624f8f20e624c117b8b8e8d8acbb9ba6d8d5dc030c96673f28dc5e5f822dc2ab80ca", 0xe6}], 0x9, 0x0, 0x0, 0x4}, 0x20000004) [ 2311.524912][T25555] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:14 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb8000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 56) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06078603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:14 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f00000001c0)={0x0, 0xfb, 0xdf, 0x4, 0xf6, "38764530ab6494ec16601ff8e5047615", "5fa1c70fc30116e4f79483177c44f5bb28da4074aca63e51a4e78c803342549a5c66731a8ed8f677d94cd63e2926b57601c262dd4d0fc67da139737d3a3459dc4b62ca187b01135255d4a6139bbe6d3fc6e049e5cb02f21e5e02ffef3b93609ae256b82df3800d0920c8081e73fb6d563105af392165280a8e9ad5a30f09d1f5dbd17ec93952b270ff4803b7d96717a2a8ad31912ba367d558522c94d3c8c2b48f2b797aaa469a4ff27f87485a50597f1630d662c0f7408bd80bd99188a1b26823bca570a7d35c2ae135"}, 0xdf, 0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06088603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2311.818593][T25576] FAULT_INJECTION: forcing a failure. [ 2311.818593][T25576] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.831395][T25576] CPU: 1 PID: 25576 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2311.841540][T25576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.851580][T25576] Call Trace: [ 2311.854856][T25576] dump_stack_lvl+0xd6/0x122 [ 2311.859447][T25576] dump_stack+0x11/0x1b [ 2311.863596][T25576] should_fail+0x23c/0x250 19:08:14 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1cb2c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2311.868007][T25576] __should_failslab+0x81/0x90 [ 2311.872766][T25576] ? __iomap_dio_rw+0x139/0x1010 [ 2311.877697][T25576] should_failslab+0x5/0x20 [ 2311.882202][T25576] kmem_cache_alloc_trace+0x52/0x320 [ 2311.887552][T25576] __iomap_dio_rw+0x139/0x1010 [ 2311.892318][T25576] ? kvm_sched_clock_read+0xd/0x20 [ 2311.897428][T25576] ? raw_spin_rq_unlock+0xf/0x20 [ 2311.902400][T25576] ? update_blocked_averages+0x650/0x690 [ 2311.908057][T25576] ? plist_check_list+0x151/0x160 [ 2311.913105][T25576] ? __cgroup_account_cputime+0x4f/0x110 [ 2311.918733][T25576] iomap_dio_rw+0x30/0x70 [ 2311.923057][T25576] ? ext4_file_write_iter+0x521/0x11f0 [ 2311.928629][T25576] ext4_file_write_iter+0xa59/0x11f0 [ 2311.933989][T25576] ? ext4_file_write_iter+0x521/0x11f0 [ 2311.939438][T25576] do_iter_readv_writev+0x2de/0x380 [ 2311.944637][T25576] do_iter_write+0x192/0x5c0 [ 2311.949223][T25576] ? splice_from_pipe_next+0x34f/0x3b0 [ 2311.954736][T25576] ? kmalloc_array+0x2d/0x40 [ 2311.959324][T25576] vfs_iter_write+0x4c/0x70 [ 2311.963827][T25576] iter_file_splice_write+0x43a/0x790 [ 2311.969379][T25576] ? splice_from_pipe+0xd0/0xd0 [ 2311.974219][T25576] direct_splice_actor+0x80/0xa0 [ 2311.979144][T25576] splice_direct_to_actor+0x345/0x650 [ 2311.984512][T25576] ? do_splice_direct+0x190/0x190 [ 2311.989531][T25576] do_splice_direct+0x106/0x190 [ 2311.994382][T25576] do_sendfile+0x63e/0xbb0 [ 2311.998800][T25576] __x64_sys_sendfile64+0x102/0x140 [ 2312.004007][T25576] do_syscall_64+0x44/0xa0 [ 2312.008433][T25576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2312.014425][T25576] RIP: 0033:0x7f56c00b08d9 [ 2312.018827][T25576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.038434][T25576] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2312.046847][T25576] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2312.054810][T25576] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2312.062880][T25576] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.070852][T25576] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2312.078827][T25576] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:14 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f7) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @mcast2, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) openat(r5, &(0x7f0000000000)='./bus\x00', 0x40, 0x10) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06098603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:14 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2d) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="40c60bef67640fd923bfa44e14c053016f752e07000000c6c39c6ce98db1cd595a9f714022e31c990d0f95010020659fadc96be315d2d7b9cf4101305f0b825f3aa98e0000000000000000a9c7c7fd1094cc9c126c466b38eb36d0dc53d4b650514b12bf98866220596510fb69152a3838e19f78f1ff68e979f2dd01ce89de6904247d1c8f71639e64f346345b6248783f52476f1f6481c4d5c73d73212320ce2e7e50bc9a4d771b0e12cf3d4afc9dfed9fd1066d6ea454ee5180b0498f154b6f087cd2e4569a0b0cd018536e90bfac217"]) r2 = fcntl$getown(r0, 0x9) wait4(r2, &(0x7f0000000100), 0x80000000, &(0x7f0000000340)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x7) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:14 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb9000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060a8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:14 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0xffffffff, 0x7fffffff, "241bab2ceb61"}}) r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) fallocate(r6, 0x28, 0xfffffffffffffffc, 0x7) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060b8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:14 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xba000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 57) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:14 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x12000, 0x20) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:14 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060c8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:14 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) lseek(r4, 0x3, 0x0) [ 2312.718962][T25649] FAULT_INJECTION: forcing a failure. [ 2312.718962][T25649] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.731693][T25649] CPU: 1 PID: 25649 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2312.741958][T25649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.752015][T25649] Call Trace: [ 2312.755288][T25649] dump_stack_lvl+0xd6/0x122 [ 2312.759903][T25649] dump_stack+0x11/0x1b [ 2312.764069][T25649] should_fail+0x23c/0x250 [ 2312.768636][T25649] ? mempool_alloc_slab+0x16/0x20 [ 2312.773672][T25649] __should_failslab+0x81/0x90 [ 2312.778435][T25649] should_failslab+0x5/0x20 [ 2312.782958][T25649] kmem_cache_alloc+0x4f/0x300 [ 2312.787718][T25649] ? ext4_inode_block_valid+0x1cc/0x210 [ 2312.793585][T25649] mempool_alloc_slab+0x16/0x20 [ 2312.798431][T25649] ? mempool_free+0x130/0x130 [ 2312.803103][T25649] mempool_alloc+0x9d/0x310 [ 2312.807600][T25649] bio_alloc_bioset+0xcc/0x530 [ 2312.812358][T25649] ? iov_iter_alignment+0x34b/0x370 [ 2312.817613][T25649] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2312.822642][T25649] __iomap_dio_rw+0x8d8/0x1010 [ 2312.827556][T25649] iomap_dio_rw+0x30/0x70 [ 2312.831942][T25649] ? ext4_file_write_iter+0x521/0x11f0 [ 2312.837404][T25649] ext4_file_write_iter+0xa59/0x11f0 [ 2312.842697][T25649] ? ext4_file_write_iter+0x521/0x11f0 [ 2312.848175][T25649] do_iter_readv_writev+0x2de/0x380 [ 2312.853416][T25649] do_iter_write+0x192/0x5c0 [ 2312.858029][T25649] ? splice_from_pipe_next+0x34f/0x3b0 [ 2312.863538][T25649] ? kmalloc_array+0x2d/0x40 [ 2312.868132][T25649] vfs_iter_write+0x4c/0x70 [ 2312.872626][T25649] iter_file_splice_write+0x43a/0x790 [ 2312.878064][T25649] ? splice_from_pipe+0xd0/0xd0 [ 2312.882910][T25649] direct_splice_actor+0x80/0xa0 [ 2312.887961][T25649] splice_direct_to_actor+0x345/0x650 [ 2312.893354][T25649] ? do_splice_direct+0x190/0x190 [ 2312.898383][T25649] do_splice_direct+0x106/0x190 [ 2312.903225][T25649] do_sendfile+0x63e/0xbb0 [ 2312.907732][T25649] __x64_sys_sendfile64+0x102/0x140 [ 2312.912932][T25649] do_syscall_64+0x44/0xa0 [ 2312.917403][T25649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2312.923299][T25649] RIP: 0033:0x7f56c00b08d9 [ 2312.927703][T25649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.947390][T25649] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2312.955844][T25649] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 19:08:15 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:15 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060d8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:15 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x810, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:15 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xbb000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2312.963820][T25649] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2312.971774][T25649] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.979730][T25649] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2312.987694][T25649] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:15 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060e8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:15 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xbc000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:15 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000084000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x228bc000) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$binfmt_elf64(r3, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x20, 0x5e, 0x0, 0x7f, 0x3, 0x3e, 0xff, 0x4, 0x40, 0x2bc, 0x63c, 0x4, 0x38, 0x1, 0xc3, 0x6, 0x919}, [{0x6474e551, 0x3ff, 0x8, 0x7ff, 0x1303, 0x3, 0x80, 0x7}], "1c4cb19f15c77fc1d05808dffb06aeac8d99c20a884467052832ae2f86e862b53c5ffda3130d71c0633afc56d7231a05d7cd9d9659fc71b75503f573472488dd2a8534b9d2bb3019da3d7676ea70e46a98ce318f088d04527ffdb906b9ed2804bdebea13f610e9e40692357787deb5da8e3f3cc451e30705281da9e37e57989e8e21", ['\x00', '\x00', '\x00']}, 0x3fa) 19:08:15 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06108603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 58) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:15 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xbd000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:15 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06118603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:15 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x4010, &(0x7f0000000140)={0x2a, 0x4}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2313.637331][T25714] FAULT_INJECTION: forcing a failure. [ 2313.637331][T25714] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.649965][T25714] CPU: 1 PID: 25714 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2313.660461][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.670706][T25714] Call Trace: [ 2313.673978][T25714] dump_stack_lvl+0xd6/0x122 [ 2313.678581][T25714] dump_stack+0x11/0x1b [ 2313.682775][T25714] should_fail+0x23c/0x250 [ 2313.687201][T25714] ? mempool_alloc_slab+0x16/0x20 [ 2313.692230][T25714] __should_failslab+0x81/0x90 [ 2313.696982][T25714] should_failslab+0x5/0x20 [ 2313.701713][T25714] kmem_cache_alloc+0x4f/0x300 [ 2313.706494][T25714] ? __blk_mq_alloc_request+0x270/0x290 [ 2313.712035][T25714] mempool_alloc_slab+0x16/0x20 [ 2313.716879][T25714] ? mempool_free+0x130/0x130 [ 2313.721544][T25714] mempool_alloc+0x9d/0x310 [ 2313.726036][T25714] bio_alloc_bioset+0xcc/0x530 [ 2313.730792][T25714] ? submit_bio_noacct+0x7ab/0x7d0 [ 2313.735906][T25714] iomap_dio_zero+0xac/0x340 [ 2313.740494][T25714] iomap_dio_bio_iter+0xa62/0xbc0 [ 2313.745516][T25714] __iomap_dio_rw+0x8d8/0x1010 [ 2313.750270][T25714] ? raw_spin_rq_unlock+0x1/0x20 [ 2313.755212][T25714] iomap_dio_rw+0x30/0x70 [ 2313.759651][T25714] ? ext4_file_write_iter+0x521/0x11f0 [ 2313.765104][T25714] ext4_file_write_iter+0xa59/0x11f0 [ 2313.770405][T25714] ? ext4_file_write_iter+0x521/0x11f0 [ 2313.775860][T25714] do_iter_readv_writev+0x2de/0x380 [ 2313.781116][T25714] do_iter_write+0x192/0x5c0 [ 2313.785700][T25714] ? splice_from_pipe_next+0x34f/0x3b0 [ 2313.791150][T25714] ? kmalloc_array+0x2d/0x40 [ 2313.795733][T25714] vfs_iter_write+0x4c/0x70 [ 2313.800237][T25714] iter_file_splice_write+0x43a/0x790 [ 2313.805675][T25714] ? splice_from_pipe+0xd0/0xd0 [ 2313.810520][T25714] direct_splice_actor+0x80/0xa0 [ 2313.815447][T25714] splice_direct_to_actor+0x345/0x650 [ 2313.820820][T25714] ? do_splice_direct+0x190/0x190 [ 2313.825917][T25714] do_splice_direct+0x106/0x190 [ 2313.830791][T25714] do_sendfile+0x63e/0xbb0 [ 2313.835351][T25714] __x64_sys_sendfile64+0x102/0x140 [ 2313.840675][T25714] do_syscall_64+0x44/0xa0 [ 2313.845220][T25714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2313.851418][T25714] RIP: 0033:0x7f56c00b08d9 [ 2313.855904][T25714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.875487][T25714] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:08:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = gettid() tkill(r5, 0xb) r6 = getgid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) r8 = getgid() r9 = inotify_init() r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r11, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x2024, 0x1b, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="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", @nested={0x1014, 0x4f, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="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", @typed={0x8, 0x4a, 0x0, 0x0, @uid=r4}]}]}, 0x2024}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r11}}}], 0x78, 0x44}, 0x40084) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x0, 0x0, r3}]) 19:08:16 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f00000003c0)="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", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="811a780f725da8ddb82638") clone(0x20000, &(0x7f00000000c0)="df0de2c1d3a3293d7a6e85be489bdc5d9ef02984269f2119820649db65de31bdcfca", &(0x7f0000000100), &(0x7f00000014c0), &(0x7f0000000200)="1f18cf67dec1973de2c0bd8ae8a8ee4332636d5b250cada2186cdf3d60489ff4f013d519545b574eda9480e9c427c47d78278311c3adbd7e5c96fd801cdfebcb1428fa62d41423195eadfb1904c17ef096783747263f0f1375bba691f82b085b41ad9f0ea3974ca0341a24314d45bf3f902d1055d957e41eae8175d6b025") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x210000, 0x88) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000013c0)=""/156) r4 = fcntl$getown(r1, 0x9) wait4(r4, 0x0, 0x8, &(0x7f0000001500)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:16 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06128603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2313.883962][T25714] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2313.891908][T25714] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2313.899953][T25714] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.907903][T25714] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2313.915858][T25714] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:16 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xbe000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:16 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06168603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x5, 0x7, &(0x7f00000006c0)=[{&(0x7f00000001c0)="e031aca82063df00dbb6855d94aa97d370427c69a12359565150626e667920f20f49ba924329e0810f62aa614aaf178f6c49adeb5e3f19ceac2841d8a5a50a96a15c74fd776c650e9e2e51458b12b17bb7135a6078d1a85c6f6b0b5717ee0e3ac11af84e2a8efa9530ba53991f5aa665748f0e6e086b4bac2057890d8e163f6a75782f5070d5c0ee", 0x88, 0xff}, {&(0x7f0000000280)="921c5586a0c4f21fbbc9814266565dcbc5c154f11ab313f68842282d07d7a1e1b92313f0d8e56fa3b7a7189a38d8daf36b64bbac0ad9d4132c14b90d47b1988591596ea30492c2cfa57f04f88dae7b7527d0c51b70e8f58a712b8d7e64df872d2e730ce42c5f0a62b4784b78295cf54a7d4ea8d73570adbcc87fe932ca348dbfc5bcb875bab21ef1b21741f60b0232ead2de5fd4639f671dd721041227a82cef294e4114824c", 0xa6, 0x7ff}, {&(0x7f0000000340)="f9b54d9f912aef9951f30606995909b25da56dff5ea6bdf7cb4821b69383f0033b43584281b62ce6d362a62b63fdd2db9f5dd6628726927bdb0f7cf9eb0b5ab8da89c1e214db882a752bc9a2ba74466e03088eb816fa08f14715e318fc59b4eff4aa938390415c7ff97817084eeab61852224345bdf9e5ac74a97169377c16c53f22b1fb7e53d6a9", 0x88, 0x9}, {&(0x7f0000000400)="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", 0xfb, 0x7}, {&(0x7f0000000580)="4e91ba67c9fff7003ebe871455ed719b998a4a1bd12b03cd0d516a1b1afe134ca5365c4f6b2b51b31b81da9b3681eadaa03a4c46341318a01b5d13169c6d3e8b91aca9191df38edc9ace73b43331cdf87f550c1242", 0x55, 0x4f}, {&(0x7f0000000080)="4acc86a97db2bc87641d6cfebbb19624d245db7547243147a7af4e4afa9c064a05", 0x21}, {&(0x7f0000000600)="d757541ef613015ecead52114850543a27c888926ae95bcca1af9fc2c348155c984bc5919cc0635d41332317825c05422a55583ae2344db0e00b739b049cd91faec92afc9b25028b947c5027064a10c7fb2859be9cc75177688d387765ace272d3ef414fedf11bb111af5b918cc2811f702d9030342cc939c4d408adf79466346a25e4c02e9c1e97bc141730a595eff37522cae079fc5ac3f0792952a04424c37219b0254e", 0xa5, 0x80}], 0x1000, &(0x7f0000000500)={[{@map_off}], [{@smackfstransmute}, {@audit}, {@subj_type}]}) openat(r3, &(0x7f00000007c0)='./bus\x00', 0x8202, 0xa0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:16 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xbf000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 59) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:16 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06178603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x40201, 0x0) unshare(0x40000000) r2 = socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8916, &(0x7f0000000200)='lo:\x83\xae\x0e|T{\xdcD\xd2\xaf>o\xd6\x19\x02\x00\xb8;\xf3U\xf7c\x8e\x14\xb6\xf8\\\xe48\xdd\xd4\b\xc0\x06\xb0\x0f\x89\xa7Mphb6\xd6\xd7\xe2\xe5)\xec\xde\xfc\xf3c;\xa7\x99G\x0e\xf1\xbbAF,\xa3\x00\x00\x00\x00\xfa\x91\xed\x05\x00\x00\x00C\xcb\x85\x9a\x82j\x00\x00$\x01\xa5\x05d\x88\xc5w\x86\x19\b\xd0\x9d^\x87D\xcc\b\bB,\xc1\x93\xe5\xfc\x1b\xcfc\xaa\xd6fK\x80\xe3b\xf2F\xae\x96k\x1a\x81TQ*>5\x8f\xe47Uo,L9\f\xf6\x7f$\x04\xc7d\x06\n\x15\xad\x9ca\x8b\x0e\"') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r5, 0x0, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x05\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77) openat2(r1, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)={0x801, 0x10, 0x3}, 0x18) fcntl$setstatus(r0, 0x4, 0x46802) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/rfkill', 0x509000, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x1, 0x1, 0x2, @private1, @local, 0x7, 0x7, 0x444d, 0x5}}) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r9, 0x0, r2) 19:08:16 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpgrp(0xffffffffffffffff) wait4(r0, &(0x7f0000001180), 0x8, &(0x7f00000011c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) clone(0x21000000, &(0x7f0000000000)="42dd947586505bb4ea9a55f36cb1c595db362a648df392262da430514f6a3ae617a1b81d4057a63b26d85eeba5751964aec470f4595bd75acb", &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 2314.515419][T25778] FAULT_INJECTION: forcing a failure. [ 2314.515419][T25778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2314.528713][T25778] CPU: 1 PID: 25778 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2314.538905][T25778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.538919][T25778] Call Trace: [ 2314.538925][T25778] dump_stack_lvl+0xd6/0x122 [ 2314.539017][T25778] dump_stack+0x11/0x1b [ 2314.539035][T25778] should_fail+0x23c/0x250 [ 2314.539053][T25778] __alloc_pages+0x102/0x320 [ 2314.539073][T25778] alloc_pages+0x382/0x3d0 [ 2314.539092][T25778] __page_cache_alloc+0x4d/0xf0 [ 2314.539187][T25778] page_cache_ra_unbounded+0x1be/0x430 [ 2314.539212][T25778] ondemand_readahead+0x58c/0x7c0 [ 2314.539232][T25778] page_cache_sync_ra+0xaf/0xe0 [ 2314.539251][T25778] filemap_read+0x3ad/0x1220 [ 2314.539339][T25778] generic_file_read_iter+0x75/0x2c0 [ 2314.539364][T25778] ? __fsnotify_parent+0x340/0x440 [ 2314.539385][T25778] ext4_file_read_iter+0x1db/0x290 [ 2314.539467][T25778] generic_file_splice_read+0x24f/0x330 [ 2314.539487][T25778] ? splice_shrink_spd+0x60/0x60 [ 2314.539511][T25778] splice_direct_to_actor+0x2aa/0x650 [ 2314.539526][T25778] ? do_splice_direct+0x190/0x190 [ 2314.539541][T25778] do_splice_direct+0x106/0x190 [ 2314.539559][T25778] do_sendfile+0x63e/0xbb0 [ 2314.645634][T25778] __x64_sys_sendfile64+0x102/0x140 [ 2314.650841][T25778] do_syscall_64+0x44/0xa0 [ 2314.655327][T25778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2314.661228][T25778] RIP: 0033:0x7f56c00b08d9 [ 2314.665631][T25778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2314.685246][T25778] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2314.693653][T25778] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2314.701612][T25778] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2314.709569][T25778] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.717530][T25778] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2314.725491][T25778] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:17 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06188603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:17 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4001000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:17 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x9) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) open(&(0x7f0000002980)='./bus\x00', 0x189100, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3f, 0x4, &(0x7f0000000440)=[{&(0x7f00000001c0)="990d0dc4252dce9b4dce48163a6d0a42e5cf7b0467a57598f3c009ffc33e46e2a12ea4daf743db564eadcc16095c4d1547078b980c551c8bec321e850e29bffacbc0d8a94ea391f4a08b64c3cba63acf5ba4ad8da5d45e6eeb9d68b4cc98bfc0b4fe768aa8ad84cf50753e848bdbf37d95f9a030088a71e78471f9cb793ae82060b5a1a3cb8472e1ac718403f9cbf0ba3814ec717b10fe3c067f771b3bfc42a88cd3b572e6c495d09fb1b4be8a330efbd0b43cc2ce5f31068edc81fe", 0xbc, 0x8001}, {&(0x7f00000007c0)="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", 0x1000, 0x5}, {&(0x7f0000000280)="4d22a880795cff076a2bd919ee1bc867328da2b874443366f0876904043faa587010438bc76ff24e26d08f7ba1dd9387cfa5fea586f8f9acffaa7dfb63592c5746b65ea1462091aea50f98dcc83727fd87dd6e8905f19e32d7c37841d3d4f92d742fb5eab665c3ddcee5e6b957b0291f746484e6837c0df5b2ad09da18e5ba3aaee3173ecc909f3a867a79c0299d7a51749ef022f8d6bc26f77bbeac93b00591ba20d4adf5d05582297c5052b32a7f8d855e7b98019dde4428d655019ecb9ac96cb89a92940abd32667052f8a1", 0xcd, 0x1ff}, {&(0x7f0000000380)="f8f059161235637f82f90b0caefb2ffbab71beeb0071b43cda7d2ece67513239725b71469c5ef9dd10e297e6f1f7dce91f32c04a6d59e3f15acbf762fc854d2346a62c5d87acadeda40a9648367a01ecfda7232b26701178f17c9041b4873ced09d3a117ba2f442e828f47f6edfcc49cfbb2e89c0c65b313bc7cb10bc263e802fd75739f635f7c3bc94aef734901426296a67564eaaf55ca7e280fce2b1c953fc4ceaf9784d862d3582aa404949b", 0xae, 0x7fff}], 0x86000, &(0x7f0000000580)=ANY=[@ANYBLOB=',!,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c618a70ba93000000000000736b3d5e03000000000000002c666f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC, @ANYBLOB="2c725b6f74636f6e746578743d757365725f752c536d61636b53020000743d2d2c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',obj_type=,\x00']) io_submit(r1, 0x0, &(0x7f00000029c0)) open(&(0x7f0000000080)='./bus\x00', 0x20c482, 0x102) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r5, 0x0, r5) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000002940)=0x100000) recvfrom$unix(0xffffffffffffffff, &(0x7f00000029c0)=""/4096, 0x1000, 0x100, &(0x7f00000039c0)=@file={0x0, './bus\x00'}, 0x6e) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/186, 0xba}, {&(0x7f0000002880)=""/153, 0x99}], 0x5, 0xfff, 0x6) 19:08:17 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="8a0f0334c4e91a70751069575f6d2d59a394f5a01164bce06871657906ee585f5e898825a247298bad1eac8549b2f32d3e5a309334e3d5b429ee6f7309ee7a2791fb0efe1a9cdb2e43a5f7224d17619e8543ae861373c2b76e46db5121cdee64e4b3079caf51fa0c85be5a1114d7bedda4d6d5df61a2439ea2c6fd"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) tkill(r1, 0x1f) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = gettid() tkill(r2, 0xb) ptrace$cont(0x9, r2, 0xff, 0x20) 19:08:17 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff061e8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:17 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:17 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06218603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 60) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:17 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = accept(r0, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000080)=0x80) write$binfmt_elf64(r2, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x81, 0x9, 0x40, 0x100000000, 0x3, 0x6, 0x6, 0x175, 0x40, 0x3cc, 0x0, 0x3, 0x38, 0x2, 0x7, 0x81, 0x7}, [{0x6474e551, 0xfff, 0x0, 0x5, 0x4, 0x6, 0x3, 0xe786}, {0x1, 0xc0, 0x0, 0x200, 0x4000, 0x10001, 0x8001, 0x1000}], "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", ['\x00', '\x00']}, 0x12b0) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) dup2(r3, r2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:17 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2315.416298][T25870] FAULT_INJECTION: forcing a failure. [ 2315.416298][T25870] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.428897][T25870] CPU: 1 PID: 25870 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2315.439061][T25870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.449113][T25870] Call Trace: [ 2315.452453][T25870] dump_stack_lvl+0xd6/0x122 [ 2315.457215][T25870] dump_stack+0x11/0x1b [ 2315.461424][T25870] should_fail+0x23c/0x250 [ 2315.465897][T25870] ? xas_create+0x3fb/0xb30 [ 2315.470406][T25870] __should_failslab+0x81/0x90 [ 2315.475166][T25870] should_failslab+0x5/0x20 [ 2315.479660][T25870] kmem_cache_alloc+0x4f/0x300 [ 2315.484421][T25870] xas_create+0x3fb/0xb30 [ 2315.488801][T25870] xas_store+0x70/0xca0 [ 2315.493017][T25870] ? memcg_check_events+0x23/0x3b0 [ 2315.498125][T25870] ? get_page_from_freelist+0x55e/0x830 [ 2315.503661][T25870] ? cgroup_rstat_updated+0x34/0x100 [ 2315.508996][T25870] ? xas_find_conflict+0x422/0x4c0 [ 2315.514185][T25870] __add_to_page_cache_locked+0x20b/0x4f0 [ 2315.519900][T25870] ? workingset_activation+0x270/0x270 [ 2315.525440][T25870] add_to_page_cache_lru+0xa0/0x1b0 [ 2315.530637][T25870] page_cache_ra_unbounded+0x274/0x430 [ 2315.536089][T25870] ondemand_readahead+0x58c/0x7c0 [ 2315.541108][T25870] page_cache_sync_ra+0xaf/0xe0 [ 2315.546049][T25870] filemap_read+0x3ad/0x1220 [ 2315.550642][T25870] generic_file_read_iter+0x75/0x2c0 [ 2315.555972][T25870] ? __fsnotify_parent+0x340/0x440 [ 2315.561193][T25870] ext4_file_read_iter+0x1db/0x290 [ 2315.566296][T25870] generic_file_splice_read+0x24f/0x330 [ 2315.571834][T25870] ? splice_shrink_spd+0x60/0x60 [ 2315.576966][T25870] splice_direct_to_actor+0x2aa/0x650 [ 2315.582363][T25870] ? do_splice_direct+0x190/0x190 [ 2315.587405][T25870] do_splice_direct+0x106/0x190 [ 2315.592255][T25870] do_sendfile+0x63e/0xbb0 [ 2315.596753][T25870] __x64_sys_sendfile64+0x102/0x140 [ 2315.601974][T25870] do_syscall_64+0x44/0xa0 [ 2315.606385][T25870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2315.612370][T25870] RIP: 0033:0x7f56c00b08d9 [ 2315.616772][T25870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.636433][T25870] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2315.644836][T25870] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2315.652800][T25870] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:18 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06258603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:18 executing program 0: clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000340)={0x800, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)=0x0, {0x13}, &(0x7f0000000180)=""/211, 0xd3, &(0x7f0000000280)=""/107, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) tkill(r0, 0x2b) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) clone(0x4100000, &(0x7f00000003c0)="dcb73062f681e07a39596296ee5a34b989cc91a1caea424465cfc3498b717a94d870f1f75d7f3527ddbe9cf21f9191e6e83fa064ff", &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="a7a12be07977d9dce29554a14a58e2b65e2af5") [ 2315.660760][T25870] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.668786][T25870] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2315.676745][T25870] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:18 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000000)='./bus\x00', 0x10) 19:08:18 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffb, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2315.780037][T25883] validate_nla: 50 callbacks suppressed [ 2315.780045][T25883] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2315.848274][T25889] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:18 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0xb) ptrace$setopts(0x51600a18fe75904e, r0, 0x8, 0x82) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() clone(0x40084200, &(0x7f0000000140)="b646f91d95dd39f43c2b14a0344ed11375c6f73cfce31a22caf2fa42bc5c0c403520d7edfb3c8e04fd1230dcc6805e48dace1b5f6487265bfe559225bf2a3d998d547dc818402da36e7fa4185880e52e8953627fc276a8e65b3990b4ab4077da3da373f80209c7427339e654f7bf6c044e52680f4bec104e00f7fdb35f40d854f81a32aa1f041b39ad94a83f2e956af638fd55944798dcd5c4887358e21d37c5fd46a39bc91ea750ff71a564a9353e592352170b303bc777bcc13e1334a37789c6d4d1ad83a5b26318e23c288bb89c9841eaa5ee700e221fea84d6470f44e6b6ab90f464b5f8ba5a29115e245bb15b", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000240)="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") rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 2315.958800][T25897] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:20 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r6 = signalfd4(r2, &(0x7f0000000280), 0x8, 0x0) r7 = pidfd_getfd(r2, r3, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000400), 0x3ff, 0x80) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r3, 0x781abefc, 0x4, 0x6}) io_submit(r4, 0x6, &(0x7f0000000700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r5, &(0x7f00000001c0)="c70126db03666bcf9beb575cfb73a5495c633b84fb918b5bac3723f72d0ba273c523eef658e6ceb6bb59fc967dd4b99dbcf351345caef277a7b4819c69e71577594d7c1ade3e9b2379af490d7498d391e06e9290c47a7c058803dce16ad1caaa361a331110e0b6e674c68c18c470b989da839146d8badbd0567af2720695c4b89c3e40529130ab7b024f55bc5dd836f4", 0x90, 0xfffffffffffffc00, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0xff, r6, &(0x7f00000002c0)="eda4a60c0b2e5492c746afe083f70d6de61f5a19686d76245c2d9192f3ce0e50c41279be4033404fc3", 0x29, 0x10001, 0x0, 0x0, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xe, r2, &(0x7f0000000340)="af2913d48907a6c39cbada7858a7ea40c452c088934f3960e61399aadaee651010d617610e6016179fe972a8e1eee2bde4b6604244e49d3c7f199ce1bfbec5540330f3359accc46d0f933546d589ea252fb9f5468db9f6f8f1c9dfb85027534f11a0fd5d6887a37a3515b3dc6960ad40f6316d1ef5fee4f4907f653194cb979764fb1701a0fdee233e463dac20e89f0d3ffced57b32a891af1db1b2a3c8fcebae380abc21f8cd5b0a436a5ac042bf5782edbe64c6fd2d7226db1ff", 0xbb, 0x3f, 0x0, 0x2, r8}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f0000000580)="6bbbbf923d0f465fdef26ce257cfcfdc71f67c3cef6c5133d70fba338a5ac8d939d83584ae1fd5b32c2930d78fb0bb7a2462622fad852cc28626ef646a931f98744d2eeb34b14a73cb7e80283dc0df4089c1f74f86c67adf3359a06967b0c56c8ea9eb1fe64d61b3b587d2e8662d1be9f7eb5bc3ec763e08f9e42c1f43fd77cb928796071da0912b8d1c116da599752de94d470b25e5137fd9559cc3769d6c4bbbd680b2c80da0cfc167d4b8b38cf7d245edf4e7c6e8eef5918c7905019c3dbdfb16668d06780975b3a12740285114e0b8943cdb5f", 0xd5, 0x80000001, 0x0, 0x2, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x1, r9, &(0x7f00000007c0)="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", 0x1000, 0x4, 0x0, 0x7, r10}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7afd, r3, &(0x7f00000017c0)="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", 0x1000, 0x800, 0x0, 0x1, r0}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:20 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a4) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) finit_module(r0, &(0x7f00000001c0)='threaded\x00', 0x2) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="9842fa7365a57fc55d51df603da012e8bf569579f86b14ba5da7b33abd9d020c14bf95cfce1777b0c4a4ca8f13cac7619dd548365532a56a23f1503a00cd7f52e6a1185f811b6be9a3b5365badb8d548ba6b6b5019c7efc317da7855931b1b3251eb40f341da9f07e18702143f84056a297555405101c586162d793e0764e3a158e7a900c738792537e1a55d"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:20 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06488603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 61) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:20 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() r0 = gettid() tkill(r0, 0xb) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000140)={0x10000a, 0x0, 0xfffffffe}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = fork() wait4(r2, &(0x7f0000000000), 0x1, &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x4000000000010046) [ 2318.077437][T25925] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2318.135157][T25934] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2318.164798][T25935] FAULT_INJECTION: forcing a failure. [ 2318.164798][T25935] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.177051][T25934] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2318.177453][T25935] CPU: 1 PID: 25935 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2318.195692][T25935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.205735][T25935] Call Trace: [ 2318.209001][T25935] dump_stack_lvl+0xd6/0x122 [ 2318.213589][T25935] dump_stack+0x11/0x1b [ 2318.217747][T25935] should_fail+0x23c/0x250 [ 2318.222383][T25935] ? mempool_alloc_slab+0x16/0x20 [ 2318.227398][T25935] __should_failslab+0x81/0x90 [ 2318.232217][T25935] should_failslab+0x5/0x20 [ 2318.236718][T25935] kmem_cache_alloc+0x4f/0x300 [ 2318.241469][T25935] mempool_alloc_slab+0x16/0x20 [ 2318.246319][T25935] ? mempool_free+0x130/0x130 [ 2318.251063][T25935] mempool_alloc+0x9d/0x310 [ 2318.255601][T25935] ? ext4_map_blocks+0x5a8/0xf00 [ 2318.260717][T25935] bio_alloc_bioset+0xcc/0x530 [ 2318.265479][T25935] ext4_mpage_readpages+0xe55/0x1140 [ 2318.270759][T25935] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2318.276650][T25935] ext4_readahead+0x99/0xa0 [ 2318.281219][T25935] read_pages+0xb6/0x540 [ 2318.285456][T25935] ? lru_cache_add+0x13e/0x150 [ 2318.290213][T25935] page_cache_ra_unbounded+0x3d2/0x430 [ 2318.295661][T25935] ondemand_readahead+0x58c/0x7c0 [ 2318.300689][T25935] page_cache_sync_ra+0xaf/0xe0 [ 2318.305540][T25935] filemap_read+0x3ad/0x1220 [ 2318.310154][T25935] generic_file_read_iter+0x75/0x2c0 [ 2318.315577][T25935] ? __fsnotify_parent+0x340/0x440 [ 2318.320704][T25935] ext4_file_read_iter+0x1db/0x290 [ 2318.325808][T25935] generic_file_splice_read+0x24f/0x330 [ 2318.331372][T25935] ? splice_shrink_spd+0x60/0x60 [ 2318.336308][T25935] splice_direct_to_actor+0x2aa/0x650 [ 2318.342904][T25935] ? do_splice_direct+0x190/0x190 [ 2318.347937][T25935] do_splice_direct+0x106/0x190 [ 2318.352852][T25935] do_sendfile+0x63e/0xbb0 [ 2318.357271][T25935] __x64_sys_sendfile64+0x102/0x140 [ 2318.362555][T25935] do_syscall_64+0x44/0xa0 [ 2318.367064][T25935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2318.372957][T25935] RIP: 0033:0x7f56c00b08d9 [ 2318.377358][T25935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.396964][T25935] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2318.405369][T25935] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2318.413404][T25935] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2318.421374][T25935] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.429434][T25935] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2318.437500][T25935] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:20 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff064c8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:20 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14d07e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2318.598598][T25946] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2318.664063][T25950] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:21 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ftruncate(r3, 0x1ff) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r0]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = getpgrp(r1) ptrace$setregs(0xf, r4, 0x4, &(0x7f00000001c0)="188c16fcba52e389e18d21051398c2331793ac1987a008e58da78ac50af1c3f29d321e84e74f87ef65a1cee1c56d031c27f3827dab8f0b9be42702d197497235be64007c2ad114e893b25665f42bdeda10298b0ddad9febc1f15b00d2bd16ae6d4f25d083dbf9e194c46fe9bd24fa8d5cbe487068ac0f234aeef0bf111982fd465939387356342e399dee7502402f4cfeec63b9bf350f0749f1173b80174d847a8ecf6ca1af5cdd25907f6e3ac8bc6c5a630e1ddec51d783f1b96d48961a9a80e42d0b419872efda132a4dd8cbbd4b377632a7ad249b0a1e588b90d1a861841c815a7b1851eb26f1cbfe1daa1a03726675edc0") [ 2318.740924][T25950] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:21 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = eventfd2(0x9, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) io_submit(0x0, 0x8, &(0x7f00000006c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000000)="f4fa7a928fb3a4c3bd36d3eec15610", 0xf, 0xfffffffffffffff8, 0x0, 0x3, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f00000001c0)="2ce2b8c25bb97c6966647e876ad774773d108adbfdd1ae286f0c1a7d0ddc3f47acbe79f8eeb6d3f231fc1d30b3c108d1c75eee489d8702ee516fe8e76ab1b786cea2eff647d0b9753d43b0698a024fe068d9edff5211659fa9f344c8f5b6e98e7080a3cee05d9a899b5e22a0917009dd79a1162e116bd37c89cfc65545b02f251f836600940d4f594bb85f16bf5d3e82c0b43a4c83a84e2be82637371f6218037edc4276cd5f9f82c1c29b417337dfd7160ba74b9f1b4aa614d1dca23acec9b4baae5ca019fdc5a184dd33f55e9327446fa3dea4befd80", 0xd7, 0x7ff}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, 0xffffffffffffffff, &(0x7f00000007c0)="0d474d9bb6b0b80b3d6db55b3c588cd54d6418413621356d4937fe9982e2cd138b86ef2f24537e9fa0eb94b19b7174bbd3ae14d77e8abd944735b255d68c403f9233108b9c581c2a9e19ff8abda9bb2e704740b09523429f561cef6aed328e9ceba4cd770e3d1ae3875a72adcd43a78164f2a8c803c964019c6dcad837166cb65856ec8a58ba1c576e4eaccaa87eb87319e99a5818522632deab233e7759b8ea1230c0c7bd65dae51328c72616c8785e481c04f7717bb545453c43739c583e90e130d2418ce6ac018b931cb4658d5f7091f0af0616ddfa00205c095b22f252cf7c7869cf465c5c7ca4148c1763e0ddbce483769417cd7155dee784021557ef55b48f3ffa48e5892d40fdabcf242c9e721f25e1e11cc64e71887c03ef3cf4a701f310afe5ec580bfbc46e222908545fdce164cdba80f3d39aa79fb742ab74436dcd4d52d38531e194a431dcaa5662f694d21ca0b9f10bb12e23e7442b22d81c781283641786c698e0a7b074444c640d1d66525b329cc6824c16bdfd7c0024b9629b88d33b394b95ae7f4201f1afbf6a1d3b8d10d5ae3f2c853ffb68a00c0b98545bae82954fc04afd64a1bfb79dca1da2cbcdc3c7f35206b2c50138d2c28e083961612cdd9332b05612d8227789187a9a095b626cfcfe8bcf078679078ef7ecd0259cec33a499c94dd0d766ab2537ea4f0989190d2ce2d337b45b495a07be0dcd245bec08d47be8282fcbd078cf8a009778a3d684bb60b77b76f5215f663b3d96a60ee1a976e0b6d8c72bc9bc6acd01d103f0fb0439f217d245d7a9e289d60e9cd59b12649ab255de4a6f009713e717fb2216234c50c954aabe798442b79af903db1fb75769a916ee9cd9438083afae69dc2ac59a39bb34e117a64af627197898a356817f851b662238aa6e98ed74df8d10b06051c6f6dfdde43197d87ef0fefd514b19ad2dcb6acb9e3f85264ac739089b9c5f17b99260a019530bacea2b6709479844d2040d358d0d37ae05156a0f6d2c0a2a30a6f8344dc3dcb05a8ef5ced2f0f5e6bb271855fa1eb4502286466a06bac0f40485cacca7f8f416dd05de21fd7fc951d67306c7e7607c815f227f1c56ea29535d838ac02e65723f6cd00e1be1c84be4626b6861430f93aa87ecc6acce865514f88771e1d734d186ecafbc9d7d4a6dc04161956ebce7d2ee0dc26792f31f4c2f2a310c0734c6ce7116ef033dcc8b61106b32d9f695a86949a86f560d1929bd01d41eb81b9e6b9fc980752bb0a1798b0fb1f344b7f9503acf524b86f559fc7110027358b50dc2efed190d31e1adda6383e683a78a830ec0dcee3a7484d01af1040ab8dff98eb3e26aa7fe66404c8b00b3e5de517208508e985711f749cd5ba2cbe198875a4c4a0ab4ae29cfcdaaf60046637b3ca6b390c5ce6019f8130a6001cb95fa539d95f587555d2d1e9bc6b43c5644c5d0c83149b8abb3a82380ecca4390442979b88de8984e44ed2bb97eb81706e79034e0d30688eac9844aa8243d2bb8e161f73768c9889b387ed996d26b7389b99250beb2af9a7dac239a0ca607637aec2434cd2317302df6cbd034b74f0b5404a51a353600964741a0f09ab56f61e6cbcbea556d8acac9b0e3acecb4270b6777b5d591e3c9345c334d76fcb492759048a40b16fcd1fa1c58295923cbf40fd5abb4c837007dc3870001252c03c3feb0d3afd75248fd92039489337860f0d1496eb4cfce9667f663ee57accf1c76509beda1123389ae9a85bf708a8fed24dd2251fcfea992f6b9a3a223085cdd5a56520c595b198ae5289e4c5018f6655579aff960651f3cd47aad9f256726366213530fd72670e285556595df102cc8850e1595525e07c6c4979d64aefc99e688e247addfc582a4afb7e278bf531d991a24e7dff9b6f1561d1aab217fe9df509260770e845ff8b7a6c578838a45978b6f583aedf3ec1b2e9f99905075e8271fe0a269d88f66499ba940021750bbd2630054c451332d2d65003551b576907b73093c03eee897acc5b450210cf0eaf3462152b7f1de12c7fecfbf07dfbfbc4c4218243907b8bbfcfdcfefd977033ef1b764d469e2ada56cfbb2463b72ea964da11df2a66827cf6e39363076d819084e49a886028e31580c84c47dedd04666e48c5e34e096aab20c6c82e4d3b0d304b63741de3cd5b4e4df274ac116d8c1d5e910575a8467d85af3d21f3f22ac0565b3b23616f93261492ec1701dac778d29dd886a51f0ae1cacaa52d07846c6337ba78fe6ce46c3e9857912697d17fc71d35d7d9be5b9e233974be7dd7277d8401aaf948ce9a53dde4c90416f517921a60b3161ce009c6367ac7904c6eede7d7b2f66df36e789fa0c6f3a4f2393098761f8e0108fb93525486b96f6ee9b6ed08f0c62e7e693f5963ea7495b6032fd44a6fc91faa99c3edb26ac36df2efcb6d3aff4739b4d6d29df22edf2fd9416307a679ef461194a9f35cc0313f7c57bf61e1fd74a74ad856a5c3db8b3376e9364c44f16bce0be38cfa69a4855dd7ee0d617296932d99b34e0945ee1b28a3009e4d4d5ff087a35f1b1ecad072ddcba4e56a00c3935d9e2a0c93836a6f05ac9822d7a59d5822a02d1039a4595d3dd5cf5dc1d011d1602668da2ecacc63fa10b731a69cf905902e639dba01e030f5e3a07ca67146838b3f74ade194752d420628b119d3f665111a7e0f87c634f2e1597d5e75931d3d3b770e496eec16e723d9b64528d7a1515efc17d9569bf8f14e907060cc8da7f92fa3476982fdc3ac1b31199bdeeb96e5df5485ea179f5375eef21d9b588893e880153e38931c742dad679bf4c2bbbd614543eb746b8456b899b3d962d81353a02f5b5de9cd362f968132c17316daf9a4a54b1b07353f3e97e68888f9f54af435cde32752aaeb96146249d86bf96d376ab4bfdd53c98505bdf81790981e812c7b76c4e9ed35f921a02df23f5c1413759db53cc8808f008a4e0268b3f5b4782a71e2ab0056035f25119975a4ac52284e6a9753646234d9fb933c185df24ee6d85c79ae0230e9084fd2b5a2051e08b3dfd788f0d7bb2b7743a25f35f84371602f2198828a1135ac692109e32434c74820f5b3e086092b29b6cc042b6e12a860921a4fcbe08407eee38a17e671e037e9c37fc2de0ee59ccc728219f258871fd086803e9deed9b80c68579ce419afb5c93bb9f5701f046f0de4047a1c4573cc85b22b64a3cc8b152287fbbac2f461d8f79164a92aeeb03e43ff9f056af9ae7c079118230e7a647b2fa3c45de9a86d44651403e057a7150515aef417520535a6f8b4612f9b827b45e8643597398aa83e8870628d0b7eed4a062a511c85a1a14e01882ce88d836e546a9bbdc4eb9ef04ab5d3e87dd6380abfa7e472e97783161ef8cb7bf45a917db822f524363cb6ab3faed7500fd8c910fbc97b1dae5a976f2edc572d75a2fd6b3e85e6495ee768dff90ec851c1c5a2b3b58ef9a6f6d940f614e919811c2cbab4d3f79da0dccb6d14bfa1762248a3599a85f82fe96dc86318617e6d4eaf478be07a01f9b49832a3625b0645a79abcad76affcff49b10a428f32c2f67730f3b98df085f507ee20517e5b7dd711177c8d13170e13c69c2b33c0ff80e0c107f09461ae01e00ac01ef6c88a02fd607ca8f89203ce9592c66b84f0e5e84d94191e903a3189335c5ba346d7f15469f9b51b0fedffaca0fdf960ac52bb9238afbdeae54c2379acbb93edf8c87c37b62d680394c89d82f272365dd5944b3eeba1dba538e2e645cc56ccb1d38c834653702bd1be5af2cde0ed4bc6d4c53c5c1a5e24e9b5ff1a1d69991fdda6ab82947a1c6a3e338c7bb8d3e8a212ed2d581380bafcd21ba612ea90832cab75932e6343b0d4808eff8ecf8ac9c93abdbbfb980dffd04ad44292c5cad58b72e66bdc3155e63f86f2a767cdb448ea808624d28a37de2a24cdd313091e093ce54f09d763c8ba57c70ce4b7a74209335c4309eeed9826dcf7f085020a983bad1e1b6baab300b39f06d6213e20940a0d18a616a910932c0e5b72b0ae6c262286d00b3aca219243043812ff48159dad78a127135da38fcead7196251077a85bb0edd2854a5cf6d1caacab23901308a2168d8c74c00d5fd93be2781fe83157406bdecb29f95f42cbf972ba4df89549d3a8c1e77a7537b7831bbe4cf44356f37826c67f035daccea769a3d70005347e761ec17ef4bd0ab162a9fd9c87e71776a8c4411327d32c0c0e9134dccb5df75d89faafb1848be9df481b75fe472283f3c1068fd5fd5ad2f80dc8995bd00c1de3692022e20548236ecb993cf2313d4e07133043607f33aadc0993dcd873621cb004d27ddb53f2f0e4e4d7127bd0dc45581ec4a07102ab550fd0ca3692767d21e3f60400367cea0801affb2af7503327d52c3cb08b012ceec83dd8bbd222ad9db5d72cc96f4e0db098d346cdb603753d1d7bddca1f729134b4a74b2a84bd23344e3486f4aec2063b1e0ec26f1e5935802dc8c11d561687cd7dcc8224847bde7dd41dbbf0dfa10236e36bda99acebc73bf19586ffa9d8dedf316c9e2b9c4c90e444ecd8d3292aa5865c8c824eeffa79a1e002541789eb3c633829663eb62a1ae989ad06a9d55e66ceddd7a3ca17c3111a4e2a4bde3c44daef69fb19c9c0f10503613f97db45125975211ce78e9865fd65a6f336d6ce64a9b23fd8f9dcc96dfa1126b9261d70b882b455d8dbaf72fb5e029fdca05800f9b746a1c97566120aa0671f2159825c7c9aa944e01bae89354c47f77f78ea7c02be3fee3136fdc26f1df760bfacb2d56d8b54ccf252969ee52bcba6e2cc6bd336a1d67af09a43a26dbab73650d820c40e50295b91af3baf86b7cb7feb529260498506eebd15a8904c79c98a2ae16733ff371ae98c27f4e522e804a05afdc72b99d2a489f793fd88f50154e96a36ae12f78c6e9ddeee3440bcc4494005daab586377ac6827292d72801d7244068fe08c59f88c4c641bde4eae6b6239f58bc1d3ceada98ac74a6e0810586afdf6fc2358a18c826275a956ce1458088b97f606eea2cf181c8ac0ce8e9daa6bebc5b4b5cb7b6f5b14e9c69654b08560c9fb0a393543e49eb2e71db87ad0e2bb8c9a8c61ec9ce3968ecd3f73ad348e942815a13f7fb74f82a71d89777e85432fa127925affb4361cfb877e293effad250aa1031d221908675e50cf3b19f0f1ebc0896097cfc62796bb421316147eb312d60af149236f636ffa15d831b22ca8abb173fb890f4a5186b6d9d81cf8c3644ee5b6eb6c6850edff48c237fa2782c0adebdd146d05395a7b77c0b55a010e322ed0b7245620a42c4105d8f962e173f1028dc70a897d6eae95bb3a863786a8003b4b0523d60704176658ce98a05a2d2c3f8fe5e65b72d60591056560f759cf4c49f074f6960c3780bdff00a145a36f089ce5646b1f2194391ba4aed9b0b8f83f9a6e4fdd4e90f7eea7747b188cc07f9a1f1dc0a4df979c02b26666a1257b9bfb20d5c878b8a6b78c4d8198870064b247ffc3bff0f641d92c70af9e9c11ed7bfafa22e7fe60bf997675e5f55437972900d3de30be83c5b4cd6e403a00422677f391b870d16191870cd95030b82520c4d5d2343f9d5db5be18a84015c451770e74a01b2a6e679bbd7a4fc7edd7aa7c06bad50e9279b0d9f3a5aae19b58d6ef534e7780a838e7a3b70fc56c120467c7bbc5787fa8e7f85480dd77d2a514a8f9a93f60edd0696ad302758d42c0d32673f0718a662c7c57d53e2ef0f280c37dc33231cc9a7dad11f5458a8f98a952e9fc5b2425a43723198d98961e9cdd34e", 0x1000, 0xffffffffffffff80, 0x0, 0xfbee4138af0fb62f}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000300)="4a935c3f6e927d1fbc16a233", 0xc, 0x7, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000380)="ed879f3c7aa4380455de28b130923803c44e2be0e751d8b969fa46569af590de7d56f1d150530cfc5d98d42d6ca3e15c7ad755e2bd1da75c74617069a292bc57611af9bd9d26b040ba0d672c7e13f1ef0e13008bdcb5dcb178f2828d67aceab8370e20b67b7e0d79dbae6d6d5a244f0e4d95968a524993c672aedcbe9e83f57414198e4b8b33d67c33a8aeb0093d01d99aedab24b4fb0f2504df353f82e79f4ecd89d43cdb9d99bf796401665f", 0xad, 0x80, 0x0, 0x1, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x56f7, r6, &(0x7f00000017c0)="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", 0x1000, 0x1ff, 0x0, 0x0, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x800, r2, &(0x7f0000000580)="2d4c68ee74f5aeaf83527840e9fb52b5d6e94073360ae4c2cb13c876373f49ae05d565fbab812bfa387242e08606e06d7c17413bb6d5a06651056ebcd6e9f9d4dbfc55f310a0a602452d2c83ad454d064271195704405d8585eb7571aaf3f74e72dcb5e3fc7a295acc15f49c95b197fa9cd51a57108ee0c5cdc2a69de889ca68ab312215f71713d8487df304794b1165c0f45171ad952b49c74572d84d93c33a0ff98b72574f5143860f89b20d2389d5de8f99d3d4cf3b286f8f61956d53c08ef6eaaef75d96d4b3ab65caee44f1293c76b65426633d7b75160e7dd5649ebfb696d6115bc6bc782da2031aa6623e3809522709089a1e", 0xf6, 0xfffffffffffffeff, 0x0, 0x2, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000, r8, &(0x7f0000000500)="cf3651eb291eab9748f695f030b25ecad913a26074ac85e0789e83946ff610a615e508320da28eb975988d23e0cfc2599c1d02b4a98dbbd8", 0x38, 0x4, 0x0, 0x3, r3}]) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:21 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06608603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 62) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$SG_IO(r5, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffd, 0x5f, 0x1f, @scatter={0x5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/230, 0xe6}]}, &(0x7f0000000600)="3fde44fb911839f9338470ede1c6941302f52c59ed559ac976f5ab6e059fc363bbfc0d1a1146d9034403a27adf1702fed20b699e5bc5ea3201fc9e1d8528e2c475ef969afe940c2df0942f3a0109429ea15d315625906b3640e60c0b75df7d", &(0x7f00000007c0)=""/4096, 0xe547, 0x0, 0x0, &(0x7f0000000680)}) 19:08:21 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = gettid() tkill(r1, 0xb) ptrace$setregs(0xffffffffffffffff, r1, 0xffffffffffff8000, &(0x7f0000000200)="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") wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000140)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 2318.945520][T25970] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:21 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2319.101823][T25993] FAULT_INJECTION: forcing a failure. [ 2319.101823][T25993] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.114531][T25993] CPU: 1 PID: 25993 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2319.124700][T25993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.134751][T25993] Call Trace: [ 2319.138022][T25993] dump_stack_lvl+0xd6/0x122 [ 2319.142619][T25993] dump_stack+0x11/0x1b [ 2319.146778][T25993] should_fail+0x23c/0x250 [ 2319.151194][T25993] ? kmalloc_array+0x2d/0x40 [ 2319.155789][T25993] __should_failslab+0x81/0x90 [ 2319.160555][T25993] should_failslab+0x5/0x20 [ 2319.165074][T25993] __kmalloc+0x6f/0x350 [ 2319.169227][T25993] kmalloc_array+0x2d/0x40 [ 2319.173673][T25993] iter_file_splice_write+0xd5/0x790 [ 2319.178954][T25993] ? atime_needs_update+0x239/0x390 [ 2319.184147][T25993] ? touch_atime+0xe0/0x250 [ 2319.188646][T25993] ? generic_file_splice_read+0x2a9/0x330 [ 2319.194797][T25993] ? splice_from_pipe+0xd0/0xd0 [ 2319.199634][T25993] direct_splice_actor+0x80/0xa0 [ 2319.204566][T25993] splice_direct_to_actor+0x345/0x650 [ 2319.209954][T25993] ? do_splice_direct+0x190/0x190 [ 2319.215068][T25993] do_splice_direct+0x106/0x190 [ 2319.219913][T25993] do_sendfile+0x63e/0xbb0 [ 2319.224343][T25993] __x64_sys_sendfile64+0x102/0x140 [ 2319.229543][T25993] do_syscall_64+0x44/0xa0 [ 2319.233952][T25993] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2319.239890][T25993] RIP: 0033:0x7f56c00b08d9 [ 2319.244295][T25993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.263932][T25993] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2319.272354][T25993] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2319.280314][T25993] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2319.288328][T25993] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:08:21 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06688603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2319.296372][T25993] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2319.304856][T25993] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x2, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:21 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:21 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff066c8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:22 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x82) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x65070800, &(0x7f0000000080)="6319835a3bfe94b959834354dbaeb6b1ce3901f5190540e0f91a118dea26dc9d38a8591bdfe9820fb8b8dedd4d3ffc4d6fddb04cbb229270a114ec4b7653e3fb52022fbda94e3a0f33fbc40f577f8edfb48be9523dd7b52e3018a3d9214830cd8218798a016554cee111b71823404cc4b117445800f6189f10d1495a6a3ea1713b87c394167d20f2a6c8a11b3f0635c2507ada2f908ce2", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c9dfae34a32815") mkdir(&(0x7f0000000280)='./file0\x00', 0x140) 19:08:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={0x0, 0x1, 0x7fffffff, 0x1}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) io_setup(0x6, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r6 = epoll_create1(0x80000) io_submit(r1, 0x3, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x100, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x400, r2, &(0x7f00000003c0)="5f85b39fbe0fc726e1e491a77419dcd7c1bef93dfca86806835ca1f3036a9bfae307767cea0bedea0012c9535e31ba0731a077280ec27a0786eeeedd7b848a1dd54517e33a35bfc80df8259e95e5ada38558a4712af6e7d4f105cb1f8311cdeef5c05f4dbfeecc8bc0818f69ad8fd948ebd54ea5d2dda55bd5df66e6a55f976203d56ca921904aef194a1f06ee83859ff3dcd9ee0860b72b1751fd012b022596a64395f86956ff1238583ecfb65d6ec1e8", 0xb1, 0x7, 0x0, 0x0, r5}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000300)="98d7d5c29ebc1b09eda3607cdfa8a70015d7b84ec040731948655ff125b618ca0df33088a61fc8d4b7ebf4b713f85a2512a0c573616be036085dd8599ee208bfcd1968a2aaac6ce42468b40892", 0x4d, 0x1ff, 0x0, 0x2, r2}]) 19:08:22 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06748603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:22 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x5, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 63) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:22 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = clone3(&(0x7f0000001540)={0x1000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x24}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000001400)=""/193, &(0x7f0000001500)=[r0, r0, r0], 0x3, {r1}}, 0x58) ptrace$cont(0x20, r2, 0x20, 0xffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x4000000000010046) r4 = syz_io_uring_setup(0x61f6, &(0x7f0000000140)={0x0, 0x9228, 0x2, 0x1, 0x15b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) pwritev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="17240b6de5d051fbde03f41ac16ce926ffa3d040931dab1b808e84a940de6e1f27567ba356fb1f05ac6279f544676bb9943a17cfa6364953fdc63f3bca4add29b155ee89a975fd81bdae9409e49cc18e778d19c2fcf16b2148ce13658b47b7589f0a4fa55b78963fd879da9b75663fa3c9a05bdd", 0x74}, {&(0x7f0000000240)="c8471e7f18558c3b0f862e679c4e884202ea91d7d55e39e3181cb0636fab6c988e8d637c812563198f09fe91a7c7df6344ed8016b03b4479b74dfa9f24592bc2ae36f80d5a", 0x45}, {&(0x7f00000002c0)="4dd51c0626b2a8c963751473ad3c949ebc64722c35c77bf69c07", 0x1a}], 0x3, 0x8, 0x3) 19:08:22 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff067a8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2319.956523][T26052] FAULT_INJECTION: forcing a failure. [ 2319.956523][T26052] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.969205][T26052] CPU: 1 PID: 26052 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2319.979480][T26052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.989582][T26052] Call Trace: [ 2319.992858][T26052] dump_stack_lvl+0xd6/0x122 [ 2319.997449][T26052] dump_stack+0x11/0x1b [ 2320.001603][T26052] should_fail+0x23c/0x250 [ 2320.006070][T26052] __should_failslab+0x81/0x90 [ 2320.010865][T26052] ? __iomap_dio_rw+0x139/0x1010 [ 2320.015845][T26052] should_failslab+0x5/0x20 [ 2320.020342][T26052] kmem_cache_alloc_trace+0x52/0x320 [ 2320.025624][T26052] __iomap_dio_rw+0x139/0x1010 [ 2320.030390][T26052] ? kvm_sched_clock_read+0xd/0x20 [ 2320.035600][T26052] ? raw_spin_rq_unlock+0xf/0x20 [ 2320.040587][T26052] ? update_blocked_averages+0x650/0x690 [ 2320.046216][T26052] ? plist_check_list+0x151/0x160 [ 2320.051241][T26052] ? __cgroup_account_cputime+0x4f/0x110 [ 2320.056910][T26052] iomap_dio_rw+0x30/0x70 [ 2320.061263][T26052] ? ext4_file_write_iter+0x521/0x11f0 [ 2320.066716][T26052] ext4_file_write_iter+0xa59/0x11f0 [ 2320.071999][T26052] ? ext4_file_write_iter+0x521/0x11f0 [ 2320.077462][T26052] do_iter_readv_writev+0x2de/0x380 [ 2320.082671][T26052] do_iter_write+0x192/0x5c0 [ 2320.087258][T26052] ? splice_from_pipe_next+0x34f/0x3b0 [ 2320.092707][T26052] ? kmalloc_array+0x2d/0x40 [ 2320.097322][T26052] vfs_iter_write+0x4c/0x70 [ 2320.101826][T26052] iter_file_splice_write+0x43a/0x790 [ 2320.107254][T26052] ? splice_from_pipe+0xd0/0xd0 [ 2320.112127][T26052] direct_splice_actor+0x80/0xa0 [ 2320.117106][T26052] splice_direct_to_actor+0x345/0x650 [ 2320.122473][T26052] ? do_splice_direct+0x190/0x190 [ 2320.127491][T26052] do_splice_direct+0x106/0x190 [ 2320.132339][T26052] do_sendfile+0x63e/0xbb0 [ 2320.136757][T26052] __x64_sys_sendfile64+0x102/0x140 [ 2320.142003][T26052] do_syscall_64+0x44/0xa0 [ 2320.146433][T26052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2320.152355][T26052] RIP: 0033:0x7f56c00b08d9 [ 2320.156848][T26052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2320.176794][T26052] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2320.185205][T26052] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2320.193291][T26052] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2320.201266][T26052] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2320.209767][T26052] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2320.217898][T26052] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000000)='./bus\x00', 0x2) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:22 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06fc8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:22 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x6, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:22 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06fd8603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80}}, 0x0, 0x0, 0x3c, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r6, 0x0, r6) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000300)="479d3878f5e40b07ca268a6ad693ba0034fc53f61879c19b186d2fbd6a097fdc167d166b7e266e7cf9f8ba836faca0c84426a8e25a5dae09e324784dbfd16bae83e75fa184e82429096a1785a573dcf54a14bb87781accd16ebb6f6492f91965378fab5c8aaba6d7a458f9f478eb06eb504d2ac9c4330f019c84c1d21c17d81d2176b420c259c6baeddcefe94d8f093d32b1d557779b2929b2b6e27d7461d0e600226258e1bb81f41c40bba91dc498b842d897904d5566e153947e24029c5380b46c1950f5fd5399a584cfdfa7a1e38ea6a1f1ff4a3e6a9fbc719fd22cf1e011fc621c9937e9174c94bfdab3229735eb53", 0xf1, 0x4048025, &(0x7f0000000400)={0xa, 0x4e22, 0x3, @local, 0x1000}, 0x1c) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0}]) 19:08:23 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="ffbc4d80155a93c89ebb575d6f3dda0c7be4c61a39108e8e177af3c4a4719482dd34be3afba14d841715c767ee9044de66cc8d0ee2f71570f35d64365a678ffa99b4ddabdbbc70822396f5ecd0bb1bfaf5a2ec950ccc14bf5c988cca2981b778a074ff9bb793964fa656c59f5ead47ac100447d461651c32e31ca2c728dfa3934ef6e678258815cbbbd1567a035966e46afcee"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:23 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x7, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:23 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008602010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:23 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fallocate(r4, 0x63, 0x800, 0xff49) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) chdir(&(0x7f0000000280)='./bus\x00') fdatasync(r4) mmap(&(0x7f00000c3000/0x8000)=nil, 0x8000, 0x7ffff3, 0x20010, r3, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @local, 0xffffffff}, 0x1c) sendto$inet6(r5, &(0x7f0000000200)="d07ffcceac804baae0fcba2c6e2e7a020f68f637ac120ababed53cebb094662415b5577acd611b37c83ade483b87aad855597bd7bfac9517337cb6bcd56943e20000000000000000", 0x48, 0x8090, &(0x7f00000000c0)={0xa, 0x4e21, 0x40, @mcast2, 0x7}, 0x1c) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x0, &(0x7f0000000540)) 19:08:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 64) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:23 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = gettid() tkill(r3, 0xb) ptrace$setregs(0xd, r3, 0x8, &(0x7f0000000140)="b0b3af564eabbcaebbe37008cc9a53129ef4a304d52755f79a1791def65d30abf76bedb0db28d10f44b581710e5086bd9ed713e1cfdf8ee1f6f33929b608ea37c8d85e94514fd882d2eec5d57c9116c3b517c242b87fdb8415bb779b508d8bdc2bb2e81f3f1b6b7de5ab518a0c74e82264f9dbced87b9180") 19:08:23 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() r1 = gettid() clone(0x40200, &(0x7f0000000100)="109a39a6afdafa69fcff45e393a633d8d6388e492aa00ab131341b092c96267110a2ae0caa2a058ba58dc185eff4075655e9fb26a150e8f13e6f87f8b8", &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="d87b0d760371bf358d1315b5a0ac45a20f8aa8b2094336b82ebe7b9866180ec8e1fed01f34eb780b0df1aa97629d63129bd4fc482b4079a1033cf5fd23d0f98dae920c98b5ac625f57cfa1c211bd41847345e1ce904d19a8137967b98d6629fdb8eed534406a8decf05fa62780d6592dac25") tkill(r1, 0xb) tkill(r1, 0x2) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000340)='./bus/file0\x00', 0x393442, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) clone(0x80008000, &(0x7f0000000140)="1f201ab6d369babc4a57b7a1632f9f545dc1d781dd2ff73dd85cc18dbf610933cdcca92ba7598cf6dfab11496717ca9a636709ff74bce2358688cd2fd93ff0b1d8254d9e7ce9e406fabb4be7cca60f1aa3e3d96ea8e3353092d9b0c22519b21039e177f6706d3688bab3715e42c2dc45a6b1b5a82082659c20dc43f87c3823e9498fd0ca82bc2fb5f23fab9e8bf356bcce0e3f1e36b1257e0e7571c71ce1b47e4ee5f22f4b75a67ac2fb052ee5f2122236c56fe62413337eb5dc2e37eea875b111232cba119515becf9db971e037ce0db8a5c1682647954734ff3ae1adfcf54ef678", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000240)="6bc9dce9a7a341e79d416e2f33509afecc83c7752b40f9641e62b55abe0a0979e19bf0c3d9d5b3d0411049e23dcd9475ad003bee62da0d63866668dc18fadc1c996343978fd827b3cb62aedcb60aa75e18891b020120b53f78e48ec6c3fd995d8026a51879c52a8b0aebd5d22406c9a59d4fb4f2ba5cd1448f116f613f90bae026d3e5bc11ce483fa95a4518db001c36098f62dd8b45f0444b0043c2fc4c88f50f99e83588f04df7f9e64dfb2128eaafdc17b5966c8cba596452d1d1bdcd0b6323720ed474fc81d3b63eb6f2f22047e70fa05effc296ff3a1cdaa5f925aedc46dc496eadc595048ba470a00b30c1aab4e8d5") [ 2320.832178][T26133] FAULT_INJECTION: forcing a failure. [ 2320.832178][T26133] name failslab, interval 1, probability 0, space 0, times 0 [ 2320.844836][T26133] CPU: 1 PID: 26133 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2320.855144][T26133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2320.865307][T26133] Call Trace: [ 2320.868639][T26133] dump_stack_lvl+0xd6/0x122 [ 2320.873233][T26133] dump_stack+0x11/0x1b [ 2320.877392][T26133] should_fail+0x23c/0x250 [ 2320.881815][T26133] ? mempool_alloc_slab+0x16/0x20 [ 2320.886897][T26133] __should_failslab+0x81/0x90 [ 2320.891818][T26133] should_failslab+0x5/0x20 [ 2320.896404][T26133] kmem_cache_alloc+0x4f/0x300 [ 2320.901174][T26133] ? ext4_inode_block_valid+0x1cc/0x210 [ 2320.906786][T26133] mempool_alloc_slab+0x16/0x20 [ 2320.911665][T26133] ? mempool_free+0x130/0x130 [ 2320.916434][T26133] mempool_alloc+0x9d/0x310 [ 2320.920960][T26133] bio_alloc_bioset+0xcc/0x530 [ 2320.925726][T26133] ? iov_iter_alignment+0x34b/0x370 [ 2320.930977][T26133] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2320.936102][T26133] __iomap_dio_rw+0x8d8/0x1010 [ 2320.940880][T26133] ? raw_spin_rq_unlock+0x1/0x20 [ 2320.945841][T26133] iomap_dio_rw+0x30/0x70 [ 2320.950172][T26133] ? ext4_file_write_iter+0x521/0x11f0 [ 2320.955629][T26133] ext4_file_write_iter+0xa59/0x11f0 [ 2320.960943][T26133] ? ext4_file_write_iter+0x521/0x11f0 [ 2320.966470][T26133] do_iter_readv_writev+0x2de/0x380 [ 2320.971759][T26133] do_iter_write+0x192/0x5c0 [ 2320.976386][T26133] ? splice_from_pipe_next+0x34f/0x3b0 [ 2320.981880][T26133] ? kmalloc_array+0x2d/0x40 [ 2320.986471][T26133] vfs_iter_write+0x4c/0x70 [ 2320.991017][T26133] iter_file_splice_write+0x43a/0x790 [ 2320.996403][T26133] ? splice_from_pipe+0xd0/0xd0 [ 2321.001259][T26133] direct_splice_actor+0x80/0xa0 [ 2321.007494][T26133] splice_direct_to_actor+0x345/0x650 [ 2321.012859][T26133] ? do_splice_direct+0x190/0x190 [ 2321.017953][T26133] do_splice_direct+0x106/0x190 [ 2321.022836][T26133] do_sendfile+0x63e/0xbb0 [ 2321.027252][T26133] __x64_sys_sendfile64+0x102/0x140 [ 2321.032446][T26133] do_syscall_64+0x44/0xa0 [ 2321.036871][T26133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2321.042844][T26133] RIP: 0033:0x7f56c00b08d9 [ 2321.047252][T26133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.067010][T26133] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:08:23 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x8, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) wait4(r0, 0x0, 0x8, 0x0) 19:08:23 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008604010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2321.075427][T26133] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2321.083714][T26133] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2321.091746][T26133] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2321.099710][T26133] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2321.107698][T26133] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:23 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) clone(0x80040000, &(0x7f0000000140)="8ad6d76982d9a9dc08db73af1b989cd67861e7ff65e493e0f4074f266d3211b24cd5eb4f59ee99a38fd6e05281d6e81d092dba96fd11665a1c5f18d09dacacdffbc9bb3badfda51c590047c472f01df30d435939036f862ae26a31634d818c0a2c01ec1b8b205cfb19244ba326", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000001c0)="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") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2321.168928][T26157] validate_nla: 23 callbacks suppressed [ 2321.168938][T26157] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:23 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:23 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2321.245314][T26159] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2321.376037][T26175] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:23 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setregs(0xd, r1, 0x1ff, &(0x7f00000003c0)="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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) open(&(0x7f0000000080)='./file0\x00', 0x940, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:23 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:23 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:23 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008605010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 65) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2321.667039][T26187] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2321.711640][T26187] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2321.770318][T26194] FAULT_INJECTION: forcing a failure. [ 2321.770318][T26194] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.783047][T26194] CPU: 1 PID: 26194 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2321.784927][T26197] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2321.793186][T26194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.811400][T26194] Call Trace: [ 2321.814671][T26194] dump_stack_lvl+0xd6/0x122 [ 2321.819283][T26194] dump_stack+0x11/0x1b [ 2321.823424][T26194] should_fail+0x23c/0x250 [ 2321.827829][T26194] ? mempool_alloc_slab+0x16/0x20 [ 2321.832840][T26194] __should_failslab+0x81/0x90 [ 2321.837593][T26194] should_failslab+0x5/0x20 [ 2321.842091][T26194] kmem_cache_alloc+0x4f/0x300 [ 2321.846967][T26194] ? __blk_mq_alloc_request+0x270/0x290 [ 2321.852555][T26194] mempool_alloc_slab+0x16/0x20 [ 2321.857397][T26194] ? mempool_free+0x130/0x130 [ 2321.862065][T26194] mempool_alloc+0x9d/0x310 [ 2321.866552][T26194] bio_alloc_bioset+0xcc/0x530 [ 2321.871307][T26194] ? submit_bio_noacct+0x7ab/0x7d0 [ 2321.876533][T26194] iomap_dio_zero+0xac/0x340 [ 2321.881280][T26194] iomap_dio_bio_iter+0xa62/0xbc0 [ 2321.886307][T26194] __iomap_dio_rw+0x8d8/0x1010 [ 2321.891088][T26194] ? __ext4_mark_inode_dirty+0x481/0x5c0 [ 2321.896762][T26194] iomap_dio_rw+0x30/0x70 [ 2321.901139][T26194] ? ext4_file_write_iter+0x521/0x11f0 [ 2321.906590][T26194] ext4_file_write_iter+0xa59/0x11f0 [ 2321.911929][T26194] ? ext4_file_write_iter+0x521/0x11f0 [ 2321.917477][T26194] do_iter_readv_writev+0x2de/0x380 [ 2321.922742][T26194] do_iter_write+0x192/0x5c0 [ 2321.927415][T26194] ? splice_from_pipe_next+0x34f/0x3b0 [ 2321.932916][T26194] ? kmalloc_array+0x2d/0x40 [ 2321.937519][T26194] vfs_iter_write+0x4c/0x70 [ 2321.942222][T26194] iter_file_splice_write+0x43a/0x790 [ 2321.947580][T26194] ? splice_from_pipe+0xd0/0xd0 [ 2321.952421][T26194] direct_splice_actor+0x80/0xa0 [ 2321.957346][T26194] splice_direct_to_actor+0x345/0x650 [ 2321.962706][T26194] ? do_splice_direct+0x190/0x190 [ 2321.967721][T26194] do_splice_direct+0x106/0x190 [ 2321.972564][T26194] do_sendfile+0x63e/0xbb0 [ 2321.976976][T26194] __x64_sys_sendfile64+0x102/0x140 [ 2321.982173][T26194] do_syscall_64+0x44/0xa0 [ 2321.986591][T26194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2321.992541][T26194] RIP: 0033:0x7f56c00b08d9 [ 2321.996945][T26194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:08:24 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xa, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r7, 0x0, r7) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd299c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e0045bd8f54e916ac653ed03758abfc0cb72a2524eaee0549376987c55f"}, 0xd8) io_submit(r1, 0x5, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x5, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x400, r2, &(0x7f00000001c0)="32b99235bc79f4bcf54b3d1545d8463e7862cfaac8f09f85041e5bec33f89cc752d4beb394dbd17157c3c4608abde8275ff2f587585bbc4e0fcc6a394d5ec2f430260c335c0aae39392536b8fe2d0678caa4fdd69e0e2cd4a4e9df2722c053ce584a2687bfb4d4e783c13f389fb126f54e7a350d16703e01de2e72a116c6f96861e318b1f071cf5d64b2b4029bf2062946ebbed95f4f7638439fcd56a48a", 0x9e, 0xf93, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f00000007c0)="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", 0x1000, 0x6, 0x0, 0x1, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xf46b, r7, &(0x7f00000017c0)="881cb63482cb8d8d776d80836be7c576eda88c8546997f1678d5b13af0832338be58fbf0dd9f8877cd0f845678bbc536b3f395fbfa9660abd3e2262404a7ce06a31abfa74d11c127d005e93fb8c23534b00a5f03c35a2eca2d8968b6ffea5cdbd65f360a300fd03cc5bed8c818e9d5b0adad7dd78943e9284d6a8a55f89767a843cb2b4b5f589bd5e13efc6fc8276ed6cc62582a989fb1e52e71fc4174e5b87d5edc7fc4e49cd56c0ad9c290679cff804c95bd776c5bd6df21134f668c5c0f108d1a4bc981966e17fffc05587f3b18dd384eb0ede8d406a69a3b17fd702367a2eb0f65e1580f644b5699ff966596943d7f955fbe5225b4b825a465dff4b7f3783a8ab5eff9982346ab7e739249a0674e5d305a7d94e6b5d6ab2190ff47c5193dcddd033854d0d6243d3064d42e9eb7742de2960c6b9a7952e18f1917ea78cf5c6da5a24681ccb440b5c2dee041cae65808a9d1493aa7dd9940f47894ff9200fc3aa9d84dd03e00d7b3a3791c57ccec6657c3ecaeec5578603fafdd920f68828a6a0485fef6ba7b2a581cacf5d5babb2a31e3b1ac687d19d540873168d609d4a0d02862b11b1f88cbce70d3ad138c73ed4761eec43ab72812f1a2f037355fe8642024c4deea239712850656a617addde6ac9b0e4687b16380d962ac67920aeb6b95dd3c92325d528104eeb81edcad07f2c026ba03c84e678e8050ca2de47fb913d4acc54474b99cc0a41f90c16ab8ccd1d8e1229ed636a21b589207a2a2698e32cb322c05d678523c7bcd31e7757f3ee637849674b688d3169cdd221d3871cf302ce160663d1a744d3d470d3efdb079a60de55f7d5144ac70bfc147c3b27fb36f74bfdd5314c8345506c078e37bc409eda4c72e1ee6505579ac64dd69a07a05abbe52b4c94d74cd4670c305564ed49e357d00ff7f9557654e0d7e40b19da3c15f44f18affbe2aa4e9da2ac6e92b0c3e84aa302b250b49eab5553627d2987068494c7e6b1ed30af4eed1c96a08210a0f96129efc4e21d44ce57c0f5b4f3d7f5621b1d7e66d9e238744bfd6d2758e00e1b7cdee08d432e44381f2012f2d04942a65cf40ea9ea09eba726843e031c9e3ff06a99123319f4b99bed3f4861c1e7ac85aeb23aaa435444da2175dea87debb47c6817b1f15d9dc1eec7892cba10bdc212af69c66ef841bd32aaf9b7488b4ccaf4fc68ba0b28cf1d399f2a22602f6f029b431c2d55815758a58ee325390641ace109fcf3d723aca9fdf7697c0bfa89502d7caa80082efbd7492a911390c0857ee328d555f1f63c7c6aed589dbefcf1e300bda2046804c49971b11ec5f827c83fcca08153ac5a69cc3e4de52bec67c2b08792d827efb640b219d58ce537e9f84d6bf0c382d58744c6b339daf5c7a71a394799a979df3089dffa40129043109f9a9870463844feab7f8c7cbf03ea87e62a1b2df309f23f4baaf11f1c5af43b9778172c6bd042456c9b1ac15587a1590b247202a6d700d55375d1ec42a9a9dcafb6074f6f96a325598c42704c4c47d91c927dca4bd0e51722c5e22da30b1a74e12cfe250b0a02f3decaa537a79c958076ddf83fb8bcf146c28b178b9826491bac2c102955361ab8fb890e2eaf6d4f6faf24d9943ccd413ea8c071aada77e353ee67b395c611db70ac3d3106fcb2f717dd7881b13edbc9c3ad81504f5e3c8d8a048c43df0399d97c5f9b956dc59af12012ff27189e6694f8edaf1c9a556353a8b8519ad415ba1644bb985ce023638f3f8a4309511c1027bcd4192dbf6a205aa4e0fd812799a17324a6eec0c2342daa2d4ca58ed798f6242798fa1d2f292d96ab4bde74ce20b55ab6dde700448189847b322c1cef032dcd82f4ab7827680619b209f4859bf26bc91e2a11cd92e1f79d71d201c114cdc670855dcdd83fdd639537e7280f4cbad924035b5ad50240a5db53c79789e233a4e40cdf85e12965bab933b067488151ebd6f6005e7856c3f9e820b821dad2640f796efdd5ba83fd57db2b241b9ce1562e1aef009797fad78488911601071d5c251a1d2deed83ace454e33e2c264ea7b4a0488d0d7207a61ce5bec8cafcf600c592b30d4f51a8882fea142dd0409240c759a41a2db967616616decf8d5ce35541de9122c04b2edf3b42404be6d7bdeb71e0664294ef6864d292d4c87f1ab333c01b637be189fef883c55625d1956103b35408df3d747f24b1585595bd3714cf6006bab78e7bc9d39b9638cc8ae1ce061d8b50249a7d5531d2fad23eb419e3f15c19c52fe1461e02335182d1c6a82174d02c51c04da4a8743c7fb8b51f255f256ad086fbe5c69e16d34d172dbeeb3e5c275ea5097ea4736b11713c4583279ef6852c12a7bd24abaf07dd697e6bf713a790724c2fb4045f6d04530f7bd91e5e8c23b454da4e2c54af5f20979ce043612276f28e8d7d3267fd763c5b511eb021da76c90c713f862b890baea0818acc92496171226c9d323c9f5d26e4067b69835e15db44302148660fdf9c55c44ac6b84572f8e854f6d1bbfa0eadc018d302ebaba70d1a3e5898e54b2caa321d8dbd0bedd157e05c35386557a896c78518421f486d03e3e3d00719d65aebe3dbae6a787070c552733c5c7d000c8e8eddfc20f38f09985891b77574f8367d48e217c7937d088e64331bee6a61ddd5264d29b421b0d713a6e16120973b4da633769d6b086a7b163e646cea0fb7ae1b0039ee8cdb7138ff8defc1001af3cdad91dc8edde6c5b3160fb4c49752cb29dffa899b7d43f00e98c7290d380236a757d182fccee90b1e64ea09879f505e0d145d10147f669b71b6bf87ec90c8c3a9097862c5a7c54097e6291258c5f36b288dba229e37f2d240f860ffc74672121c10d826c04a7ee640c3cc4da9a0f6df5869adb5d5bc9c7b9614cbc741797ea04ef2eced3e22a99f4cf09b28b05f3e0231ea73fc1a83bdd180846430aedec19541bcc397c5ab82e6a1111d119d386880ec38ba703792bfba4e02e813bf6a3cb9424dda75b4ba0b646f6fdbec811fda468a0b46c7fccafb53996c0a45bd19e7ed2633fbf7e38ab7d504e0f2e355e1454894a33bf0adb13b687135cdcce036beaa4de6e88a1bbc93f9fc8924286c1731ededa0ec46f671ce43df7846f0fae29a851cabb0c131bcf1141c605815cdb6ac3eb65f0df1a75cf354dca460d0d026b524ab25411cfb53dc8efa16c03e2b60fbda34e54efb89649e4a6da98ee6370475fa48910c2619b2df83458d27150427b476652c8bb1451ed6a29a949e1b79fe5055ffef058ef936de126d25a248f9a977f4dda9430a9d60fc20685862dbafdce849b0d16bfdc9accd1e42a2f00262ea7d1ebb26c33e01490997c2e6423e5a0447481c41fd0537f0d832b23756dee47b654b670365ad77a065b3718aae3384676b07f1bd29d48408b7ccab79c8407e23718f83edb9133902d225d8e8c3c3ea6eb89f34787eea5b2622ab2ec4a909295e36ca39dcc3e5aa0e4b9c92541bdb9ee10f686b3682030d89efd6d143ac61df6443775b43f9d975526cc928c241ba3664f1fae4ead6aa5dafc76e6a1a09ccbadfdd643fac5f30a9d7c4158d8805823f4654c987c5c2dcd8702951617c5d527e8ad09ed9431aa7a35da2ed1b0db6354d065d5bce37ae887f2f29f506859e26baca5c5e6a5d00190e60d24fc92dac8ed8c26c20fd550b08b162a19307926bbba1a24711d76af40a35bc7f0d16a3a2b749d4fd9a2e944d83887f2f4a5b8e34ecde50e39fb1caf7d3c1d36c6f477efe9857631bb33d53f0a4cf2140b1a30db35e93c3699cf264ba435842da375010a9771e3fb8b24c47847fbebce97436f5f960fb53efa5d8efe9b67d1be071ad16d76874661879171352789fb673bb0c6d419cfa79289974b2fe7fcd08dd8943dc89697bc6526aab563adc642d2871a91ba6969b7bad869d20db835c981838a438e7e902788a2b4a28377aec3cd0c19eb1b0729970344269730bb84ea7b309caa76d58341810ed4a89044c639571bf4d742284ebf94513bbdb2956e47384059966556f4c70ee0883ac79fb6deaeecc65896bd8efd49ca1054c51956d4fac0f3d9578a2bf169c90a2e3910ebd143fc49a3eb8a6dffd4a62c6ba4592a15f22cadff9a9aeea2fa6e38eb758f10aa0e6d995e9c7f742ce57f85d805e8d04cb41a90a05e8623b7b0d1a6e5e6283f025601dda41120c629c5e74d90f8585c8c854ab5b79345364429b0be7d5f420a6554e93a804f5bce3d9b1807c7dc0c9190569e446baa1c503658019579d87838785d488020c1c078dec56d557656973df375200596cde9105531ae1fe1c0b36aa7f4447fd4d4111483842c3070e0de28837d96216b98d4e54a8d9a078eb7619423e7e854c77084cbc788f6b304463799fcf5e99818f2e59e8ddf42afe91868605abe2ef1fa3330f4e2ad42eb5e2dc22d332ff7c546b0caa1f439e2366c8292a0597a10d8b9be7f72d90b576d4bd8a346b5f025bd1517305ad3c59199a7542c5c2cb54284f7d1f6478478d11408fd16751dcefaf0741789fbaaeef544e698910efa65f483b76c08904838de58563689740703376c07cf95ce05f368d0826930e05f813af3a8f6513a448e14dd5dea9b6f412c59511a79d4c1fff8deed46c2190ea59b70cf2f91934896d02727e11e1dfc562bc2598ac833b46459fa21cdce42830c8ab89f652cdd9e4f4f8f3d0e7d288518af0f25ed5b6b67760b25ad75986ac98fbf3e5d0575687c77c424e53776a44211fc7c161d5e184120ee33bc16a20c7a6c74007b42825cad49663914ad915e31f1ee48627078d3688d9561e56ec5cc85fa3f39e2d05dea51b54850797718078d1b8a06cb4f9f31c0f3d7dffffd80aedc9dc1f4fcff4d55ffff35015f5c3cb273846d0ee8fa5ed6cd4674f10bdba8a3e523fa95539731a6774564ff5a19ffef65f9cb59dddb41880a0a11430c8167125ac7f35ceb57923d85a2bc2fd474eb9356e27c2f2a9e33d4f424a2b70042ed0b356dbec5a7fd99fdf1b77f7ea6e32fa255c2c02c112da5c54b0978771d1e095d205257f9766abb8e5d8a5ba78b2a261adf1847306022aa6321c7fffdfc9c50879dd9f1e99f65392999028e02ed798239fb102e0399f721d5aed489599ecdafaf2c9f6a8cacd7edd6e7068e43aa02bdefffef9c89a7493b92a1eef7761ae550fc0626365e1d36918d56ecb9d5d2c64cfe50038060a58bb53324ef5f5fdf30e8ac2b6503dece3bd45b0959fa8ae446352a9bd2876a0dffe4dbe3cf31d4ea77b4ad1d21a36f091c3b53b97a89505f39add5e7051bbfdc1461e3aaa127ab6bdcaca048d01aa4138c5ab46105518e8ed534adc85aeda071f297fd015b4445c738a147b00c2501270c848b696cf5b6cffd5952190458af49cf779598e0bcc4554f842eacbbc743e37d26461d73d7c0cd43978d543399c4013600899450e32c39e46b167a60433ad96673d4a7afecdd5be727bfc8ca235304194a0b2991d16b49bf8280ef9680fd232b8a7a7c8f0bb14abcdbabf54861c417751ba24b4100b011785540ec8aa82beed416d9d1f17e2484980dd604a5356c4b6891f8f36202674b7b31068e1f31ed762af421bae904348755d52ace27e119fc2c44158be78da6a19642af971fd2f2bc904c922549f856828bd5f69f0b7a15df71ef93d15edc7ecf14f633c0264f0e9039feb398f301a11283d429cbd2d6d5f3a2be1ba838e5517c1f84114b8a4feaafbf5887ec366c9391f3eb24dc2d1b0e0b85d351c1de6e019268a13e760399bc467b65fedb0de006de552eea2868159", 0x1000, 0x9, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r6, &(0x7f0000000340)="3e4f618cf441a0c0e5d41e82ec303692c96e88bda4793345933bb185e89373891d1ef7ab0d51fabb0069ed4d174823b0b7164ffd0cdb53c26ac22dbe4a800a3064442a2f226f501ca38a48df1e9f33b2c1a3b37b95f76429", 0x58, 0xffffffff80000001, 0x0, 0x1, r9}]) [ 2322.016587][T26194] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2322.024993][T26194] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2322.032953][T26194] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2322.040920][T26194] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.048886][T26194] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2322.056851][T26194] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:24 executing program 0: clone(0xa0100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) tkill(r0, 0x23) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1c30c2, 0x0) wait4(r0, &(0x7f0000000200), 0x1000000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) wait4(r0, &(0x7f00000001c0), 0x8, 0x0) gettid() r3 = gettid() tkill(r3, 0xb) wait4(r3, &(0x7f00000000c0), 0x8, &(0x7f0000000100)) 19:08:24 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008606010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:24 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) write$cgroup_type(r1, &(0x7f0000000080), 0x9) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB]) ptrace$setopts(0x4206, r2, 0x0, 0x43) tkill(r2, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2322.281019][T26221] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2322.317011][T26221] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:24 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xb, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x7ff, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:24 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4400, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2322.411018][T26228] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 66) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:24 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008607010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:24 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xc, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x110c, 0x29, 0x400, 0x70bd2c, 0x25dfdbfc, {0xb}, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x1}, @nested={0x105b, 0x7d, 0x0, 0x1, [@generic="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", @generic="fa9786b8a605172e2e9c8e317c583d990a08da592880b43da09729af54808cb06262eaf02b9306afdc4bc713e0875660da91a933f415020dc4cb5be454445266a4891fc6ff39bc143e3f4c23003df11f2f69b3c15ee9c4"]}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@private=0x3}, @generic="f34ab62da049b9efddc2be27abe9f68b86d491578cc138c29211489db9a9ebb9fff9e3e002c4ae2d5be46b5882edc5ea236823a35ea54a23ab01c887534a6f9fdb67935aea12805d1c91b2986a9ea01d7a0ac7a530a51b0aa05d7ec94b3475157b86150387a0fee6648c36a15af0b1b93b71d3fe0cb11510bad37b741e"]}, 0x110c}, 0x1, 0x0, 0x0, 0x44014}, 0x4008000) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fchmod(r2, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2322.596656][T26248] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:25 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2322.660191][T26252] FAULT_INJECTION: forcing a failure. [ 2322.660191][T26252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2322.673606][T26252] CPU: 1 PID: 26252 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2322.683775][T26252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.693828][T26252] Call Trace: [ 2322.697118][T26252] dump_stack_lvl+0xd6/0x122 [ 2322.701710][T26252] dump_stack+0x11/0x1b [ 2322.705863][T26252] should_fail+0x23c/0x250 [ 2322.710268][T26252] __alloc_pages+0x102/0x320 [ 2322.714848][T26252] alloc_pages+0x382/0x3d0 [ 2322.719329][T26252] __page_cache_alloc+0x4d/0xf0 [ 2322.724185][T26252] page_cache_ra_unbounded+0x1be/0x430 [ 2322.729730][T26252] ondemand_readahead+0x58c/0x7c0 [ 2322.734753][T26252] page_cache_sync_ra+0xaf/0xe0 [ 2322.739625][T26252] filemap_read+0x3ad/0x1220 [ 2322.744305][T26252] generic_file_read_iter+0x75/0x2c0 [ 2322.749627][T26252] ? __fsnotify_parent+0x340/0x440 [ 2322.754732][T26252] ext4_file_read_iter+0x1db/0x290 [ 2322.759833][T26252] generic_file_splice_read+0x24f/0x330 [ 2322.765395][T26252] ? splice_shrink_spd+0x60/0x60 [ 2322.770328][T26252] splice_direct_to_actor+0x2aa/0x650 [ 2322.775693][T26252] ? do_splice_direct+0x190/0x190 [ 2322.780730][T26252] do_splice_direct+0x106/0x190 [ 2322.785576][T26252] do_sendfile+0x63e/0xbb0 [ 2322.790014][T26252] __x64_sys_sendfile64+0x102/0x140 [ 2322.795203][T26252] do_syscall_64+0x44/0xa0 [ 2322.799632][T26252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2322.805624][T26252] RIP: 0033:0x7f56c00b08d9 [ 2322.810046][T26252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.829655][T26252] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2322.838056][T26252] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2322.846022][T26252] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2322.854088][T26252] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.862119][T26252] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2322.870082][T26252] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:25 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008608010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:25 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:25 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000000, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:25 executing program 0: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3f) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa000000, &(0x7f0000000140)="5e7d7a8e10d17dc2d76201cc6d097138071cb9aeaef044ec25075882223754a350cc320a1a13a0437d15f329bf102567744671b0ece2d1856f4dbdaeb8bb2b2ec9e9e64acd5a1520ad8af8b118bb7a8a575cece7169eaafc58e6e47b251d18b3124f8b76fe2d38868513433329adfe2384253c093e9407a5623d1ed127184991b679ac78e04fcbc3756d88758c38c17d19bba72afb62c0063707582ead3d1f155426b04bb8cc283421ee659de815ba8e53f9d4cd4f74d9530d8968467f7a64a4c6799e", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000300)="9dc5cdbc5fde2905957bd4d5dd99e01e2342c8ee4076503df271faa4e9de24cbf0be0cea02c2cad37e73279fb5b9e7dfe89bbc6722f539d7749d7638c7dd89e28d52f394ad124221f954ed796f2e170bc00576d5d5ccc51d732f95de2940eb872a5c35c900503a") wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000000040)={0x10}) wait4(r0, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x466082, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ptrace$setregs(0xd, r0, 0x7f, &(0x7f0000000380)="ca45745efcacbc3b1739728f09fecb5ec970a58bda2762c7485d6f56bd369163bb953031589098ab8bb64f905679a45f3b4c68fe95c45a21e830826acd7c29ddcc58347885ec9e8c5e3b93d16a94fa6e2c8f87a1615a4ee1ce5ecd6dbfd856f59f3ec79ae50061784e74cb7934ec994afcefe49b8989dab050dddbe4c58da6c03564b5cf9ecd44ec76bc8a7e38572fe135a45cf495") 19:08:25 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x5, 0x100}) dup(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:25 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008609010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:25 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xe, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 67) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:25 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x200180, &(0x7f0000000140)="16600df575a84f323da4e72b83dec7372a82f77efef122bc32d0db83a39b684d3a066c073681cc8dc9fa59f16de96e98f22380e251a5489b1d52b3cdbda700ac5d6156a5ffd78bf32c30ab26884742267a894066ad9ba1fb3046897fa52f6cd9228e7a035448dd95ffd4fadaf4c29c4cb5c333abc9824e95e29419bb6a6daa9b8d28e44fdbf5710edcaa38e0646f0123d806e2b166dd54080f2991261b272037da987bb949f3207fe4c43eb9c6c07f2af86f53a9b5fc80885b6eb1ce2734dce836b43f52bb9966b8650abfcbc4dfec3a993593cbc250916ab9716623bace7420", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000240)="fe27d6b07488ab68b8667a96683a1af9b5b41783944b6c90c4838a696efb7b197594193eb942e6ffa53d01d3ab0d203896a2a31fb71416428f9eccad0058c4441c64515210fa1b6e2ac6c4820307bc4246dafd5e709391cb3000142f69cc4b1478822e33fff8bd621efde1bc0b943c97b39aa1ca8637c7155d70f8b0ef16f9814d14c227c2a538c2eb11ef23f271587f15dfcdd3dda2a0cb78c0970e87ef727f1e2df05ccc813b4cc90e5e3977fc8d11e53b57eca81d5f7500f2d94b8339f4fb0421b37bf025c53a0e65348cc0d410838f677f7b91807ad1ff320e33f63ab27325a20b6383d0791784a333a56c46a30e50c99710f6a26b") wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:25 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x10001, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x1f) io_setup(0x7, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000200)={0x81, 0xfffffff9, 0x434, 0x1, 0x7, "29ec2854bf9cf8fa19360dbe527d882e962fc4", 0x400, 0x1b}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) lremovexattr(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)=@known='user.incfs.size\x00') io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:25 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0600860a010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:25 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r3 = syz_open_dev$evdev(&(0x7f0000000880), 0x4, 0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r6 = socket(0x2c, 0x80f, 0x7) io_submit(0x0, 0xa, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, 0xffffffffffffffff, &(0x7f0000000080)="85de54d95edd5fba146dc57621b101", 0xf, 0x8, 0x0, 0x2, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xe, r0, &(0x7f00000001c0)="6dc76b87fbb25581a9c4cb54beb69e39519d42c6e16c5ec9e7e3d7d9dd5f9dc0682ab73cc953fc709006ca89cb71419b8ab9e31e3734f7e684d319b9be7aee61bbefc261b62cd516cf1e360c48761b5b19d095d8c5781113d407f869d1f7b51235d7e0307d677739c71644bed236a3faf6ecc003fa10dd83e55e70c2128764bf194cd6e89d98f822f5173f97ba389ba9bdb990cbfbb5226d74b35b1b408d29689108d9e3e8a7df4823e88b13c6d9f33f9a1539ad46df57bddb8489d89288b142b198d6a8b091dc6b91f2e8bb177e799d84bac4f9a430a0e9628ab11714bb79d249cad4b0a15d", 0xe6, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="ff7ae4dc80a6a29a2b1b292ba1d918df693b0cee727831cfca540d50d1ca2b3f2156872c2c76ac52c64911bbac3ba31078172e59ef1a1beb767c0288cc754a10155613c25afd25c4f913e8ad4c5e1cefe9872fa4de8ceafc7f15af24d72e633e2c1809cdc0a8316d8eee3586c242f299aa034e520e7feeede0e2b891d2a5eb55f0b720186df53f9c47a81793b2ae2004f27bc1a450f853df8e47b18c464d81ec6db3d757e5ae3776c03fe2eaa8dd7cbfa1125697b555b17a19d2056c16c41046994d82f51d7755c5e9c06381edbd895e6bc8b47c", 0xd4, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000340), 0x0, 0x100000000, 0x0, 0x3, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xc95679f1cb238bd0, 0x7, r0, &(0x7f0000000500)="2a724ca32bb2aefbd5d62069fd682f7b869e8eeae71814a301b8497e6a6f1269b449ee80d61a952f9e9a61ec77f47ac8ad98b3d3084865e680f0292daa6b529afef41ae8881314978e61a0880aa9945f307933bf8b80255bb1d7e650cbb611d80576b33332275bc46591af5804", 0x6d, 0x9, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000600)="507d5ad85f8faafc4f96193b2e2a6ae3cf72294088b8b8f916fc0e45a7c0811da31574227273", 0x26, 0x9, 0x0, 0x3, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0xa97, 0xffffffffffffffff, &(0x7f0000000680)="bba6e6fac5924e0b299cda591c1918acc60623f4605a2dcf987a49e6f6953aaf68ad114bc4c476f47148fd89832f9d689852fee0453aeb6023113dea0df55653d7d167647dd6675e4fcbbb6eed899eefc8f1dcedc0c7c3", 0x57, 0x9, 0x0, 0x3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x3f, 0xffffffffffffffff, &(0x7f0000000740)="7291222d3eb163569bdd38e385b96e9326c6f5ea8620b4af31ad4ee45d1413f0633656ce5e3ff607c080a44cd19208eb48e84cfe4cedbab64ba7b911600f74d744d107245e3c97eab022529901b0e32e7661c17dfda84c1e86b131a35cf4e72bfc6fa768f6366e875eb34818710ae9252e0cd6332aa51e35be9803e44553f50071dc3bced1f52373838d019e3d55d085b1453b6e3ac8ae3b03a43b03b8af8b20ab96acf036ee018c3c4f53235fad53930482771f6e0900896e99146988a3ddbe44bc3556368a2f795fc566baf67129f1c9efdb005418f48dc3a9a405ea136861887e8a8d900e0fa2d1b5df59644ef2370efa83cb75b2", 0xf6, 0x84b, 0x0, 0x1, r2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x7, r3, &(0x7f00000008c0)="2cf36cd0e11387bf0e7086a88b0988700db8b3bf60c84dcebe5486a063ed764bed86674e26d815335ae76e038c85c3e67f42f3d90781a2d4a89c3f3daaebd37d2c69ccc1d6cb463ddfa26bbfc934b676ba9cf7a7346ebb650624ba69521fd21b8845e0d59c5f", 0x66, 0x0, 0x0, 0x3, r5}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x3, 0x7, r6, &(0x7f0000000980)="1162fe5b7cbd85bca2fa5d67fdc38636c94da90a74e7d861c86f3dbb8d927f381513ae51e371ca85a5f68e0c1bdb702deee79b42d6f209279a66c72d4cc9c9f40c9d71230cb92b89a2cda1f000812a65839d6a8ac4c4ac5ced79505425fd8542afd77dd7f399d8602846887994f3b79bf736c6eac90ddd044dcee4804a94002b85eaf87cafafbfa1ef3d22eb8e8e359354f97a51f713605623b5a5f7fec50ea910483c24c776356dbf4df602eb62187d8519f9c6429d5dc78fa9f2", 0xbb, 0xfed, 0x0, 0x1, r0}]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:25 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0xf, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:25 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) ptrace$setsig(0x4203, r0, 0x101, &(0x7f0000000140)={0x3d, 0x2aaa, 0x3}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) [ 2323.545499][T26325] FAULT_INJECTION: forcing a failure. [ 2323.545499][T26325] name failslab, interval 1, probability 0, space 0, times 0 [ 2323.558286][T26325] CPU: 1 PID: 26325 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2323.568574][T26325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2323.578629][T26325] Call Trace: [ 2323.581909][T26325] dump_stack_lvl+0xd6/0x122 [ 2323.586586][T26325] dump_stack+0x11/0x1b [ 2323.590777][T26325] should_fail+0x23c/0x250 [ 2323.595183][T26325] ? xas_create+0x3fb/0xb30 [ 2323.599689][T26325] __should_failslab+0x81/0x90 [ 2323.604532][T26325] should_failslab+0x5/0x20 [ 2323.609036][T26325] kmem_cache_alloc+0x4f/0x300 [ 2323.613797][T26325] xas_create+0x3fb/0xb30 [ 2323.618130][T26325] xas_store+0x70/0xca0 [ 2323.622300][T26325] ? memcg_check_events+0x23/0x3b0 [ 2323.627410][T26325] ? get_page_from_freelist+0x55e/0x830 [ 2323.632979][T26325] ? cgroup_rstat_updated+0x34/0x100 [ 2323.638415][T26325] ? xas_find_conflict+0x422/0x4c0 [ 2323.643561][T26325] __add_to_page_cache_locked+0x20b/0x4f0 [ 2323.649366][T26325] ? workingset_activation+0x270/0x270 [ 2323.654817][T26325] add_to_page_cache_lru+0xa0/0x1b0 [ 2323.660104][T26325] page_cache_ra_unbounded+0x274/0x430 [ 2323.665565][T26325] ondemand_readahead+0x58c/0x7c0 [ 2323.670588][T26325] page_cache_sync_ra+0xaf/0xe0 [ 2323.675432][T26325] filemap_read+0x3ad/0x1220 [ 2323.680015][T26325] generic_file_read_iter+0x75/0x2c0 [ 2323.685355][T26325] ? __fsnotify_parent+0x340/0x440 [ 2323.690491][T26325] ext4_file_read_iter+0x1db/0x290 [ 2323.695600][T26325] generic_file_splice_read+0x24f/0x330 [ 2323.701176][T26325] ? splice_shrink_spd+0x60/0x60 [ 2323.706137][T26325] splice_direct_to_actor+0x2aa/0x650 [ 2323.711508][T26325] ? do_splice_direct+0x190/0x190 [ 2323.716532][T26325] do_splice_direct+0x106/0x190 [ 2323.721375][T26325] do_sendfile+0x63e/0xbb0 [ 2323.725790][T26325] __x64_sys_sendfile64+0x102/0x140 [ 2323.731000][T26325] do_syscall_64+0x44/0xa0 [ 2323.735434][T26325] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2323.741413][T26325] RIP: 0033:0x7f56c00b08d9 [ 2323.745821][T26325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2323.765432][T26325] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2323.773846][T26325] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2323.781813][T26325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:26 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0600860b010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2323.789868][T26325] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2323.797832][T26325] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2323.805844][T26325] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = signalfd4(r2, &(0x7f0000000000)={[0x50a]}, 0x8, 0x80c00) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f00000007c0)={{r0}, 0x0, 0x12, @unused=[0x7, 0x1, 0x5, 0x2], @name="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"}) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:26 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x10, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:26 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0600860c010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1e5) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x1, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:26 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x39) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="407f04eda8ae26a27377e521abfad26e3b"]) r2 = fork() ptrace$setopts(0x4200, r2, 0x0, 0x100018) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file1\x00', 0x0) 19:08:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 68) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:26 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0600860d010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x5, 0xffffffff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x5}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:26 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x24a0fef9def132a3) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r3, 0x0, r3) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)=ANY=[]) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) tkill(0x0, 0x28) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:26 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2, @time, {}, {}, @ext={0x173, &(0x7f0000000380)="8de208f1472d9126a25750cb070000001a36d76083f3cf09690f0800000076751e3811ac9d0ddb001ab49b0000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3ad2d6ff81d781d00050072f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bb39e7f21e0527aa4fd378e585f3a37a5355e65629a8df237818d33d5e680d84603e6f65d36bf0b311bffc16b6075aa992130815ae384a0df3df7f0e940cd0ff3abbdd2350084ff3b0a54a586a64ca90d29c21d3cd1501b4afedddde50dab94271e7627af5130fe12e047bf76bbc9ad7af94746b6c3fc0f82a3d323371b496a419f071091fee9fbae4cae61b55646da9b71421ae9737dc460dcea8f51b39cc90164b26a9503f631ca90b06a20027096964f5d557babe0d582d6a979881d0baa6b6675b0f84a149a15e3b9dc388d93790500b722d0dd98015544fd8506c1e807e28ad48e7049175bb9a28520c2fe9566072ac6e6efaa151297f0ba514f7977bb2006e48db995e4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) tkill(r2, 0x3a) open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) get_robust_list(r0, &(0x7f0000000700)=&(0x7f00000006c0)={&(0x7f0000000600)={&(0x7f00000005c0)}, 0x0, &(0x7f0000000680)={&(0x7f0000000640)}}, &(0x7f0000000740)=0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f00000000c0)="ff3f1bba357371b635c044571c277a3e2da991c467206a83913ba718f9a8d134f01f54e6912ab444fdda33e8f2e6a2", 0x2f}, {&(0x7f0000000140)="19782cbadd07edb54a6a6c904003a83c74", 0x11}, {&(0x7f0000000180)="ff1441ca0109e5e6e5d745b2b1bba5dd", 0x10}, {&(0x7f00000001c0)="a76d14eaa3094693024549d42b394bf68ffaa8d94ba3a8c72dcf0f8a3a11b2ba8e694017c7b94a4310993ee34d756cc0901dfb659cd8688898cea6a7b8266d638beae68f9c0051fa056fcaf4a7e787c306c3285860246654756b753c6e4ce8d267a20434c2bb84a07d3e3ae6c220315b89bb22997f5fa64249d606", 0x7b}, {&(0x7f0000000240)="078273c341d15b17c7ba91a4e8af2c222b7769d945d6f1cf16639a56d9d489cd43a738d418a6c71298c42bac096018d7c8a58894808a8111a339bf0bdf9a21ae0aecc88b07a7ad9234b094cc4c92db400e5697409e16207f81a878cbbd9ef7a54bac37f42d9da6fe2563de7eaa3daf444675e83164e000aa7fbdeb227462aa11d2c04fea399f878a058f59c8f44a43aa419cd46cb1314ff55c568d1eb4", 0x9d}, {&(0x7f0000000300)="bb4ffd4b3deeb44901195abe9b408a4e401c86da7db89af5ed4a3ccefc5de12f327754ccb4aeff3da3eebf5fe40317b0d65c7a846b33a45f2714a03e32b606970b79345f423d372ef844f61637edfc055a6fc1d9212262b3185121b88b04f42059a85817cc07d4d64c4e5fa84c06ce31e88abb67be46f20f93b8df56dff61460aeeb4c795dd43e714aa8e41428d90798013ae2ea483e49d3751b94a4c38e044c7d34ec2ca2d154192199dc2b6259c99d3f1cc6bc92165f3e93b17c1cd837e3b92f2e527a11ee49c0db1ebb8cd561ea2f8a7510e13cb6d9fc7803450aba99cfa08e883ad94cbd1d30aabed8a658e8d3", 0xef}, {&(0x7f0000000400)="05a606611ac5b8ae201d2f15b5c73b7d43ed65590283e57bab74afdf28dfec9582e53d249083db1233d3eb551d913cf567f1460ef99e9e29bff83b0d5df570fd785db19b94d78355a07a04c197b32c7ec98e6f0e3deaf22a5ae9125def518d9a74dc388de0e0f5251406a171ffafbfe9d802f1e8dcacf628eb609bd87a60e1e9c5537c69e03d5fe41d0650042d3c957475a2f7", 0x93}, {&(0x7f00000004c0)="0a9827aa4b86de9b23b5af74d2bef8a5c5c0145a519625ef6a68dce61f0af9cd73f25acf8b85ae35a807f00ec52230fa5b6a70e207bbf7d120b2e0088dee2e27f8245565", 0x44}], 0x8, 0x3322a704e7280bcb) [ 2324.443325][T26378] FAULT_INJECTION: forcing a failure. [ 2324.443325][T26378] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.455974][T26378] CPU: 1 PID: 26378 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2324.466125][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.476171][T26378] Call Trace: [ 2324.479442][T26378] dump_stack_lvl+0xd6/0x122 [ 2324.484035][T26378] dump_stack+0x11/0x1b [ 2324.488181][T26378] should_fail+0x23c/0x250 [ 2324.492631][T26378] ? mempool_alloc_slab+0x16/0x20 [ 2324.497651][T26378] __should_failslab+0x81/0x90 [ 2324.502408][T26378] should_failslab+0x5/0x20 [ 2324.506991][T26378] kmem_cache_alloc+0x4f/0x300 [ 2324.511833][T26378] mempool_alloc_slab+0x16/0x20 [ 2324.516674][T26378] ? mempool_free+0x130/0x130 [ 2324.521348][T26378] mempool_alloc+0x9d/0x310 [ 2324.525845][T26378] ? ext4_map_blocks+0x5a8/0xf00 [ 2324.530784][T26378] bio_alloc_bioset+0xcc/0x530 [ 2324.535540][T26378] ext4_mpage_readpages+0xe55/0x1140 [ 2324.540850][T26378] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2324.546742][T26378] ext4_readahead+0x99/0xa0 [ 2324.551401][T26378] read_pages+0xb6/0x540 [ 2324.555677][T26378] ? lru_cache_add+0x13e/0x150 [ 2324.560441][T26378] page_cache_ra_unbounded+0x3d2/0x430 [ 2324.565944][T26378] ondemand_readahead+0x58c/0x7c0 [ 2324.570969][T26378] page_cache_sync_ra+0xaf/0xe0 [ 2324.575822][T26378] filemap_read+0x3ad/0x1220 [ 2324.580440][T26378] generic_file_read_iter+0x75/0x2c0 [ 2324.585812][T26378] ? __fsnotify_parent+0x340/0x440 [ 2324.591165][T26378] ext4_file_read_iter+0x1db/0x290 [ 2324.596272][T26378] generic_file_splice_read+0x24f/0x330 [ 2324.601815][T26378] ? splice_shrink_spd+0x60/0x60 [ 2324.606747][T26378] splice_direct_to_actor+0x2aa/0x650 [ 2324.612256][T26378] ? do_splice_direct+0x190/0x190 [ 2324.617381][T26378] do_splice_direct+0x106/0x190 [ 2324.622231][T26378] do_sendfile+0x63e/0xbb0 [ 2324.626651][T26378] __x64_sys_sendfile64+0x102/0x140 [ 2324.631856][T26378] do_syscall_64+0x44/0xa0 [ 2324.636374][T26378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2324.642273][T26378] RIP: 0033:0x7f56c00b08d9 [ 2324.646680][T26378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.666366][T26378] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2324.675166][T26378] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2324.683161][T26378] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:27 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff0600860e010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:27 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() r1 = open(&(0x7f0000000040)='./file0\x00', 0x1c30c2, 0xd2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file1\x00') sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000050c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000680)=""/47, 0x2f}], 0x5}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/237, 0xed}], 0x5, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/111, 0x6f}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/245, 0xf5}], 0x4}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/101, 0x65}, {&(0x7f0000001100)=""/125, 0x7d}], 0x3, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000001340)=""/195, 0xc3}, {&(0x7f0000001440)=""/225, 0xe1}, {&(0x7f0000001540)=""/158, 0x9e}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/163, 0xa3}], 0x7, &(0x7f0000003780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003900)=""/45, 0x2d}, {&(0x7f0000003940)=""/230, 0xe6}, {&(0x7f0000003a40)=""/58, 0x3a}, {&(0x7f0000003a80)=""/71, 0x47}, {&(0x7f0000003b00)=""/225, 0xe1}, {&(0x7f0000003c00)=""/162, 0xa2}, {&(0x7f0000003cc0)=""/39, 0x27}, {&(0x7f0000003d00)=""/88, 0x58}], 0x8, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000005040)=[{&(0x7f0000003ec0)=""/250, 0xfa}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/57, 0x39}], 0x4, &(0x7f0000005080)}}], 0x7, 0x0, &(0x7f0000005280)={0x0, 0x3938700}) wait4(0x0, 0x0, 0x0, &(0x7f00000052c0)) r5 = clone3(&(0x7f00000002c0)={0x8880800, &(0x7f0000000100), &(0x7f0000003fc0), &(0x7f0000000180), {0x2c}, &(0x7f00000001c0)=""/52, 0x34, &(0x7f0000000200)=""/101, &(0x7f0000000280)=[r4, r3, r0, r0, r3, r3, r0], 0x7, {r2}}, 0x58) wait4(r5, &(0x7f0000000340), 0x1000000, 0x0) [ 2324.691395][T26378] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.699372][T26378] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2324.707344][T26378] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:27 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x128) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:27 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008610010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:27 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x11, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:27 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe9340000000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0xa26b, 0x40, 0xf4c8, 0x10001, 0x2}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) mmap(&(0x7f000058c000/0x2000)=nil, 0x2000, 0x100000c, 0x100010, r4, 0xc6506000) 19:08:27 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008611010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 69) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:27 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xfffffffe, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:27 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008612010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2325.338685][T26439] FAULT_INJECTION: forcing a failure. [ 2325.338685][T26439] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.351332][T26439] CPU: 1 PID: 26439 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2325.361603][T26439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2325.374602][T26439] Call Trace: [ 2325.377876][T26439] dump_stack_lvl+0xd6/0x122 [ 2325.382467][T26439] dump_stack+0x11/0x1b [ 2325.386634][T26439] should_fail+0x23c/0x250 [ 2325.391045][T26439] ? kmalloc_array+0x2d/0x40 [ 2325.395633][T26439] __should_failslab+0x81/0x90 [ 2325.400419][T26439] should_failslab+0x5/0x20 [ 2325.404934][T26439] __kmalloc+0x6f/0x350 [ 2325.409087][T26439] kmalloc_array+0x2d/0x40 [ 2325.413514][T26439] iter_file_splice_write+0xd5/0x790 [ 2325.418799][T26439] ? atime_needs_update+0x239/0x390 [ 2325.424010][T26439] ? touch_atime+0xe0/0x250 [ 2325.428618][T26439] ? generic_file_splice_read+0x2a9/0x330 [ 2325.434380][T26439] ? splice_from_pipe+0xd0/0xd0 [ 2325.439289][T26439] direct_splice_actor+0x80/0xa0 [ 2325.444220][T26439] splice_direct_to_actor+0x345/0x650 [ 2325.449588][T26439] ? do_splice_direct+0x190/0x190 [ 2325.454611][T26439] do_splice_direct+0x106/0x190 [ 2325.459457][T26439] do_sendfile+0x63e/0xbb0 [ 2325.463914][T26439] __x64_sys_sendfile64+0x102/0x140 [ 2325.469139][T26439] do_syscall_64+0x44/0xa0 [ 2325.473616][T26439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2325.479522][T26439] RIP: 0033:0x7f56c00b08d9 [ 2325.483932][T26439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.503567][T26439] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2325.511974][T26439] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2325.519944][T26439] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2325.527906][T26439] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 19:08:27 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) rt_sigqueueinfo(r1, 0x10, &(0x7f0000000080)={0x33, 0x1, 0x7}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:27 executing program 4: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x9) r0 = signalfd(0xffffffffffffffff, &(0x7f0000014340), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="f06b86acde82802663198f6095d630d8610c4b30e58ac08175e381b4f2f90862b4c2c1d69f2dc837ce863b6d4ba31251ad35b33cadf02aad29cfc17c470846528863", 0x42) unshare(0x4a060480) [ 2325.535932][T26439] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2325.543923][T26439] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:27 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603020000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:28 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10001000, &(0x7f0000000140)="7a1476f2d6ad476e465c55089f72f8185ecbd2f209f712566d860a356a9fc8c5205cff09511e2c850740e98618", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="028fa13a30bb07f8615e912f7b6be26edd5e27f3acc82ee1c2f09705fc44366a3a00395675e433fbad08a47c87caa12d8de8bec5af25e631f2b3c4c6fbb9bca81c5618ce790277a569cccb771baa924eb154adb5021db23161e219da2392e1d19ca5ee0f571ff69e67aa2acf13b68cdb41aa4e5a71bddfdccdf9539f9382c8147b57a2dc3afc006d871271d5e73814a279") gettid() wait4(0x0, 0x0, 0x80000002, 0x0) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0x14, "712993677ec62b"}, 0x9, 0x0) rt_sigqueueinfo(r0, 0x25, &(0x7f0000000040)={0x0, 0x4}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1c30c2, 0x110) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) 19:08:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x6857b21ff1155d10) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000000040)='./bus\x00', 0x80) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000780)=ANY=[], 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x161242, 0x1) write$P9_RREADLINK(r3, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x6, 0x20, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x40, 0x2, 0xc5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x20008084) 19:08:28 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x12, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:28 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603030000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:28 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800, &(0x7f0000000140)="0827612dfb7c358707a64093ea63948e64679216993d1e85309dc8e4463f1c62ea5530791f067681e2b46492384eea92cc8131d28215a5c8b5071ed087f8c88264b937e504b5", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000001c0)="7e15a6a018784301460cd9a0d7d2ffd0beb12169dcc2b523dab176243f3d67a68e105ca9096a1157cab36c6278bcfed837f29ce842a3db1264e7ce373fa5094f1031ec6cf853cf10ee2d6ee7599e0c30b7a16834639bd1461b1933bd85a71b161e1c38d9f26e1db81624f1282a7cedba0d28907c0eabc8d5238b48342685251cafa24d79349b63c2d1482983573c0993b473fd9ca56dbb44ef46ed9247c34766") wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:28 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603040000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 70) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:28 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603050000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x6857b21ff1155d10) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000000040)='./bus\x00', 0x80) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000780)=ANY=[], 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x161242, 0x1) write$P9_RREADLINK(r3, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x6, 0x20, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x40, 0x2, 0xc5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x20008084) [ 2326.250474][T26511] FAULT_INJECTION: forcing a failure. [ 2326.250474][T26511] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.263157][T26511] CPU: 1 PID: 26511 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2326.273382][T26511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.275560][T26513] validate_nla: 41 callbacks suppressed [ 2326.275570][T26513] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2326.283424][T26511] Call Trace: [ 2326.283434][T26511] dump_stack_lvl+0xd6/0x122 [ 2326.283458][T26511] dump_stack+0x11/0x1b [ 2326.309181][T26511] should_fail+0x23c/0x250 [ 2326.313634][T26511] __should_failslab+0x81/0x90 [ 2326.318395][T26511] ? __iomap_dio_rw+0x139/0x1010 [ 2326.323342][T26511] should_failslab+0x5/0x20 [ 2326.327863][T26511] kmem_cache_alloc_trace+0x52/0x320 [ 2326.333145][T26511] __iomap_dio_rw+0x139/0x1010 [ 2326.337906][T26511] ? kvm_sched_clock_read+0xd/0x20 [ 2326.343019][T26511] ? raw_spin_rq_unlock+0xf/0x20 [ 2326.345188][T26516] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2326.347956][T26511] ? update_blocked_averages+0x650/0x690 [ 2326.347979][T26511] ? plist_check_list+0x151/0x160 [ 2326.366634][T26511] ? __cgroup_account_cputime+0x4f/0x110 [ 2326.372270][T26511] iomap_dio_rw+0x30/0x70 [ 2326.376598][T26511] ? ext4_file_write_iter+0x521/0x11f0 [ 2326.382050][T26511] ext4_file_write_iter+0xa59/0x11f0 [ 2326.387431][T26511] ? ext4_file_write_iter+0x521/0x11f0 [ 2326.392886][T26511] do_iter_readv_writev+0x2de/0x380 [ 2326.398199][T26511] do_iter_write+0x192/0x5c0 [ 2326.402794][T26511] ? splice_from_pipe_next+0x34f/0x3b0 [ 2326.408244][T26511] ? kmalloc_array+0x2d/0x40 [ 2326.412836][T26511] vfs_iter_write+0x4c/0x70 [ 2326.417413][T26511] iter_file_splice_write+0x43a/0x790 [ 2326.422841][T26511] ? splice_from_pipe+0xd0/0xd0 [ 2326.427710][T26511] direct_splice_actor+0x80/0xa0 [ 2326.432650][T26511] splice_direct_to_actor+0x345/0x650 [ 2326.435619][T26516] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2326.438013][T26511] ? do_splice_direct+0x190/0x190 [ 2326.451074][T26511] do_splice_direct+0x106/0x190 [ 2326.455912][T26511] do_sendfile+0x63e/0xbb0 [ 2326.460321][T26511] __x64_sys_sendfile64+0x102/0x140 [ 2326.465519][T26511] do_syscall_64+0x44/0xa0 [ 2326.469941][T26511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2326.475841][T26511] RIP: 0033:0x7f56c00b08d9 [ 2326.480247][T26511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.499928][T26511] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2326.508333][T26511] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2326.516293][T26511] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2326.524253][T26511] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.532230][T26511] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2326.540206][T26511] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:30 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$cont(0x7, r1, 0x4d38ef71, 0xb2) creat(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') 19:08:30 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603060000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:30 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/locks\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x20, 0x4f, 0x3f, 0x1f, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x2}, 0x280, 0x186c, 0x39, 0x5, 0x8, 0xb5, 0x7, 0x0, 0x7fff, 0x0, 0x5}, r2, 0x3, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr=0x200}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000080) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff8000/0x3000)=nil) perf_event_open(&(0x7f0000001780)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x100000002, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800c7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000ffffac1414aafc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@flushsa={0x110c, 0x1c, 0xf, 0x0, 0x0, {}, [@user_kmaddress={0x2c, 0x13, {@in6=@private0={0xfc, 0x0, '\x00', 0xff}, @in=@multicast2, 0x0, 0x2}}, @proto={0x5, 0x19, 0xff}, @algo_crypt={0x1048, 0x2, {{'lrw(camellia)\x00'}, 0x8000, "36d36e616d88f08cb1453f62e9772451156dae7212cd52b47c968e781bff9750c39f517ecd419cc8d925f03f6233ec171574276da2ebf1132f500b6db941090bbf07b03c7af630449fca677624187a3f417fbdaf78e519fa453a6396df174e2602d000bd8ed9b51ce3201652815a5559251806e6a655573f7a5e0e7978649a6e20d591bc391f124a7bed47e56549ffa39314632d7c8ee9f57a6f10b23ac536288af795283b430f40bd40c371eac42cefe5db156f117a27eb36485ec058e1ade0d6c9e1e3960f55d9accfea3ea369f24b5ac2e8386f713e5f5a3c4d18e13e45314606adedf9089845df8329f6b332a89acee1b1ba2621507379b25c246b7d4cbd7ddfadcba1ce3a7e1bfb1c02b4e542902e039f21931426cfcc8aebc1d6d201522ddc73b1903d23838df6f084af81d66e90b4b185cc0347ff1603f907dac08810e7c4108900ed9ed06ac61a9e12b9c2f1229b56ae6ca9e40b3f35e79292192295ca7c203a36dfe5b1c6860eb1fb02b3b2908713f370d5bee71e0425c3641fda320814a6468c4a225e0069bde8b931bef61d02bbf3759576321fa9984a295f05d0bb76ff73c68810a7551c51d95dedf769e9f17b38341b01b478e454e01fc0de3bbc8eb29910d6cfa920464e95500f0619f7fdbe0a4f4cedb877ada4177796f5de754ab451e53b79292e797000349d47f2113716861bad793c7f159576585f2f694805a4b12786d5c18e62372ac4081bc27e25d7cffcafcc8bc4583fe183026c08f086d5200fbe5ca59bc6e5263dd0b4fac94f6a3d94d459377175235578ca1030707955e646a6e8e7652918ac9688ed910de1f8c3659f3f80b07b057b51d987f9c591fdc4365d3596517e97d10ab76b380279ef32088994624855fe29b092537751e106e0350d9e970d0e4388f65136f0a62f8148327d5d52ae0bd6762ac23d7dfdce3f35e9a6d915fd8620bd62a39e465079267858e08355e1b8b231f1ac13fa39eaaf0a12ea37e5d58f36d53a74190353c37458ee68164a082ebfc7f9ea7e26ee88b9f829629668a6be920a60773989f2d97730dfcf31f4993e2baac66bc6d1e9a76052c92bee367c4387803b844e15455d74b52c4f710c09ed228f0c72e8f28b60086ddf5289795bae97e34a764dc6cbd9be45914e1db6e1e9dfc6658302fb01763c63462c1939bb9b6cd6882165de1122347b0897196199c24d832ae3456a71baad9992a01e5b7bcd7db9619369b6fc64b290d95c2c02203c406da40b0a9814762a7f702b0c215838daadaa8701e42b0266d2e47c0cb59b07151d497e611db4b7b98236d04ec819c9aae92fedb35f18537cabdecdb2194be419b3d6853869c371b35d583e924adbef6aae34a55ea3824dde20dfd0d255e9fb529bf415a62218f90901a211c617b3c51678f9b7e09c28aa7b2f8ea094b6113e09bb696547f500f24c3db9f0768610ea188897bdd5b0c365df946dcadf671bd123a64119bf0ba3f7f6858cfbf892525882729f128cdff04a6a58bacc0b002600c50e7a4054c3107f2aa3800b784b2f52ea1364ad75133217fc5811bf69984e5011c435b78aade4b6d35b02dd58a8c3d0ec128b45a5c38f4889a9495f2ce3b3bbae01bccd9c5a3cd185c24e3502c8c805637e3e5806d3e87fb3bf54c9637d967b8e5378bab8715e81e8ad79cc6372deb3b4aca6370f6effad7a1f227551ff431e44fbc2b7e678f01518b20814630397e2b6236b42bd3be2b3a3bce6eca0daa0da191b41871caf85882e132d7e67df642c8348ec2b054d519a423b7eff637523893c413a3635de6a67df65d667b6913d32fc6c5f08ac986e266aa51e3c46583ec31c0a35abb80f9b726ff17fa5afb4f652a75e1b5a1d13ce184fe5eda34500c0121f7c5d1e387b68a94293ba5135b1bfb90a2685b3ca479c88b00a73b1ff118a5afcb07f2b7e5fba926ac683fff6e5dbd6d14d4984cdcf0b596cffaa74ea6295e560f9847438312398b669fcd2d888914b9ef9770a946734fa1616106cece3b1a7ccc8014153074a25e3f9eb6d021f1802521674dd99ca9392fdf044932efd342b36de90eba18029ac470dbf41d0ccccc1d8a58f2c6de3dda2a6f10f34178340d8505a2f75dad2b10c3213e8f30df9137a87c3a3436c47b2ec5b1290393303e77a4acdc74e49ba040b1c790ccdc77d3ecd726b2eee954d31e613be328981017656e5d2f2987170092283c2e3b0862247a97250af944f3a5c79924fc251fb98af49ed9c73c17d350dd819f2f6b3baf9c5d78b18333ebb6125e4d9d0344e0746f0c975738ccda9ca3ae8c669fbea3710fba3e3946e54dc42c49a27d790636711b7ff7c1266088f71c702def8fba2063cbb1758ff0b1154287b8df1703507d3ff885759183acccda5e65f9e972288b81b369cbb31767754861f467ef4b9540651702ac787ceff8a7d8067edffce9d3bf1ce213dc22435af31c9b356906cec2484887bc294732b87a9b56264f42611fcdf89a3568fb33548c35165cc87dd4c71a375a1ceff7e5bb4cac89a99d4dff3ab12b69b27f004d6bd48687f2a3fef5dcc0b9b83c835231566866349991cd3968c18e42c7a5014afd35323addf6aae848a27fc60c5b3d8cb44d4c38b8dbfcd2a315fc53391dac7790fcfcf4f1398f15a29dd820118c64f691c25c80449b038eae04579ec35d47b386518f0a48ee4a6424276d418ad1940266377b4338ca67d40175d635e5d976d841c5e8916e7cb9c41a2c74fdb93b61e448cbcd2be21abc16bb893b8927ddfcc0414692d966a114822994276324c3a5df4d60f198a0d02f4af3ae2274177100c9ccf95d6ed679874b800d0d72e1ac2365c67d2c97f1c52634574b6d026753a9e0792bba4cb79756012f5ae87566c58d0063d92e8355fb7f4e06b89a6c7b842dc1826485cc68bdd670df1df3ded79b7dca557e6f4af8de981c02a98cc7429586190f84428093aa851ea1acdf13587a9c5ef82856056c1c85dbc7d9da1842468f64413f6c01e9e1df9012d18da0f005828103414daecc92065b9d767abf56d47b4e4b64e0cdcc37c39b9eb569c5ebf276ceca86f3b746771942d64892046685cad8f61c0f147834ef879d9c7a651fad159eab92936a308de7f563a689edbf3c7f4d9a5b1a0ac8f55fac8b1a85c2d0509ac76cf4e52f30065fc7f3295e65ac7bb8f39379baa40629d655bc1f1e1a454de199b0d9698b5e6633a7af5bbe8302e25d38a85e360baef52593744fc0e293faf076bac791b42629bfd182e2b4b4388e2cf258d5dd96629180cfa32dbb46e4f87416795a7b04ac55a7ba2ffbf017baf9ded8bd6219a4b40f9d6a545b2138f089c83e93aada68dfe61ba4ec9a37147c43ade0eb2d4ea2cdd9e14ce60f33f6f83a2c4ab0fdc915af27d11a413e3b30100042fe6599c94042cb87d32c573eb742a905c1b6b1a98a6f89612c6d2cf8216aed3d74040cc1c1bdf16f61f5461eae5f94128f264244c7e07517829d89efa382bc24a68b989794a3cfa38a834bd6ab7a2423011ff6db6ea5cc83fda0e2b9592018042128fbff3e0d7a6a73ef606ae947307e1f3b0ebcf37e7dfde7db9254f3e3cc16235f997ad7f8082a4dd4245967be64c695f4757a28266b0bd12cafc8e8c090bb41bd5d9108554abbd975ba45e987ee5d7a635a6e7e6681ec747dd5a1d2c7f5b2310fd6c9417e23a127b73d7ed1b3de6f9545ea0a0b69da33e4a5c15d988c9a7a316a4de791f025f74affd51fadd9f95411ca19a094ae4d17f7f5806baf7b260baeaf36ba21d375a8b028451d12cb8dcaa87cd4e4b21eead78a8ca91e714cc8c21555f9424d34f49802c93c3040abf74c359c5a122dde33dd373bcf6e50e4def863be92542ea9c0053a641b3aefb9154d37f7d9375426aa2b41010dfb2d8ff5627e75f0b49796695822b30aa8954b96e6deb81ca345b526bd30cc8164c17f1219743b3a2335286df58b74460764a1095ac1c5f303ab55e00d8df46e0208a43db260f11e80331d860796fba272a9495b682836928cc10ea502bf02d42fe26530d1e0f41e0e74984ce7a8938befe710a98f730a795217a7a1cb508365b071c4111717e38bf5b9008f7db82466a3f1938d113508fbf20dcbb0078a2db489582c06fbace797b013262f1ccb15b0d75097ef4c75091a3b56877b3fd8ac285cd81caa56881a867998b1ac453bd5bde21f0b04f765b030621223409974ad0040bc9449e83762db0ceff7cf70b3366fc6669b1129b95177a7f3568ada5668af4b4aeffc03b2c1c1198a2fbe8d47983fb53dd685c729202f7b1420f795b55fbb3c1382890aeaeb79ee51471488a276eb2fb46581913fc6700213aa3ff0831563f98a20c5bfe65a5d97a77b096a90d9cb098c2cd74ed257dc8d25ffa173b889a50b92c15d8c811435c08a4b7928f21f6dcd6722e3501cffa1017cf29634b33ae88fd3a326ccef1c75415a2fc1efaf74dcdd7ee69ab71b8d6da41c141c609a57fd5f64825edece829a04574887998d34739e013679815f075616269512a38aa0b7839f465a105c5bd26bb97a2892e7062b0a10b67c3fac621491e372f590eafd23467eb9754651b397d262481a8b9949bcbe2aa5e85ba251136fab3d1fb77643921f318ca6bfd8f00b997b790f4b02ab85b216c8ba948087a6833864f74919f0b6a101f6a8ab1d22626cb008b90a6ee1900be81adebea7350d97bc95144bc471d54c14936de55fd21aaebbd3bf6a54ae4043a2af6dfda7bf91b1ce51965a6b9ed4f889719f55c4d30c64138f57d436c3323a4729a83c34adc78b85b108a9f573743f3c794c578b4712d639dae821a909424d30dd0de882e21020a73a3d5fe40d76e571bca8fba83a0d90c1922ba35c4cdaa698cfea7705610f6b130c5b369c6154660332185a757d05cabe638cbb3706809e9438c5cd2ac5adfa035b4579164cc69cce21cd94232857dd9272e0adc551a114ea0bcaaa4f5da595ae225fa4b94dc314da21a195434a012695da49eacd272af2b720c91bc8f32b6210e6a8d7f72af85dceb12f32af07014f34e4aa231ec7d2c5ac06fe0e5b5d94848ff0a23da76f324c9021f306118241ed9f8c05d78234383be725bd1736c77a1e0536ae05d2f3e99b33aea310cf68d91bd17ceeede29b5412df1f38c885e45e20951b250d23e20f45ccc0348317ae8c18c29a39ab20e0a33894be0a8c2e0b59268069cb7b371cf2cc6df68ce442e079c79ba0a4ce39af17030248fb7b4374b733906315e42cf1486d67e65c7b8b4b3199a68c254d560a2ebb98e682254a268e82cd44983ff61f966441cb05b4d990070829d54af4edf32a358358d8d91190cc73e1aed38b05c2a115a738da993cd9520cee25bbecd92cebd44b53b3009c995027cbb87dd48b84aaba39014125779b5ee4ec49898fee122519043af0cb94c3a8e4b23a759520421e517f214d5fb1f32ff6dcaa8c3b77642d5cf2788da55724f1fd2aaf338c2b144379c88de586074260f5870481b0a168a60053ee3333a865ec0180d8b5f8dea94c561987ba55faf8410e394e1583feb3ede7509b8eebc8154648bdd6e60e2d062cb7cbf2a35a5e48ba04fa3fd420198760a56bdbf434a3e4923829320b006d0e979074a19eb04e5fe8cac2f8374cb76f3b9f970012812942c6b74aaf362ab0ca495b34d54e1d7c5d0cb85da5664139386cc7314fb39896e9c0ae3257252f0264d89be22c4481032f318e061d523fc7d06939d591afeffa3c447509395c584e3d92ef1653ae387d92640e9b4873a4eb1c134ef30ece6beb15955"}}, @srcaddr={0x14, 0xd, @in6=@empty}, @tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d3, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x3, 0x0, 0x2, 0x25, 0xdc}]}, @sec_ctx={0x24, 0x8, {0x20, 0x8, 0x1, 0x40, 0x18, "310e24ab9b520e62afbd4c0b17ef86d079615a38f7cd0fee"}}]}, 0x110c}}, 0x8014) 19:08:30 executing program 0: wait4(0x0, 0x0, 0x80000002, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000200)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:30 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x13, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 71) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:31 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001980)={0x0, 0x0}) wait4(r0, &(0x7f0000001a00), 0x8, &(0x7f0000001a40)) clone(0x1240c0680, &(0x7f0000000140)="b7d5ec868d04d27bf4183124521579f15c661d8dd035fb61f16b8d2809c0048013de9e3c03679375eac1c2f2eef0ac56201d0b15423b38aba00c18cd52e675c2955f68d7231f0a00ba582c7a246e3d9d083a9897096f007ebdbb90c25f9d19b299bdfdbbcc76f10c8c355234279919fde28811c96d4ae3", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000440)="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"/358) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) rt_sigqueueinfo(r1, 0x34, &(0x7f0000000040)={0x0, 0xfff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = gettid() tkill(r4, 0xb) wait4(r4, &(0x7f00000000c0), 0x1, &(0x7f0000000240)) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 2328.639642][T26545] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2328.647960][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2328.698249][T26553] netlink: 4344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2328.723189][T26550] FAULT_INJECTION: forcing a failure. [ 2328.723189][T26550] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.735882][T26550] CPU: 1 PID: 26550 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2328.746024][T26550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2328.756071][T26550] Call Trace: [ 2328.759345][T26550] dump_stack_lvl+0xd6/0x122 [ 2328.763928][T26550] dump_stack+0x11/0x1b [ 2328.768079][T26550] should_fail+0x23c/0x250 [ 2328.772489][T26550] ? mempool_alloc_slab+0x16/0x20 [ 2328.777585][T26550] __should_failslab+0x81/0x90 [ 2328.782348][T26550] should_failslab+0x5/0x20 [ 2328.786508][T26547] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2328.786861][T26550] kmem_cache_alloc+0x4f/0x300 [ 2328.795145][T26558] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2328.799676][T26550] ? ext4_inode_block_valid+0x1cc/0x210 [ 2328.799704][T26550] mempool_alloc_slab+0x16/0x20 [ 2328.799719][T26550] ? mempool_free+0x130/0x130 [ 2328.822788][T26550] mempool_alloc+0x9d/0x310 [ 2328.827298][T26550] bio_alloc_bioset+0xcc/0x530 [ 2328.832063][T26550] ? iov_iter_alignment+0x34b/0x370 [ 2328.837243][T26550] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2328.842322][T26550] __iomap_dio_rw+0x8d8/0x1010 [ 2328.847093][T26550] ? raw_spin_rq_unlock+0x1/0x20 [ 2328.852015][T26550] iomap_dio_rw+0x30/0x70 [ 2328.856326][T26550] ? ext4_file_write_iter+0x521/0x11f0 [ 2328.861788][T26550] ext4_file_write_iter+0xa59/0x11f0 [ 2328.867066][T26550] ? ext4_file_write_iter+0x521/0x11f0 [ 2328.872511][T26550] do_iter_readv_writev+0x2de/0x380 [ 2328.877695][T26550] do_iter_write+0x192/0x5c0 [ 2328.882271][T26550] ? splice_from_pipe_next+0x34f/0x3b0 [ 2328.887774][T26550] ? kmalloc_array+0x2d/0x40 [ 2328.892350][T26550] vfs_iter_write+0x4c/0x70 [ 2328.896838][T26550] iter_file_splice_write+0x43a/0x790 [ 2328.902190][T26550] ? splice_from_pipe+0xd0/0xd0 [ 2328.907020][T26550] direct_splice_actor+0x80/0xa0 [ 2328.911985][T26550] splice_direct_to_actor+0x345/0x650 [ 2328.917403][T26550] ? do_splice_direct+0x190/0x190 [ 2328.922422][T26550] do_splice_direct+0x106/0x190 [ 2328.927309][T26550] do_sendfile+0x63e/0xbb0 [ 2328.931709][T26550] __x64_sys_sendfile64+0x102/0x140 [ 2328.936896][T26550] do_syscall_64+0x44/0xa0 [ 2328.941296][T26550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2328.947193][T26550] RIP: 0033:0x7f56c00b08d9 [ 2328.951635][T26550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.971238][T26550] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2328.979676][T26550] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2328.987673][T26550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2328.995626][T26550] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.003579][T26550] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2329.011532][T26550] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 [ 2329.059301][T26571] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:31 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603070000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2329.292767][T26575] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2329.345378][T26575] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 72) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2329.412205][T26577] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:31 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603080000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2329.602885][T26590] FAULT_INJECTION: forcing a failure. [ 2329.602885][T26590] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.615513][T26590] CPU: 1 PID: 26590 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2329.625730][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2329.635777][T26590] Call Trace: [ 2329.639063][T26590] dump_stack_lvl+0xd6/0x122 [ 2329.643759][T26590] dump_stack+0x11/0x1b [ 2329.647913][T26590] should_fail+0x23c/0x250 [ 2329.652328][T26590] ? mempool_alloc_slab+0x16/0x20 [ 2329.657347][T26590] __should_failslab+0x81/0x90 [ 2329.662341][T26590] should_failslab+0x5/0x20 [ 2329.666882][T26590] kmem_cache_alloc+0x4f/0x300 [ 2329.671643][T26590] ? __blk_mq_alloc_request+0x270/0x290 [ 2329.677246][T26590] mempool_alloc_slab+0x16/0x20 [ 2329.682091][T26590] ? mempool_free+0x130/0x130 [ 2329.686824][T26590] mempool_alloc+0x9d/0x310 [ 2329.691315][T26590] bio_alloc_bioset+0xcc/0x530 [ 2329.696068][T26590] ? submit_bio_noacct+0x7ab/0x7d0 [ 2329.701247][T26590] iomap_dio_zero+0xac/0x340 [ 2329.705875][T26590] iomap_dio_bio_iter+0xa62/0xbc0 [ 2329.710898][T26590] __iomap_dio_rw+0x8d8/0x1010 [ 2329.715707][T26590] ? raw_spin_rq_unlock+0x1/0x20 [ 2329.720731][T26590] iomap_dio_rw+0x30/0x70 [ 2329.725082][T26590] ? ext4_file_write_iter+0x521/0x11f0 [ 2329.730539][T26590] ext4_file_write_iter+0xa59/0x11f0 [ 2329.735814][T26590] ? ext4_file_write_iter+0x521/0x11f0 [ 2329.741270][T26590] do_iter_readv_writev+0x2de/0x380 [ 2329.746592][T26590] do_iter_write+0x192/0x5c0 [ 2329.751265][T26590] ? splice_from_pipe_next+0x34f/0x3b0 [ 2329.756719][T26590] ? kmalloc_array+0x2d/0x40 [ 2329.761377][T26590] vfs_iter_write+0x4c/0x70 [ 2329.765938][T26590] iter_file_splice_write+0x43a/0x790 [ 2329.771299][T26590] ? splice_from_pipe+0xd0/0xd0 [ 2329.776166][T26590] direct_splice_actor+0x80/0xa0 [ 2329.781117][T26590] splice_direct_to_actor+0x345/0x650 [ 2329.786490][T26590] ? do_splice_direct+0x190/0x190 [ 2329.791513][T26590] do_splice_direct+0x106/0x190 [ 2329.796383][T26590] do_sendfile+0x63e/0xbb0 [ 2329.800839][T26590] __x64_sys_sendfile64+0x102/0x140 [ 2329.806093][T26590] do_syscall_64+0x44/0xa0 [ 2329.810504][T26590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2329.816389][T26590] RIP: 0033:0x7f56c00b08d9 [ 2329.820787][T26590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.840463][T26590] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:08:32 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086030a0000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2329.848913][T26590] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2329.856885][T26590] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2329.864836][T26590] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.872826][T26590] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2329.880778][T26590] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:32 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x14, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2330.180488][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2330.190224][T26553] netlink: 4344 bytes leftover after parsing attributes in process `syz-executor.4'. 19:08:33 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001c40)={{r6}, r5, 0x1a, @inherit={0x78, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYBLOB="68f827d0a9421a39e5c101fa603577febe4c246f81beabbc659f5cf31b5830340262571855afdd0000c7e3c64758b6aa252fe19e1b2e44938e903d22bea750b4340bf2794d3ea8f8d855491005346df5eddf64f2807d277122172ee809818d0af27283836c213fa9dc63efef0d6f8913fd73933a87bd6efc9535f1d537defdddfb2c5496c6ce615f788e9ff3c6fe02d039c61738178927521bcd4cd84bf918f17ff858781849959a22bccaeaa72420b02b2c77b313c33b026200c49d7a3c231f555a5ed896ed0b01a34e985e6c548f2b874867399fddf165cfb86eaaf40289e718ae090e99dc692db581c0a012ca3b24", @ANYRES32=r4, @ANYRESDEC]}, @subvolid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"7eb0e4e3f7fe8bc39ec73e5fd32c8bc7", 0x0, r5, {0x0, 0x7}, {0x9}, 0x7, [0x200, 0x1, 0x90, 0xdb, 0x7, 0x80000001, 0x1, 0x5c4d, 0x7, 0x7f, 0x6, 0x7, 0x7636, 0x9, 0x400, 0x9]}) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:33 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086030b0000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/locks\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x20, 0x4f, 0x3f, 0x1f, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x2}, 0x280, 0x186c, 0x39, 0x5, 0x8, 0xb5, 0x7, 0x0, 0x7fff, 0x0, 0x5}, r2, 0x3, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr=0x200}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000080) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff8000/0x3000)=nil) perf_event_open(&(0x7f0000001780)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x100000002, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800c7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000ffffac1414aafc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@flushsa={0x110c, 0x1c, 0xf, 0x0, 0x0, {}, [@user_kmaddress={0x2c, 0x13, {@in6=@private0={0xfc, 0x0, '\x00', 0xff}, @in=@multicast2, 0x0, 0x2}}, @proto={0x5, 0x19, 0xff}, @algo_crypt={0x1048, 0x2, {{'lrw(camellia)\x00'}, 0x8000, "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"}}, @srcaddr={0x14, 0xd, @in6=@empty}, @tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d3, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x3, 0x0, 0x2, 0x25, 0xdc}]}, @sec_ctx={0x24, 0x8, {0x20, 0x8, 0x1, 0x40, 0x18, "310e24ab9b520e62afbd4c0b17ef86d079615a38f7cd0fee"}}]}, 0x110c}}, 0x8014) 19:08:33 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x15, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 73) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:33 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="7c09e010a19f766b7b1fc6f0f664a55d63d14bd0432b3f63b4d713170130550ec8519fffcbf0032272093b9a1694845c75fb5e3f26d1858de85ca8345bd3e8e8fc2711b8d05d5b3c46e5680230ac6844bdee3f"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0xb) tkill(r2, 0x102e) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2331.672464][T26626] validate_nla: 7 callbacks suppressed [ 2331.672474][T26626] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2331.698989][T26631] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2331.707218][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2331.757349][T26637] netlink: 4344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2331.763332][T26636] FAULT_INJECTION: forcing a failure. [ 2331.763332][T26636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2331.780084][T26636] CPU: 1 PID: 26636 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2331.790344][T26636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.800501][T26636] Call Trace: [ 2331.803773][T26636] dump_stack_lvl+0xd6/0x122 [ 2331.808363][T26636] dump_stack+0x11/0x1b [ 2331.812520][T26636] should_fail+0x23c/0x250 [ 2331.817002][T26636] __alloc_pages+0x102/0x320 [ 2331.817017][T26633] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2331.829654][T26636] alloc_pages+0x382/0x3d0 [ 2331.834068][T26636] __page_cache_alloc+0x4d/0xf0 [ 2331.838906][T26636] page_cache_ra_unbounded+0x1be/0x430 [ 2331.844358][T26636] ondemand_readahead+0x58c/0x7c0 [ 2331.849610][T26636] page_cache_sync_ra+0xaf/0xe0 [ 2331.854450][T26636] filemap_read+0x3ad/0x1220 [ 2331.859030][T26636] generic_file_read_iter+0x75/0x2c0 [ 2331.864318][T26636] ? __fsnotify_parent+0x340/0x440 [ 2331.869415][T26636] ext4_file_read_iter+0x1db/0x290 [ 2331.874523][T26636] generic_file_splice_read+0x24f/0x330 [ 2331.880050][T26636] ? splice_shrink_spd+0x60/0x60 [ 2331.884977][T26636] splice_direct_to_actor+0x2aa/0x650 [ 2331.890391][T26636] ? do_splice_direct+0x190/0x190 [ 2331.895419][T26636] do_splice_direct+0x106/0x190 [ 2331.900261][T26636] do_sendfile+0x63e/0xbb0 [ 2331.904705][T26636] __x64_sys_sendfile64+0x102/0x140 [ 2331.909931][T26636] do_syscall_64+0x44/0xa0 [ 2331.914386][T26636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2331.920345][T26636] RIP: 0033:0x7f56c00b08d9 [ 2331.924742][T26636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.944370][T26636] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2331.952761][T26636] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2331.960716][T26636] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2331.968670][T26636] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.976620][T26636] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2331.984570][T26636] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 [ 2331.994783][T26633] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2332.043354][T26626] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:34 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086030c0000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2332.211642][T26646] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2332.270778][T26647] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2332.323892][T26647] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:34 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086030f0000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 74) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2332.470131][T26651] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:34 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x1, 0x0, 0x4}, &(0x7f0000000140)=[{}, {}, {}, {}]) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) recvmmsg$unix(r1, &(0x7f00000038c0)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000000c0)}], 0x2}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000700)=""/2, 0x2}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000840)=""/16, 0x10}, {&(0x7f0000000880)=""/233, 0xe9}], 0x2, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ac0)=""/65, 0x41}, {&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/135, 0x87}, {&(0x7f0000000d00)=""/203, 0xcb}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/183, 0xb7}], 0x7, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/142, 0x8e}, {&(0x7f0000001180)=""/146, 0x92}], 0x2}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)=""/254, 0xfe}], 0x1, &(0x7f00000013c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000001480)=""/10, 0xa}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/69, 0x45}], 0x3, &(0x7f0000002580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000003880)=[{&(0x7f0000002640)=""/40, 0x28}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/204, 0xcc}, {&(0x7f0000003780)=""/237, 0xed}], 0x4}}], 0x8, 0x20, 0x0) ptrace$setregs(0xf, r2, 0x5, &(0x7f0000003ac0)="18abfee608e1805c9ae7f36dc81ecf7b3714be59abb990f690a22c131399c77808494da6aea5648c44750259296419598343fae862f4c7ef6e4de0c27b4ad0edad11633cabe2960880ec60e282baab8054425838dde735e0a66997b0f2d389d892b4fc3eef8d3d73201910ad67be3d787f08856635dfc59b7b4e783a6a0742fdee65be0d75df7f31c6c855be513462bbfd") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) clone(0xb2000200, &(0x7f0000003b80)="7a8c2bc9faae4fd299faedc98a8843ca7473a2c34e8adb7bc2107bb5fda4a9557aa3020ccae5054fb17712cdce9953d760ca1dc8c1f6fee1924e5d17411148c797b6298647", &(0x7f00000000c0), &(0x7f0000003c00), &(0x7f0000003c40)) sendfile(r1, r3, 0x0, 0x4000000000010046) [ 2332.547830][T26657] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2332.606307][T26663] FAULT_INJECTION: forcing a failure. [ 2332.606307][T26663] name failslab, interval 1, probability 0, space 0, times 0 [ 2332.619057][T26663] CPU: 1 PID: 26663 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2332.629197][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.639250][T26663] Call Trace: [ 2332.642522][T26663] dump_stack_lvl+0xd6/0x122 [ 2332.647111][T26663] dump_stack+0x11/0x1b [ 2332.651275][T26663] should_fail+0x23c/0x250 [ 2332.655688][T26663] ? xas_create+0x3fb/0xb30 [ 2332.660242][T26663] __should_failslab+0x81/0x90 [ 2332.664999][T26663] should_failslab+0x5/0x20 [ 2332.669502][T26663] kmem_cache_alloc+0x4f/0x300 [ 2332.674396][T26663] xas_create+0x3fb/0xb30 [ 2332.678787][T26663] xas_store+0x70/0xca0 [ 2332.682940][T26663] ? memcg_check_events+0x23/0x3b0 [ 2332.688051][T26663] ? get_page_from_freelist+0x55e/0x830 [ 2332.693592][T26663] ? cgroup_rstat_updated+0x34/0x100 [ 2332.698974][T26663] ? xas_find_conflict+0x422/0x4c0 [ 2332.704085][T26663] __add_to_page_cache_locked+0x20b/0x4f0 [ 2332.709799][T26663] ? workingset_activation+0x270/0x270 [ 2332.715260][T26663] add_to_page_cache_lru+0xa0/0x1b0 [ 2332.720466][T26663] page_cache_ra_unbounded+0x274/0x430 [ 2332.725920][T26663] ondemand_readahead+0x58c/0x7c0 [ 2332.731014][T26663] page_cache_sync_ra+0xaf/0xe0 [ 2332.735876][T26663] filemap_read+0x3ad/0x1220 [ 2332.740478][T26663] generic_file_read_iter+0x75/0x2c0 [ 2332.745828][T26663] ? __fsnotify_parent+0x340/0x440 [ 2332.750922][T26663] ext4_file_read_iter+0x1db/0x290 [ 2332.756019][T26663] generic_file_splice_read+0x24f/0x330 [ 2332.761624][T26663] ? splice_shrink_spd+0x60/0x60 [ 2332.766551][T26663] splice_direct_to_actor+0x2aa/0x650 [ 2332.771902][T26663] ? do_splice_direct+0x190/0x190 [ 2332.776904][T26663] do_splice_direct+0x106/0x190 [ 2332.781808][T26663] do_sendfile+0x63e/0xbb0 [ 2332.786224][T26663] __x64_sys_sendfile64+0x102/0x140 [ 2332.791423][T26663] do_syscall_64+0x44/0xa0 [ 2332.795839][T26663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2332.801745][T26663] RIP: 0033:0x7f56c00b08d9 [ 2332.806182][T26663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2332.825857][T26663] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2332.834316][T26663] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2332.842274][T26663] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 19:08:35 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603100000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2332.850230][T26663] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2332.858188][T26663] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2332.866320][T26663] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 19:08:35 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x16, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:35 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603120000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:35 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603130000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:35 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603140000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:35 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/202, 0xca}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2000) wait4(r1, &(0x7f0000000400), 0x20000000, &(0x7f0000000440)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 19:08:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) (fail_nth: 75) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2333.563030][T26715] FAULT_INJECTION: forcing a failure. [ 2333.563030][T26715] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.575664][T26715] CPU: 1 PID: 26715 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2333.585822][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.595865][T26715] Call Trace: [ 2333.599163][T26715] dump_stack_lvl+0xd6/0x122 [ 2333.603805][T26715] dump_stack+0x11/0x1b [ 2333.607960][T26715] should_fail+0x23c/0x250 [ 2333.612404][T26715] ? mempool_alloc_slab+0x16/0x20 [ 2333.617471][T26715] __should_failslab+0x81/0x90 [ 2333.622277][T26715] should_failslab+0x5/0x20 [ 2333.626837][T26715] kmem_cache_alloc+0x4f/0x300 [ 2333.632010][T26715] mempool_alloc_slab+0x16/0x20 [ 2333.636839][T26715] ? mempool_free+0x130/0x130 [ 2333.641522][T26715] mempool_alloc+0x9d/0x310 [ 2333.646011][T26715] ? ext4_map_blocks+0x5a8/0xf00 [ 2333.650929][T26715] bio_alloc_bioset+0xcc/0x530 [ 2333.655669][T26715] ext4_mpage_readpages+0xe55/0x1140 [ 2333.660938][T26715] ? __add_to_page_cache_locked+0x36a/0x4f0 [ 2333.666887][T26715] ext4_readahead+0x99/0xa0 [ 2333.671369][T26715] read_pages+0xb6/0x540 [ 2333.675587][T26715] ? lru_cache_add+0x13e/0x150 [ 2333.680330][T26715] page_cache_ra_unbounded+0x3d2/0x430 [ 2333.685763][T26715] ondemand_readahead+0x58c/0x7c0 [ 2333.690778][T26715] page_cache_sync_ra+0xaf/0xe0 [ 2333.695696][T26715] filemap_read+0x3ad/0x1220 [ 2333.700300][T26715] generic_file_read_iter+0x75/0x2c0 [ 2333.705591][T26715] ? __fsnotify_parent+0x340/0x440 [ 2333.710715][T26715] ext4_file_read_iter+0x1db/0x290 [ 2333.715855][T26715] generic_file_splice_read+0x24f/0x330 [ 2333.721454][T26715] ? splice_shrink_spd+0x60/0x60 [ 2333.726377][T26715] splice_direct_to_actor+0x2aa/0x650 [ 2333.731725][T26715] ? do_splice_direct+0x190/0x190 [ 2333.736729][T26715] do_splice_direct+0x106/0x190 [ 2333.741560][T26715] do_sendfile+0x63e/0xbb0 [ 2333.745975][T26715] __x64_sys_sendfile64+0x102/0x140 [ 2333.751166][T26715] do_syscall_64+0x44/0xa0 [ 2333.755625][T26715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2333.761509][T26715] RIP: 0033:0x7f56c00b08d9 [ 2333.765968][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2333.785622][T26715] RSP: 002b:00007f56bde07188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2333.794065][T26715] RAX: ffffffffffffffda RBX: 00007f56c01b5020 RCX: 00007f56c00b08d9 [ 2333.802011][T26715] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2333.809959][T26715] RBP: 00007f56bde071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2333.817922][T26715] R10: 000000000000ef85 R11: 0000000000000246 R12: 0000000000000002 [ 2333.826050][T26715] R13: 00007ffd3a29a25f R14: 00007f56bde07300 R15: 0000000000022000 [ 2334.055613][T26715] ================================================================== [ 2334.063796][T26715] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 2334.072037][T26715] [ 2334.074337][T26715] write to 0xffff88815e1102cc of 4 bytes by task 26716 on cpu 0: [ 2334.082026][T26715] xas_set_mark+0x13e/0x150 [ 2334.086506][T26715] __test_set_page_writeback+0x2a9/0x570 [ 2334.092131][T26715] ext4_bio_write_page+0xee/0xa40 [ 2334.097145][T26715] mpage_process_page_bufs+0x437/0x560 [ 2334.102582][T26715] mpage_prepare_extent_to_map+0x4f6/0x650 [ 2334.108368][T26715] ext4_writepages+0x706/0x1d70 [ 2334.113205][T26715] do_writepages+0x26b/0x3c0 [ 2334.117771][T26715] file_write_and_wait_range+0x1ae/0x240 [ 2334.123392][T26715] ext4_sync_file+0x105/0x670 [ 2334.128039][T26715] vfs_fsync_range+0x107/0x120 [ 2334.132777][T26715] ext4_buffered_write_iter+0x3af/0x400 [ 2334.138297][T26715] ext4_file_write_iter+0x2e7/0x11f0 [ 2334.143559][T26715] do_iter_readv_writev+0x2de/0x380 [ 2334.148737][T26715] do_iter_write+0x192/0x5c0 [ 2334.153301][T26715] vfs_iter_write+0x4c/0x70 [ 2334.157779][T26715] iter_file_splice_write+0x43a/0x790 [ 2334.163124][T26715] direct_splice_actor+0x80/0xa0 [ 2334.168143][T26715] splice_direct_to_actor+0x345/0x650 [ 2334.173495][T26715] do_splice_direct+0x106/0x190 [ 2334.178323][T26715] do_sendfile+0x63e/0xbb0 [ 2334.182728][T26715] __x64_sys_sendfile64+0x102/0x140 [ 2334.187907][T26715] do_syscall_64+0x44/0xa0 [ 2334.192304][T26715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2334.198190][T26715] [ 2334.200501][T26715] read to 0xffff88815e1102cc of 4 bytes by task 26715 on cpu 1: [ 2334.208116][T26715] filemap_write_and_wait_range+0x206/0x3c0 [ 2334.213988][T26715] __iomap_dio_rw+0x4ca/0x1010 [ 2334.218729][T26715] iomap_dio_rw+0x30/0x70 [ 2334.223057][T26715] ext4_file_write_iter+0xa59/0x11f0 [ 2334.228318][T26715] do_iter_readv_writev+0x2de/0x380 [ 2334.233492][T26715] do_iter_write+0x192/0x5c0 [ 2334.238058][T26715] vfs_iter_write+0x4c/0x70 [ 2334.242604][T26715] iter_file_splice_write+0x43a/0x790 [ 2334.247948][T26715] direct_splice_actor+0x80/0xa0 [ 2334.252858][T26715] splice_direct_to_actor+0x345/0x650 [ 2334.258203][T26715] do_splice_direct+0x106/0x190 [ 2334.263025][T26715] do_sendfile+0x63e/0xbb0 [ 2334.267418][T26715] __x64_sys_sendfile64+0x102/0x140 [ 2334.272592][T26715] do_syscall_64+0x44/0xa0 [ 2334.276991][T26715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2334.282866][T26715] [ 2334.285189][T26715] value changed: 0x0a000021 -> 0x04000021 [ 2334.290875][T26715] [ 2334.293179][T26715] Reported by Kernel Concurrency Sanitizer on: [ 2334.299302][T26715] CPU: 1 PID: 26715 Comm: syz-executor.2 Tainted: G W 5.15.0-rc3-syzkaller #0 [ 2334.309426][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.319458][T26715] ================================================================== 19:08:37 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x4, @unused=[0x1fc000000, 0x1, 0x80000000, 0x2], @devid=r1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={r1, 0x8, 0x7}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r1, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000f00)={0x8, 0x0, {0x4, @struct={0x1}, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffff8000, 0xffff, 0x34, @struct={0x4, 0x1ff}, 0x3, 0x4, [0x1, 0x9, 0x101, 0x9, 0x77a9, 0x4]}, {0x100, @usage=0x8, r1, 0x400, 0xd7, 0x3, 0xdad0, 0xc19, 0x424, @struct={0x3, 0x26c8570f}, 0x4, 0x0, [0x2b, 0x6308, 0x29, 0x6, 0x7, 0xfff]}, {0x80000000, @usage=0x4, 0x0, 0x7da, 0xdc6, 0x6, 0x8, 0x80000001, 0x40, @struct={0x7, 0x6db0e37d}, 0x6, 0x80000001, [0x200, 0x1fffffffe000000, 0x1000, 0x4371, 0x7, 0x6]}, {0xffffffff00000001, 0x1, 0x5}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000003c0)={r1, 0xfffffffffffffffb, 0x5, 0x1}) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="400064c5e4e6aa40ea"]) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f00000018c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b\x198_\xce8!\x12\xbc\xd1}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14\x8c\xa2\x16\xdd[\xb0,q\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6d\x854>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xf6\x19\xe2\x92 \x99\fbqPg\x94\xd5\x18\xfe\x0e\x8f \x01~\x93\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\xa9\xe1\xcc\xe7m\x80\'\xf0\xa5\xed*\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x00\x00\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3\x91\x00\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x98Av\xa5\xb7oc\x99\xba\x97\xaa\x10\xcd\x11\x17\xc3p(\xa9#K(4\xd4\xf0\xe7\x9a\xd9i\xbfZj\xfa\x1fK\xbb\xee \xbb\xbe\x04\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\x14f%\x82\x82\x0f#\x12{c\xdf]QG`zV\xd7\x0f\xaej\xf1\x8b\x10+\xc1\xc6\xff7\x83Ye\xb3\x8b\xdb\xb8\x11\xe1\xef\x9c\v\xe6\xbci\xc9J\b\x93H/\x96\xc5\xb5\xc2TkWO\xd3\xe1\x0e\xe3\xd4\xaa/R\x87\x1f\x8e\x0f\x81j\xb3\x1e\xd6\xb5\x8f\x95\n\xc6Y\xd4\x86\xf8\xc8\x7f\xdc0\a3') syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000400)={0x783ff113, 0x0, 0x6b, 0x8, 0x0, "37c1bc2c7c06376ce78a8b1b0745f27d7a33d9"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x4, @unused=[0x1fc000000, 0x1, 0x80000000, 0x2], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x8, 0x7}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000f00)={0x8, 0x0, {0x4, @struct={0x1}, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffff8000, 0xffff, 0x34, @struct={0x4, 0x1ff}, 0x3, 0x4, [0x1, 0x9, 0x101, 0x9, 0x77a9, 0x4]}, {0x100, @usage=0x8, 0x0, 0x400, 0xd7, 0x3, 0xdad0, 0xc19, 0x424, @struct={0x3, 0x26c8570f}, 0x4, 0x0, [0x2b, 0x6308, 0x29, 0x6, 0x7, 0xfff]}, {0x80000000, @usage=0x4, 0x0, 0x7da, 0xdc6, 0x6, 0x8, 0x80000001, 0x40, @struct={0x7, 0x6db0e37d}, 0x6, 0x80000001, [0x200, 0x1fffffffe000000, 0x1000, 0x4371, 0x7, 0x6]}, {0xffffffff00000001, 0x1, 0x5}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000780)={0x11, 0x0, {0x8001, @usage=0x100000000, 0x0, 0x8001, 0x8, 0x100000000, 0x800, 0x4, 0x440, @struct={0x10001, 0x1}, 0x1ff, 0x2, [0x84, 0x0, 0x3, 0x9, 0xffffffffffffff7f, 0x3]}, {0x1000, @struct={0x0, 0xffff}, 0x0, 0xff, 0x2, 0xd6b9, 0x3, 0x0, 0x22, @usage=0x9, 0x4, 0x4, [0x7, 0x1000, 0x0, 0x1, 0x7059, 0x240000000]}, {0x200, @usage=0x9, 0x0, 0xcda, 0x7, 0x7ff, 0x0, 0x2, 0x401, @usage=0x2, 0x4, 0x7fff, [0xffffffffffffffff, 0x6, 0x4, 0x1, 0x9, 0x8]}, {0x9, 0xfffffffffffffbae, 0x80000001}}) 19:08:37 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603150000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:37 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x17, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:37 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) gettid() r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 19:08:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:37 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() tkill(r0, 0x7) rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 19:08:37 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603160000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000080000005c00b09bedd8b8280a521912"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r3, 0x0, r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x20, 0x8, @local}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000003c0)={0x84, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x54}, @ra, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x4, [0xffff, 0x40, 0x4, 0x8001, 0x13dc, 0x7]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}, 0x68) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffb, 0x85, 0x7, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/74, 0x4a}]}, &(0x7f0000000100)="5555cc80256cf3aac5d88ba609cfc6ed794aac63fb4da27c5b8edcbb7e764f3f017f63beb979001b70c1039849a5fa1b263eac939d29c08f900cbecdb4159f6caf4692d81133d0c0e7aa781663babc663e8da21dcb1958a5febfccfd7567222f6f342d2b4bfddca78405e0568934bd757581a9dc36449a8e6a7de4cb2b4b9cb82708ee33ce", &(0x7f0000000240)=""/245, 0x9, 0x10, 0x2, &(0x7f00000001c0)}) 19:08:37 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603170000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2334.880525][T26764] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:08:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x24044151, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) recvfrom$inet(r5, &(0x7f0000000100)=""/146, 0x92, 0x2000, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) 19:08:37 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086031e0000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:37 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603210000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:37 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffd, 0x52, 0x3f, @buffer={0x0, 0xee, &(0x7f0000000040)=""/238}, &(0x7f0000000140)="8fe9319db4a68ffb94c601f32bc9369e64fdd257e91025adcb5dc7810ec8859eed2873cf16e0b3522d9367a369bce828f3902e29dd2e2f7e06c14a34e4bdfd6c75f7ebab069ec815d795b80d57ceabc13ec0", &(0x7f00000002c0)=""/224, 0x9, 0x5, 0x0, &(0x7f00000001c0)}) fallocate(0xffffffffffffffff, 0x100000011, 0x8204, 0xfffb) 19:08:37 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = clone3(&(0x7f0000000380)={0x480, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), {0x34}, &(0x7f0000000180)=""/201, 0xc9, &(0x7f0000000280)=""/144, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) wait4(r0, &(0x7f0000000400), 0x2, &(0x7f0000000440)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$dupfd(r3, 0x0, r3) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = gettid() tkill(r4, 0xb) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)=r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x4000000000010046) 19:08:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x600) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) r2 = pidfd_open(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e26, @multicast2}}, 0x0, 0x0, 0x1a, 0x0, "f0f83c34a698a915f717e1b2b940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb778f8cf34eee749376987c55f00"}, 0xd8) io_submit(0x0, 0x4, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="b5970c2b40062f94195939995cbea01a8391772ccf8372e68d46e5ddec5575dcfa5f469738cb5c79c35d89ecab86caef5b5e8dc28c990ac01fde542ba7", 0x3d, 0x50d}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xb0ac, r1, &(0x7f00000001c0)="35a0dcf135d938c00d201df3d7624f295702c36ecd8cadfb12525b24aecf343327b34bd71109494e56a724a7a0a7105d4804e3af5822332e164919bfda65492753e3630ac1fe6407798cb934b1e166843b4c5248f6eb6300c939c2676d2ec121dc828caff739df60a5da6e612c18249bb6b1d306eb06c4c88d4066f69ebace34b270e1b1b5dc4eb7e5b749c5bddb26e501fefc4c875935217c687f4de1f87dc58cb8848bf1e7b2daf921e4984a6c538183805015e37d3d8fa7aa3c8533c6991f960889e963f59dd82c1d869541", 0xcd, 0x1ff, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f00000003c0)="914a4a8616c0f175f629681075d4a334bad2ff48010a9b1d5b705dc83ea126ec6b942e6148d47f2fbf8ffad4b928130446fac9d199b0474cc5bb56c93c9fa6638b4ef543bbb8402d9a76a37ae88602f900b43b998fb6d85033a5aaba16aa47adfa86e78a44f9b45ef9ae39e02d2def5c0494db46f691fd56d202365b08d47eaa919670023820f3ec8bcedfd7059686922b1b90ca3534070fb07e475fbfcca31f318ed9695821922d83a4c9d65c1ffc1e71b424c66eed12f1ff1f10f2584ce9dc149a02b49ac90fc8af4a981b21ceafa1d6c98061898bd6800a9955cffb1c0fb0ebd611f501d4036e", 0xe8, 0x2, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x7, r2, &(0x7f00000004c0)="4f6287547f40849efdd751908ae8231ea3254463d7c1b0138fbf6a061e6e994efd98b187894da730a19110dd88bba64ef5d4f560c1780ee7c238a62514b0954ead3efa75e75c5cecfcba496894cea35688364729ad9ee215959d4273913ab4c0e4d5a693d3e6f9ed4d4ae33366e3049ef8556b235eaf326e5a30a35960cba329eb6bcafd95182d2dadba2e32d22bee123a18b667d3b1767608e563fa96d800bd3c849cef", 0xa4, 0x36, 0x0, 0x0, r4}]) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffffffffcbe) clone(0xc2e4980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="0073121b3377a1112a9ce1ec68598a50ab51e45710b9748f557c57d099228d870008a60f411321391bfcc53e7d31d5862c4b2c7cc3858919e58d265d904e30baf2b9a6f39622d2c4029c725ecdb353a8bbaa58ed1cffffdd7bfaf8c32e01ec7e95fa3fc0b514d4f40e34a5134f040ac42679b60306d42d71b7aebcc98d9ac2e2316beb0f109a8194e6bd"]) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x4c) 19:08:37 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x18, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:38 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="33d532605b56d4a50e4d21980480083b5d92402d43fb4b0b95a7116f0e4188f27046141e44070000000000000000"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) gettid() creat(&(0x7f0000000000)='./file0\x00', 0x0) lseek(r0, 0x3, 0x3) 19:08:38 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603250000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x7, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3ff, @mcast1, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000400)=0x673622eb, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x100007, 0xc2080) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x8000000, @remote, 0x400089}, 0x1c) r3 = socket(0x11, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x100000000, 0x1, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x2000, 0x4) accept(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) setsockopt(r3, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(r3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x3ff, 0x0, 0x3, 0x0, 0x3f, 0x6}, &(0x7f0000000180)=0x20) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa", 0x26, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 19:08:38 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x19, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:38 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603640000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:38 executing program 4: r0 = gettid() tkill(r0, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x40, 0x0, 0x2, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x3f}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xff43, 0x2) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x3f) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1ff]}, 0x8) 19:08:38 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x1a, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:38 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603b90200004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:38 executing program 4: set_mempolicy(0x4003, &(0x7f0000000040)=0xfc4d, 0x6) set_mempolicy(0x0, &(0x7f0000000000)=0x3, 0xf6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) 19:08:38 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x20000000, 0x3, 0x7}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:38 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603000300004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:38 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x1b, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x111602, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='gVS'], 0x10) syz_io_uring_setup(0x2de3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:08:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xa00) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:38 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='@']) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)={0x0, 0xfb, 0x49, 0x0, 0x6, "25a7b8f03b0c1ba4c633718bd0b3ad61", "ba4ca349c8450b61657233e731660cdadff05af69ca9e685f8af4b2e242654edf2d8b489358cf91ccbe105ec1cbc01b1dc29e5ed"}, 0x49, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:38 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603002c00004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000140)='!%@+$\'@&[\x00', &(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='.&\x00', &(0x7f0000000300)='/\x00'], &(0x7f0000000400)=[&(0x7f0000000380)='):&}&[\x00', &(0x7f00000003c0)='\xf6*{.\x00'], 0x800) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47ffffe}], 0x1, 0x400fa7f, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 19:08:39 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x1c, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2336.683127][T26891] validate_nla: 40 callbacks suppressed [ 2336.683135][T26891] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:39 executing program 4: r0 = syz_io_uring_setup(0x495a, &(0x7f0000000040), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x62d6, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) [ 2336.746876][T26897] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2336.808966][T26897] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:39 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x1d, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:39 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603004900004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2336.972081][T26909] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2337.009898][T26909] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2337.066731][T26912] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000280)=""/4096) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {r6, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {r6, r8}, {}, {r6}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r6}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {r7, r8}, {}, {r6}, {r6, r8}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {0x0, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r6}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {}, {r6}, {0x0, r8}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000042780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043780)={0xffffffffffff8ef1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r8}, {0x0, r9}], 0x0, "ff76425c7f2069"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001280)={r8, 0x0, "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", "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"}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x7fff, 0xc51c, 0x15}) sendfile(r0, r1, 0x0, 0x800000080004112) 19:08:39 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x1e, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:39 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)={0x0, 0x8b5, 0x4}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x48, 0x3, 0x100, 0x57, @mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x20, 0x10, 0x9, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@private2, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x21c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x28}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xae}, 0x1, 0x0, 0x0, 0x40000}, 0x6008800) waitid(0x1, r0, &(0x7f0000000140), 0x2, &(0x7f00000001c0)) 19:08:39 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603005f00004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 2337.193082][T26925] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2337.208155][ C0] sd 0:0:1:0: tag#6550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2337.218140][ C0] sd 0:0:1:0: tag#6550 CDB: opcode=0xe5 (vendor) [ 2337.224444][ C0] sd 0:0:1:0: tag#6550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2337.233469][ C0] sd 0:0:1:0: tag#6550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2337.242509][ C0] sd 0:0:1:0: tag#6550 CDB[20]: ba [ 2337.269266][T26932] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2337.298605][T26934] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xc00) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2337.446503][ C0] sd 0:0:1:0: tag#6552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2337.456600][ C0] sd 0:0:1:0: tag#6552 CDB: opcode=0xe5 (vendor) [ 2337.463062][ C0] sd 0:0:1:0: tag#6552 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2337.472259][ C0] sd 0:0:1:0: tag#6552 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2337.481727][ C0] sd 0:0:1:0: tag#6552 CDB[20]: ba 19:08:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "f0f83c34a698a915f717e1b2b9dbf4f2a8a1cd2d9c0bed61862ea2c81940ae3b3bf8a543103e9e048ac63e083fe321be593c5e00bdbb8f54e916ac653ed03758abfc0cb72a2524eaeee749376987c55f"}, 0xd8) read(r1, &(0x7f0000000080)=""/43, 0x2b) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=ANY=[]) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000200)={0x38, 0x6, 0x44, 0x7fffffff, 0x5, 0x7fffffff, 0x76, 0x0, 0x4, 0x5}, 0x0) 19:08:41 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff060086030ec000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000280)=""/4096) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {r6, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {r6, r8}, {}, {r6}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r6}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {r7, r8}, {}, {r6}, {r6, r8}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {0x0, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r6}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {}, {r6}, {0x0, r8}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000042780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043780)={0xffffffffffff8ef1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r8}, {0x0, r9}], 0x0, "ff76425c7f2069"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001280)={r8, 0x0, "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", "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"}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x7fff, 0xc51c, 0x15}) sendfile(r0, r1, 0x0, 0x800000080004112) 19:08:41 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x21, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:41 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3b, &(0x7f0000000040)) wait4(r0, 0x0, 0x4, &(0x7f0000000140)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) clone(0x100480, &(0x7f0000000200)="744edf4f506ac59ae6d39b3fdd709dbd43c7f98b652ac7c3d007ec851323e46bd492845ce00182c4eddc143e168c1d8b7265ec43e341842d6129c4e94049be17351a7aa2bfb5c2d46dbb7914580f316d3174ec048c3df87badeb1c2b4dfbc73a76cddf89f2102bb0e4f11d40324580e7d1121128d214ff596eb13c134976bee844060d7f5e17776f2296a9a4cc40cd23e4bb31a67990203d49fde340638ae2ef405c8975e39b24719edd627ac2fc1032786f60d3da9400d7eaf2a0ac53be8f8921a2416e56a2a76a3d0f542e18b710ae41cc143b650aa801d320f6550088b28f87aa24a089eb7266fc066ff6e13c505b1ecd9aed", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000300)="692529f5ea7c1f762feaba7175aa4d1f9eb453c6ecb9160b8681e43d574dc9a1f3a2e0aaaa47c795442f1517db1f98732495c418104796d141203a0a0c0c76aa32ef561fb3abe0a868e18fc080f8e1cedee01ed61e67af6c63715fe6d149eb593d1c4713daf176e21cb37b6a5480a9ef6117d995eca16d0d76be1bc87d885e36d23fe4c9381c7d7887c3c15d08f8f2621bfa06440d6fada021483a67ed18a21ef6c2114e5083262e0bd96b6ddcc37ef40ba66969c53d37eb97ff96a778006fb054f568f9ba7b40491dc6d8f9a59dc3") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xe00) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) [ 2339.577059][ C0] sd 0:0:1:0: tag#6555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2339.587001][ C0] sd 0:0:1:0: tag#6555 CDB: opcode=0xe5 (vendor) [ 2339.593324][ C0] sd 0:0:1:0: tag#6555 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2339.602347][ C0] sd 0:0:1:0: tag#6555 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2339.611369][ C0] sd 0:0:1:0: tag#6555 CDB[20]: ba [ 2339.642625][T26973] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:08:42 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="5211563df1764c65432050dae26156270c3c551efca56d2c42f96e3041afdceac000ddee000000000000000000000000fffffffc00cbf633b3c9dd541d2f8734c52b35a074426750a8000000000000000000000000a2fc5c2cfae782a623fb7deee034"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603f2ffff7f4500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:42 executing program 4: syslog(0x3, &(0x7f0000000100)=""/25, 0x19) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, 0x0, 0x20000000) 19:08:42 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="04"]) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) creat(&(0x7f0000000000)='./file0\x00', 0x0) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603f8ffff7f4500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x22, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603f9ffff7f4500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000000900003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x23, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:42 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010006) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010200004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x1200) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x24, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:42 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010300004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:43 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010400004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:45 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 19:08:45 executing program 4: syslog(0x3, &(0x7f0000000100)=""/25, 0x19) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, 0x0, 0x20000000) 19:08:45 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x25, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:08:45 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010500004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:08:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x1400) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 19:08:45 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x8, 0x6f9, 0x858d, 0xffffffffffffff81}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x15c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x697}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfffc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x130}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x100, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf6fa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5b4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ptrace$setop