\xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 285.459395] 9pnet: Insufficient options for proto=fd [ 285.566298] 9pnet: Insufficient options for proto=fd 11:09:24 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) ptrace$peekuser(0x3, r1, 0x4) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@null=' \x00', 0xe, 'rose0\x00'}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$KDDISABIO(r7, 0x4b37) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r9 = fcntl$dupfd(r4, 0x0, r8) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r4}}) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) 11:09:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000080)) 11:09:24 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) ptrace$peekuser(0x3, r1, 0x4) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:24 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:24 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:24 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:25 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:25 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)="9c5ee564abed542e18ea04cebf033ba6878d44b2875f615ffb0462be8ff1b5528106196d71165fd98607bebfa366f4c7c92a", 0x32}, {&(0x7f0000000200)="6742bc4c065104d3f21ff266e7bbf19dc1bed8c3cd2a75", 0x17}, {&(0x7f0000000240)="8386ff9c45f778d6e8271f818d67f29fc9e934a72e9ae6798ad4825dbf16c197938d5a7ba77d818ba544a6f6634ce4c7e7f4210962e7aaf7c9185e1656e78962a9e46b5f79a36e79d00fbb0a29808a0c0ae905c6e6bc7f603971c6580cbb792239ce471cbe60806c75e6", 0x6a}], 0x3, 0x43) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) alarm(0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7fffffff, 0xd5}, &(0x7f0000000080)=0x20) 11:09:25 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/111, 0x6f}) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:25 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:25 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:25 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xc0e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4000003, 0xc0e) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x248481, 0x0) ioctl(r1, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:25 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:26 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:26 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:26 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:26 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:26 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:26 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:26 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:27 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000037c0)={0x1, [0x0]}, &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003a40)={r2, @in={{0x2, 0x4e23, @local}}, 0xfffffffffffffffd, 0x7fff, 0x1, 0xea6b, 0x402}, &(0x7f0000003840)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x55, "d9163c214fde588c45e329f6e9a4c5393431654f546aca8ae65963d44a073e86ad9aa85a576f24b62da81625527d2168fe2ce3f3081cc9b4dff7d8a33b646d46f44895f538428ba952fb44a5fa96bd458b5d7efa63"}, &(0x7f0000000100)=0x5d) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:27 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:27 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") signalfd(r1, &(0x7f0000000080)={0x8001}, 0x8) 11:09:27 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), 0xb) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:27 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:27 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xf1b3, 0x20300) accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x41000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x10002, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @bcast, @bcast]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x2, 0x0) accept$ax25(r3, &(0x7f0000000380)={{0x3, @rose}, [@bcast, @rose, @bcast, @rose, @null, @bcast, @bcast, @default]}, &(0x7f0000000400)=0x48) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl(r1, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)="7c8c48884ae8eaad7e0dc910c44a78edc7384aaf9ad932e25f8be82a62aca77221239354f884448164fde5a4325518d4c7145b56dcacfbdbc1ea3767d909e522fdd9a664cb9f0583112802ee543e35602621a37737f03350f4b063fed9e6fe0713f2ba058432bc45c77825aa68344938401db96a98288a7babd3ebc2aed3b684de4a1c1b6b565be92fbe9cd243dfc49d28e745d8c83018290b59caa7f4976d3e72d59c368e72c5a5a5b85c541dfcf60c7a248a514de94592b7ecac989429692169bbc0d68e5262e4ca665271b3e35596d9ad7cd916f3d1c7583e34af97496bd8e5b8a264569e91a4afd50a65b5a08460") 11:09:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 5: mkdir(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), 0xb) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:28 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) r3 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r3, 0xee00, 0xee01]) r4 = getgid() r5 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r5, 0xee00, 0xee01]) r6 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r6, 0xee00, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x2}, [{0x2, 0x6, r2}], {0x4, 0xf82750b7fddcfce7}, [{0x8, 0x4, r3}, {0x8, 0x1, r4}, {0x8, 0x7, r5}, {0x8, 0xd, r6}], {0x10, 0x2}}, 0x4c, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r7, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:28 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:28 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 5: mkdir(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl(r0, 0x0, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:28 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:28 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="377e6687019ac9b0e10010af78f534646e6f3d0000002a980857640000b864b26f282befcc589f32dfa04e28be5d58376e36260cc08725d46da8ab55a8f28de8c77ae919df9ca1fc97fdf22e995d7e2b2c39144dc6cd3e11ce67e0d1efc2820edeec7323aca39ab76eaf21ee5523fd9ba5bf1df64b7fb42a793befdf54a478761eced1457ffb33b7c5b58cb2df9bee2d37716c5e2da3b7", @ANYRESHEX, @ANYBLOB=',\x00']) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x22000, 0x0) 11:09:28 executing program 5: mkdir(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 290.123365] 9pnet: Insufficient options for proto=fd [ 290.146219] 9pnet: Insufficient options for proto=fd 11:09:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") fdatasync(r0) 11:09:29 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), 0xb) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:29 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:29 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x329180, 0x0) 11:09:29 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:29 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:29 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x80800) ioctl(r0, 0x8000000000009375, &(0x7f0000000140)="01000000000000001801000003349900000024009ceb00002f") 11:09:29 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x0, 0x4, "0378d21780f459b974cff42bd6d986b87d8406fad6a6aa442ff9273d6e883224", 0xe74e, 0x5, 0x4, 0x6, 0x80, 0x20, 0x40, 0x1ff, [0x8001, 0x1, 0x4f4be2, 0xfffffffffffffffa]}) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r4, &(0x7f0000000100)={r0, r0, 0x1}) 11:09:30 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:30 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl(r0, 0x8000000000009373, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:30 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:30 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:30 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8052324dd0e9ffd7fab739f045fd16d18fe8fcfaa1b5da59a7e17c2f43924602f655196cd28a1c0ebf", 0x29, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="ace3a6712f3b09fed33acb6d4866dd147673b315ec044957120f777314273f622c24e484feb003dabbd4cff2ef064b046f2078e5fbf911bba094cb9328cfdab96ec7aee24b75b84d977409d7bff852b9d008c25109845d4a00727dc6740eeaf79c17aef6beec488de92510ca0fb49bc381021e267acdb8f554b1c400105227c8971bab2996ac4d59fc4182b6df4bee41b2b7b3a771e430de60", 0x99, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000002500)='keyring\x00', &(0x7f0000003680)={'syz', 0x2}, &(0x7f0000002580), 0x0, r2) keyctl$instantiate_iov(0x14, r2, &(0x7f00000024c0)=[{&(0x7f0000001300)="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", 0x137b}, {0x0}, {&(0x7f0000003900)="2b0b8c4f8b5ea7828cfbfc345cf9e50a96f07b5f73343173bd1002730ca539a6bdb3ccaff6a76525ba2f8167ddbf95fa2c223d017fa8d06e0d97bc23fc7f847ca265e64a038c2e69c892cd6e049c38c3fa15bdbd595be7fa45823bd2372697a2031379d46b3d69391372d66a9a308697051bf7b6ebdde03562ffa528dd36d82643186fe4798b979914beb35e087a12a342bb73f1c1b0009a7ee913c28b0b9182af1f4b5bb2c52edc444117bd405e2a43a5de5b10a6d0ebdb9e01b2ae7e8be0018530192180d6d89c90801f00f84b8780333beabcbaa6eb92cefb2ad0d8", 0xdd}, {&(0x7f00000023c0)="851ab701d600ea8b6c96a40f0cc1ebf0297f75bd8b07988b08ec4cfaea7a9fed45a9e8739d6ea62406e939745a6ce2f87d209f6dfc84e9b101301b2b3ce44c7db2596612d3b2d5a2c5481809d0a07db4224f4ea128b97b82e6e0bbc9df6d0faf5e797aac8e7d1b2a334b09c4e0d7cf0776f3159b5a2fcd68cc9d73805af6b74aa42417f90386c4d72bab24ff21dc7f7dce1af9edda16a3eaf2722a807302170f19d0a2cfec92a6cf6a792744389fcf83f2db18294074ffcfc2d6b8110a3b3e2cb39eaae89e909f84a1be889b21e3d030eb46d3bde6b9e3963966be7b415e8d6906aa34ded8326bba4a5f6b03406d9d8410445dc0", 0xf4}], 0x4, r3) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000740)=[{&(0x7f00000001c0)="507163c5465ef9e429c06aa7b2b465ad4dd711aeb0a33625b2f25d7ccd255aecae4a12a5264b474bedbc00cf90d0bd2ffa7a025f10ab1e3e20e23779128258c8a32944fa5f9343f73d98cd13de138a08f56ef2d881f44713d174740bcfbcc8ab3fd9cff891296a560d922d32c68b968516181204431eee8f377ad6df6487e6882614a47cb32e03ade2f85f40de362344f17645bdd4eacd99ae4a1a6abf40e4a747722a0c4ccf6e8d237c914ea894cdac7c2850597d496a356afeae73094f40e06ddb730c3e72599238551a2e8c8a52b5bdaeeabef3511e627ba118f653db932b70e544019107bdcaaa792d9f", 0xec}, {&(0x7f00000002c0)="084b76962521c9e0a850f863fa2ed79df3e3fa89a7bda9323d061185c80555fa74998db07d3099fb045be5122ddd7baf9c0e29c6d48000bd7f30cb2152225ee2e8b24cedad4ebab95c431ed36077b9c7b03c9ad189f1e086bddeb15c7d030ff8ba61ec5a2479a0a172d8deb0b93e24b8abd43af88d75e9a7367eb933544f6d785ca2a6121195d60753c3ebd8392f1eba3f677bb679c59951c0c8cf468a003586472ea86fa7c207cca505622d77ded20186137e864e1c219c7b89dca74f028a5a69bfae3080a674ff963ac8e41c93958dc364921dbf8ca8d95f3525bfc3e1926b403e28545e3750452ef6cc283d9103be", 0xf0}, {&(0x7f00000003c0)="1e25cc4bb245316ab19c211983b85242f07ac51f6446df664ef9c575f8bbd0532f8580b7a3b8a39d2e02d1ac53cfc96d1f01f69d948184737bd7859767455392c2dbdfc9b1f692da0e93800fc97f850d01c18bbaf0027d479db13b1e58839e8da5958fcaeafdef8920c9b691259a3a58a89185400987d7ba6c05108afb482cc5b2a0827284ca334385626da4d20683e5e8a930ab0f5928dc360179a95a27a7b54c385ddc22f50fc3ba680aec4db5ba69dac724e3d871a30048580d58fd2a7173a2cf3b05ff093ed3760c8a68daf7f40657084363356ef0fde8770ccb3599438ea7", 0xe1}, {&(0x7f00000004c0)="ca0d2967fbaba82a1aa3db769761de7a", 0x10}, {&(0x7f0000000500)="0b05234ac81a9154e3a5078d3bfd2826550d0674b548af62f79ff31099e461904cd470dd05c0ca2a7c4e3d4934ad87c370b4f78d932175e421acaccfeaec0eb652103852118dc0ab3d795e745030cdd79ea10861d74c25f43e50b52dfe2c2c97abd1626e143a3a65ca0f93c949849a7caae618f52b27a4fa34b3c65e70723af552844ea153850994c300653ab77d10995c82725a0aff94d5dc42e3397e77e0af457162de1c41e0304aba69aaee2b40254a2f595f5c910c7395629af317396513e2243221d19d8a4f8cf3cca7aba1b623007e4c6705135e16cb97", 0xda}, {&(0x7f0000000600)="78d8e7ee8cb5314314af32ed93ccf2ea99b427245237e48427d840559f3d98b1638ef801a12ac96269821e92f05cfb2f3b00df21960559d10f4939c38b670f59e0038a54ccebd8763b5c2ee846bb15ac156e3d389bd7fb376f7f795bfcf5b149cae84fa78d488c1a56850802e13854a94a21347515f2cabd51cce9ff9bb1aeb97e279900dc320c1fc2fe0713631c00df435d964948f27bf2cc8d7c5545d5b22d8f6400cba3ac8deee7f8f82aba337d022816d8245555fbf4234f76b4c5f703ce39018314330709c250532697b821adea7409babed8f171a79cc6ee31", 0xdc}, {&(0x7f0000000700)="9af0a888c3fb6a77b8e02f99182af264dd1428ef34acdac3476cd7e2f71d780cb13278", 0x23}], 0x7, r3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0xc000000, &(0x7f00000000c0)=0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r4, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:30 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 11:09:30 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x84800) fcntl$getown(r1, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101200, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x90) 11:09:30 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 11:09:30 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:31 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x514) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:31 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000000c0)={0x9, &(0x7f0000000080)="66e5089e0c022c9760"}) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:31 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:31 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:31 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:31 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 11:09:32 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x34d581, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x2, 0x1, 0x4000000000, 0xd3afd56, 'syz1\x00', 0x8}) 11:09:32 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 11:09:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:32 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 11:09:32 executing program 3: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/udp6\x00') write$capi20_data(r2, &(0x7f00000000c0)={{0x10, 0xc2, 0x8c, 0x0, 0xffff, 0x7}, 0x1000, "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"}, 0x1012) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") 11:09:32 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/\x01\x00\r\xd4\xe5\xafp1\xc7\xb9\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x79cfbe5c74a5d0da, 0x16, 0x8, "9036e8fbc2ba9f993c98353218f8a982146a3914cfb12a8f9a49669415f173193b8d6dfbcb0ab45faf602a7ee2cf9e83ad12237cc2ec67585df7dd0ba64d3381", "0ed39ca63e09c682549b27e711f0fe5f01ac37de2a0e8b237dab03d2ca57b0aadda6c215269afb4d8d318027f32904ba17f3fbb22d58ce6ccdf3f11ac559460c", "fe2a26c050e59f61a4cbefb62beb88984458dbbd4f33600371c54af27963731e", [0x1, 0x2]}) 11:09:32 executing program 3: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:32 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 3: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:33 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:33 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x181800, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d17ae847d29f777dba103c7593b", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0xfc89, 0x41000) write$eventfd(r1, &(0x7f0000000180)=0x7, 0x8) 11:09:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:33 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:33 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 295.344846] 9pnet: Could not find request transport: ®„})÷wÛ¡ÇY;0x0000000000000006 [ 295.410178] 9pnet: Could not find request transport: ®„})÷wÛ¡ÇY;0x0000000000000006 11:09:34 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000140)={0xfffffffffffffffa, 0x0, 0x300c, 0x9, 0x7, 0x1e6e, 0x5, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000000009375, &(0x7f0000000040)="01000000000000001801000003349900000024009ceb00002f") write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x100000000}, 0xb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x4600, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x25) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") close(r2) 11:09:34 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:34 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:34 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:34 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:35 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:35 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:35 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:36 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:36 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f3d0000018f5615212baa238883e6000000", @ANYRESHEX, @ANYBLOB="2c77666257b43486b03573fd646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:37 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:37 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:37 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:38 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:38 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:38 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:41 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:41 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:41 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:41 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 5 (fault-call:8 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 3 (fault-call:6 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.076555] FAULT_INJECTION: forcing a failure. [ 305.076555] name failslab, interval 1, probability 0, space 0, times 0 [ 305.092179] FAULT_INJECTION: forcing a failure. [ 305.092179] name failslab, interval 1, probability 0, space 0, times 0 [ 305.131351] CPU: 1 PID: 13357 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 305.138507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.147869] Call Trace: [ 305.150477] dump_stack+0x138/0x197 [ 305.154147] should_fail.cold+0x10f/0x159 [ 305.158309] should_failslab+0xdb/0x130 [ 305.162299] kmem_cache_alloc_node+0x287/0x780 [ 305.166893] ? get_pid_task+0x98/0x140 [ 305.170792] copy_process.part.0+0x17d5/0x6a00 [ 305.175383] ? save_trace+0x290/0x290 [ 305.179183] ? proc_fail_nth_write+0x7d/0x180 [ 305.183678] ? proc_cwd_link+0x1b0/0x1b0 [ 305.187740] ? __f_unlock_pos+0x19/0x20 [ 305.191717] ? find_held_lock+0x35/0x130 [ 305.195782] ? __cleanup_sighand+0x50/0x50 [ 305.200021] ? lock_downgrade+0x6e0/0x6e0 [ 305.204177] _do_fork+0x19e/0xce0 [ 305.207638] ? fork_idle+0x280/0x280 [ 305.211369] ? fput+0xd4/0x150 [ 305.214565] ? SyS_write+0x15e/0x230 [ 305.218281] SyS_clone+0x37/0x50 [ 305.221648] ? sys_vfork+0x30/0x30 [ 305.225193] do_syscall_64+0x1e8/0x640 [ 305.229078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.233926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.239111] RIP: 0033:0x459879 [ 305.242296] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.250005] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 305.257273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.264542] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.271808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 11:09:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.279076] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 305.295270] CPU: 1 PID: 13358 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 305.302398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.311756] Call Trace: [ 305.314357] dump_stack+0x138/0x197 [ 305.318003] should_fail.cold+0x10f/0x159 [ 305.322167] should_failslab+0xdb/0x130 [ 305.326151] kmem_cache_alloc_node+0x287/0x780 [ 305.330742] ? get_pid_task+0x98/0x140 [ 305.334636] copy_process.part.0+0x17d5/0x6a00 [ 305.339226] ? save_trace+0x290/0x290 [ 305.343027] ? proc_fail_nth_write+0x7d/0x180 [ 305.347523] ? proc_cwd_link+0x1b0/0x1b0 [ 305.351588] ? __f_unlock_pos+0x19/0x20 [ 305.355566] ? find_held_lock+0x35/0x130 [ 305.359638] ? __cleanup_sighand+0x50/0x50 [ 305.363876] ? lock_downgrade+0x6e0/0x6e0 [ 305.368036] _do_fork+0x19e/0xce0 [ 305.371494] ? fork_idle+0x280/0x280 [ 305.375211] ? fput+0xd4/0x150 [ 305.378407] ? SyS_write+0x15e/0x230 [ 305.382129] SyS_clone+0x37/0x50 [ 305.385493] ? sys_vfork+0x30/0x30 [ 305.389036] do_syscall_64+0x1e8/0x640 [ 305.392925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.397774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.402966] RIP: 0033:0x459879 [ 305.406155] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.413861] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 305.421124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.428480] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.435746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 305.443101] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:44 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:44 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:44 executing program 5 (fault-call:8 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:44 executing program 3 (fault-call:6 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:44 executing program 1 (fault-call:5 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.770875] FAULT_INJECTION: forcing a failure. [ 305.770875] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.785571] FAULT_INJECTION: forcing a failure. [ 305.785571] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.836319] CPU: 1 PID: 13376 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 305.843476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.852855] Call Trace: [ 305.855451] dump_stack+0x138/0x197 [ 305.859081] should_fail.cold+0x10f/0x159 [ 305.863226] ? __might_sleep+0x93/0xb0 [ 305.867112] __alloc_pages_nodemask+0x1d6/0x7a0 [ 305.871786] ? __alloc_pages_slowpath+0x2930/0x2930 [ 305.876800] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.881824] copy_process.part.0+0x26a/0x6a00 [ 305.886316] ? save_trace+0x290/0x290 [ 305.890111] ? proc_fail_nth_write+0x7d/0x180 [ 305.894607] ? proc_cwd_link+0x1b0/0x1b0 [ 305.898661] ? __f_unlock_pos+0x19/0x20 [ 305.902627] ? find_held_lock+0x35/0x130 [ 305.906682] ? __cleanup_sighand+0x50/0x50 [ 305.910904] ? lock_downgrade+0x6e0/0x6e0 [ 305.915045] _do_fork+0x19e/0xce0 [ 305.918507] ? fork_idle+0x280/0x280 [ 305.922215] ? fput+0xd4/0x150 [ 305.925398] ? SyS_write+0x15e/0x230 [ 305.929105] SyS_clone+0x37/0x50 [ 305.932463] ? sys_vfork+0x30/0x30 [ 305.935998] do_syscall_64+0x1e8/0x640 [ 305.939880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.944721] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.949898] RIP: 0033:0x459879 [ 305.953075] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.960776] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 305.968032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.975289] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.982545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 305.989804] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 306.009868] CPU: 0 PID: 13378 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 306.017003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.026353] Call Trace: [ 306.028945] dump_stack+0x138/0x197 [ 306.032579] should_fail.cold+0x10f/0x159 [ 306.036726] ? __might_sleep+0x93/0xb0 [ 306.040621] __alloc_pages_nodemask+0x1d6/0x7a0 [ 306.045296] ? __alloc_pages_slowpath+0x2930/0x2930 [ 306.050316] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.055349] copy_process.part.0+0x26a/0x6a00 [ 306.059856] ? save_trace+0x290/0x290 [ 306.063671] ? proc_fail_nth_write+0x7d/0x180 [ 306.068179] ? proc_cwd_link+0x1b0/0x1b0 [ 306.072245] ? __f_unlock_pos+0x19/0x20 [ 306.076225] ? find_held_lock+0x35/0x130 [ 306.078450] FAULT_INJECTION: forcing a failure. 11:09:44 executing program 5 (fault-call:8 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.078450] name failslab, interval 1, probability 0, space 0, times 0 [ 306.080290] ? __cleanup_sighand+0x50/0x50 [ 306.080302] ? lock_downgrade+0x6e0/0x6e0 [ 306.080316] _do_fork+0x19e/0xce0 [ 306.080330] ? fork_idle+0x280/0x280 [ 306.080349] ? fput+0xd4/0x150 [ 306.110210] ? SyS_write+0x15e/0x230 [ 306.113928] SyS_clone+0x37/0x50 [ 306.117291] ? sys_vfork+0x30/0x30 [ 306.120834] do_syscall_64+0x1e8/0x640 [ 306.124714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.129582] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.134763] RIP: 0033:0x459879 [ 306.137947] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.145654] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 306.152918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.160181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.167447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 306.174712] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 306.187780] CPU: 1 PID: 13395 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 306.194911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.204267] Call Trace: [ 306.206859] dump_stack+0x138/0x197 [ 306.210498] should_fail.cold+0x10f/0x159 [ 306.214653] should_failslab+0xdb/0x130 [ 306.218635] kmem_cache_alloc+0x2d7/0x780 [ 306.222781] ? memset+0x32/0x40 [ 306.226061] __split_vma+0xc9/0x6d0 [ 306.229688] do_munmap+0xb09/0xd60 [ 306.233224] ? arch_get_unmapped_area+0x5f0/0x5f0 11:09:44 executing program 3 (fault-call:6 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.238063] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 306.242822] mmap_region+0x16f/0x1030 [ 306.246628] do_mmap+0x5b8/0xcd0 [ 306.249996] vm_mmap_pgoff+0x17a/0x1d0 [ 306.253885] ? vma_is_stack_for_current+0xa0/0xa0 [ 306.258727] ? __fget+0x237/0x370 [ 306.262185] SyS_mmap_pgoff+0x3ca/0x520 [ 306.266158] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 306.271088] ? do_syscall_64+0x53/0x640 [ 306.275059] ? align_vdso_addr+0x60/0x60 [ 306.279114] SyS_mmap+0x16/0x20 [ 306.282395] do_syscall_64+0x1e8/0x640 11:09:44 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 306.286279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.291125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.296308] RIP: 0033:0x459879 [ 306.299486] RSP: 002b:00007f307524dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 306.307191] RAX: ffffffffffffffda RBX: 00007f307524dc90 RCX: 0000000000459879 [ 306.314455] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 306.321720] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 306.328987] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f307524e6d4 [ 306.336249] R13: 00000000004c5d7b R14: 00000000004da810 R15: 0000000000000004 [ 306.430815] FAULT_INJECTION: forcing a failure. [ 306.430815] name failslab, interval 1, probability 0, space 0, times 0 [ 306.440839] FAULT_INJECTION: forcing a failure. [ 306.440839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.446719] CPU: 1 PID: 13406 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 306.461071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.470427] Call Trace: [ 306.473027] dump_stack+0x138/0x197 [ 306.476666] should_fail.cold+0x10f/0x159 [ 306.480825] should_failslab+0xdb/0x130 [ 306.484803] kmem_cache_alloc+0x2d7/0x780 [ 306.488937] ? creds_are_invalid+0x48/0x110 [ 306.493242] ? __validate_process_creds+0x14c/0x200 [ 306.498242] prepare_creds+0x3e/0x380 [ 306.502026] copy_creds+0x7b/0x4f0 [ 306.505568] ? lockdep_init_map+0x9/0x10 [ 306.509623] copy_process.part.0+0x868/0x6a00 [ 306.514115] ? save_trace+0x290/0x290 [ 306.517905] ? proc_fail_nth_write+0x7d/0x180 [ 306.522385] ? proc_cwd_link+0x1b0/0x1b0 [ 306.526427] ? __f_unlock_pos+0x19/0x20 [ 306.530389] ? __cleanup_sighand+0x50/0x50 [ 306.534608] ? lock_downgrade+0x6e0/0x6e0 [ 306.538741] _do_fork+0x19e/0xce0 [ 306.542179] ? fork_idle+0x280/0x280 [ 306.545878] ? fput+0xd4/0x150 [ 306.549052] ? SyS_write+0x15e/0x230 [ 306.552751] SyS_clone+0x37/0x50 [ 306.556097] ? sys_vfork+0x30/0x30 [ 306.559620] do_syscall_64+0x1e8/0x640 [ 306.563489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.568321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.573490] RIP: 0033:0x459879 [ 306.576659] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.584350] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 306.591604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.598856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.606119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 306.613384] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 306.620999] CPU: 0 PID: 13408 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 306.628124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.637515] Call Trace: [ 306.640110] dump_stack+0x138/0x197 [ 306.643746] should_fail.cold+0x10f/0x159 [ 306.647887] ? __might_sleep+0x93/0xb0 [ 306.651777] __alloc_pages_nodemask+0x1d6/0x7a0 [ 306.656460] ? __alloc_pages_slowpath+0x2930/0x2930 [ 306.661478] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.666507] copy_process.part.0+0x26a/0x6a00 [ 306.671013] ? save_trace+0x290/0x290 [ 306.674821] ? proc_fail_nth_write+0x7d/0x180 11:09:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.679319] ? proc_cwd_link+0x1b0/0x1b0 [ 306.683403] ? __f_unlock_pos+0x19/0x20 [ 306.687382] ? find_held_lock+0x35/0x130 [ 306.691454] ? __cleanup_sighand+0x50/0x50 [ 306.695695] ? lock_downgrade+0x6e0/0x6e0 [ 306.699848] _do_fork+0x19e/0xce0 [ 306.703312] ? fork_idle+0x280/0x280 [ 306.707030] ? fput+0xd4/0x150 [ 306.710223] ? SyS_write+0x15e/0x230 [ 306.713945] SyS_clone+0x37/0x50 [ 306.717309] ? sys_vfork+0x30/0x30 [ 306.720849] do_syscall_64+0x1e8/0x640 [ 306.724733] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:09:45 executing program 3 (fault-call:6 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:45 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:45 executing program 1 (fault-call:5 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.729584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.734771] RIP: 0033:0x459879 [ 306.737964] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.745671] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 306.752943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.760321] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.767591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 306.774863] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:45 executing program 5 (fault-call:8 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.873192] FAULT_INJECTION: forcing a failure. [ 306.873192] name failslab, interval 1, probability 0, space 0, times 0 [ 306.879339] FAULT_INJECTION: forcing a failure. [ 306.879339] name failslab, interval 1, probability 0, space 0, times 0 [ 306.886026] CPU: 1 PID: 13423 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 306.903084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.912431] Call Trace: [ 306.915018] dump_stack+0x138/0x197 [ 306.918642] should_fail.cold+0x10f/0x159 [ 306.922786] should_failslab+0xdb/0x130 [ 306.926752] kmem_cache_alloc+0x2d7/0x780 [ 306.930895] ? creds_are_invalid+0x48/0x110 [ 306.935211] ? __validate_process_creds+0x14c/0x200 [ 306.940217] prepare_creds+0x3e/0x380 [ 306.944015] copy_creds+0x7b/0x4f0 [ 306.947547] ? lockdep_init_map+0x9/0x10 [ 306.951612] copy_process.part.0+0x868/0x6a00 [ 306.956118] ? save_trace+0x290/0x290 [ 306.959923] ? proc_fail_nth_write+0x7d/0x180 [ 306.964415] ? proc_cwd_link+0x1b0/0x1b0 [ 306.968469] ? __f_unlock_pos+0x19/0x20 [ 306.972446] ? __cleanup_sighand+0x50/0x50 [ 306.976675] ? lock_downgrade+0x6e0/0x6e0 [ 306.980817] _do_fork+0x19e/0xce0 [ 306.984265] ? fork_idle+0x280/0x280 [ 306.987972] ? fput+0xd4/0x150 [ 306.991163] ? SyS_write+0x15e/0x230 [ 306.994889] SyS_clone+0x37/0x50 [ 306.998246] ? sys_vfork+0x30/0x30 [ 307.001793] do_syscall_64+0x1e8/0x640 [ 307.005699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.010536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.015716] RIP: 0033:0x459879 [ 307.018898] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.026603] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 307.033860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.041115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.048373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 307.055635] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 307.062951] CPU: 0 PID: 13424 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 307.070055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.079496] Call Trace: [ 307.082093] dump_stack+0x138/0x197 [ 307.085735] should_fail.cold+0x10f/0x159 [ 307.089893] should_failslab+0xdb/0x130 [ 307.093876] kmem_cache_alloc+0x2d7/0x780 [ 307.098035] mmap_region+0x602/0x1030 [ 307.101849] do_mmap+0x5b8/0xcd0 [ 307.105221] vm_mmap_pgoff+0x17a/0x1d0 [ 307.109115] ? vma_is_stack_for_current+0xa0/0xa0 [ 307.113958] ? __fget+0x237/0x370 [ 307.117428] SyS_mmap_pgoff+0x3ca/0x520 [ 307.121404] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 307.126335] ? do_syscall_64+0x53/0x640 [ 307.130313] ? align_vdso_addr+0x60/0x60 [ 307.134372] SyS_mmap+0x16/0x20 [ 307.137652] do_syscall_64+0x1e8/0x640 [ 307.141547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.146396] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.151581] RIP: 0033:0x459879 [ 307.154763] RSP: 002b:00007f307524dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.162469] RAX: ffffffffffffffda RBX: 00007f307524dc90 RCX: 0000000000459879 11:09:45 executing program 3 (fault-call:6 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.169734] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 307.176997] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 307.184265] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f307524e6d4 [ 307.191540] R13: 00000000004c5d7b R14: 00000000004da810 R15: 0000000000000004 11:09:45 executing program 1 (fault-call:5 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.242678] FAULT_INJECTION: forcing a failure. [ 307.242678] name failslab, interval 1, probability 0, space 0, times 0 [ 307.269997] CPU: 0 PID: 13430 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 307.277157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.286519] Call Trace: [ 307.289128] dump_stack+0x138/0x197 [ 307.292775] should_fail.cold+0x10f/0x159 [ 307.296935] should_failslab+0xdb/0x130 [ 307.300925] __kmalloc_track_caller+0x2ec/0x790 [ 307.305604] ? check_preemption_disabled+0x3c/0x250 [ 307.310625] ? prepare_creds+0x3e/0x380 [ 307.314605] ? selinux_cred_prepare+0x49/0xb0 [ 307.319101] kmemdup+0x27/0x60 [ 307.322305] selinux_cred_prepare+0x49/0xb0 [ 307.326636] security_prepare_creds+0x7d/0xb0 [ 307.331153] prepare_creds+0x2cf/0x380 [ 307.335044] copy_creds+0x7b/0x4f0 [ 307.337021] FAULT_INJECTION: forcing a failure. [ 307.337021] name failslab, interval 1, probability 0, space 0, times 0 [ 307.338585] ? lockdep_init_map+0x9/0x10 [ 307.338602] copy_process.part.0+0x868/0x6a00 [ 307.338619] ? save_trace+0x290/0x290 [ 307.338632] ? proc_fail_nth_write+0x7d/0x180 [ 307.338647] ? proc_cwd_link+0x1b0/0x1b0 [ 307.370684] ? __f_unlock_pos+0x19/0x20 [ 307.374673] ? __cleanup_sighand+0x50/0x50 [ 307.378904] ? lock_downgrade+0x6e0/0x6e0 [ 307.383052] _do_fork+0x19e/0xce0 [ 307.386505] ? fork_idle+0x280/0x280 [ 307.390226] ? fput+0xd4/0x150 11:09:45 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 307.393547] ? SyS_write+0x15e/0x230 [ 307.397273] SyS_clone+0x37/0x50 [ 307.400648] ? sys_vfork+0x30/0x30 [ 307.404183] do_syscall_64+0x1e8/0x640 [ 307.408070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.412927] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.418231] RIP: 0033:0x459879 [ 307.421415] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.429121] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 307.436384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.443648] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.450917] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 307.458182] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 307.465508] CPU: 1 PID: 13439 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 307.472619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.481967] Call Trace: [ 307.484561] dump_stack+0x138/0x197 [ 307.488213] should_fail.cold+0x10f/0x159 [ 307.492369] should_failslab+0xdb/0x130 [ 307.496345] __kmalloc_track_caller+0x2ec/0x790 [ 307.501020] ? check_preemption_disabled+0x3c/0x250 [ 307.506041] ? prepare_creds+0x3e/0x380 [ 307.510019] ? selinux_cred_prepare+0x49/0xb0 [ 307.514511] kmemdup+0x27/0x60 [ 307.517688] selinux_cred_prepare+0x49/0xb0 [ 307.522040] security_prepare_creds+0x7d/0xb0 [ 307.526520] prepare_creds+0x2cf/0x380 [ 307.530430] copy_creds+0x7b/0x4f0 [ 307.533957] ? lockdep_init_map+0x9/0x10 [ 307.538001] copy_process.part.0+0x868/0x6a00 [ 307.542480] ? save_trace+0x290/0x290 [ 307.546271] ? proc_fail_nth_write+0x7d/0x180 [ 307.550745] ? proc_cwd_link+0x1b0/0x1b0 [ 307.554786] ? __f_unlock_pos+0x19/0x20 [ 307.558744] ? __cleanup_sighand+0x50/0x50 [ 307.562959] ? lock_downgrade+0x6e0/0x6e0 [ 307.567090] _do_fork+0x19e/0xce0 [ 307.570541] ? fork_idle+0x280/0x280 [ 307.574257] ? fput+0xd4/0x150 [ 307.577429] ? SyS_write+0x15e/0x230 [ 307.581126] SyS_clone+0x37/0x50 [ 307.584471] ? sys_vfork+0x30/0x30 [ 307.587992] do_syscall_64+0x1e8/0x640 [ 307.591871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.596696] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.601877] RIP: 0033:0x459879 [ 307.605045] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.612731] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 307.619991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.627242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.634502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 11:09:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.641751] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:46 executing program 5 (fault-call:8 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:46 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:46 executing program 3 (fault-call:6 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.753954] FAULT_INJECTION: forcing a failure. [ 307.753954] name failslab, interval 1, probability 0, space 0, times 0 [ 307.812530] CPU: 1 PID: 13454 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 307.819680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.829035] Call Trace: [ 307.831635] dump_stack+0x138/0x197 [ 307.835277] should_fail.cold+0x10f/0x159 [ 307.839443] should_failslab+0xdb/0x130 [ 307.843439] kmem_cache_alloc_trace+0x2e9/0x790 [ 307.848117] ? pat_pagerange_is_ram+0x90/0xf0 [ 307.852711] ? __init_cache_modes+0x240/0x240 [ 307.857217] reserve_memtype+0x164/0x640 [ 307.861284] ? pat_init+0x420/0x420 [ 307.863020] FAULT_INJECTION: forcing a failure. [ 307.863020] name failslab, interval 1, probability 0, space 0, times 0 [ 307.864906] ? __init_cache_modes+0x240/0x240 [ 307.864922] reserve_pfn_range+0x11c/0x390 [ 307.864935] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 307.864946] ? trace_hardirqs_on+0x10/0x10 [ 307.864964] track_pfn_remap+0x15a/0x240 [ 307.898136] remap_pfn_range+0x1bc/0xaa0 [ 307.902204] ? lock_downgrade+0x6e0/0x6e0 [ 307.906365] ? region_intersects+0x30e/0x410 [ 307.910780] ? apply_to_page_range+0x6a0/0x6a0 [ 307.915359] ? io_free_memtype+0x30/0x30 [ 307.919527] mmap_mem+0x1e1/0x281 [ 307.922981] mmap_region+0x852/0x1030 [ 307.926785] do_mmap+0x5b8/0xcd0 [ 307.930156] vm_mmap_pgoff+0x17a/0x1d0 [ 307.934049] ? vma_is_stack_for_current+0xa0/0xa0 [ 307.938890] ? __fget+0x237/0x370 [ 307.942352] SyS_mmap_pgoff+0x3ca/0x520 [ 307.946326] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 307.951251] ? do_syscall_64+0x53/0x640 [ 307.955224] ? align_vdso_addr+0x60/0x60 [ 307.959279] SyS_mmap+0x16/0x20 [ 307.962555] do_syscall_64+0x1e8/0x640 [ 307.966442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.971288] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.976474] RIP: 0033:0x459879 [ 307.979657] RSP: 002b:00007f307524dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.987363] RAX: ffffffffffffffda RBX: 00007f307524dc90 RCX: 0000000000459879 [ 307.994628] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 308.001893] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 308.009170] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f307524e6d4 [ 308.016430] R13: 00000000004c5d7b R14: 00000000004da810 R15: 0000000000000004 [ 308.023734] CPU: 0 PID: 13461 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 308.030841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.034806] FAULT_INJECTION: forcing a failure. [ 308.034806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 308.040191] Call Trace: [ 308.040207] dump_stack+0x138/0x197 [ 308.040223] should_fail.cold+0x10f/0x159 [ 308.040236] should_failslab+0xdb/0x130 [ 308.040253] kmem_cache_alloc+0x2d7/0x780 [ 308.070431] ? creds_are_invalid+0x48/0x110 [ 308.074755] ? __validate_process_creds+0x14c/0x200 [ 308.079768] prepare_creds+0x3e/0x380 [ 308.083559] copy_creds+0x7b/0x4f0 [ 308.087096] ? lockdep_init_map+0x9/0x10 [ 308.091153] copy_process.part.0+0x868/0x6a00 [ 308.095676] ? save_trace+0x290/0x290 [ 308.099465] ? proc_fail_nth_write+0x7d/0x180 [ 308.103948] ? proc_cwd_link+0x1b0/0x1b0 [ 308.108002] ? __f_unlock_pos+0x19/0x20 [ 308.111974] ? __cleanup_sighand+0x50/0x50 [ 308.116201] ? lock_downgrade+0x6e0/0x6e0 [ 308.120346] _do_fork+0x19e/0xce0 [ 308.123801] ? fork_idle+0x280/0x280 [ 308.127520] ? fput+0xd4/0x150 [ 308.130714] ? SyS_write+0x15e/0x230 [ 308.134432] SyS_clone+0x37/0x50 [ 308.137795] ? sys_vfork+0x30/0x30 [ 308.144723] do_syscall_64+0x1e8/0x640 [ 308.148603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.153451] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.158634] RIP: 0033:0x459879 [ 308.161815] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.169519] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 308.176781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.184045] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.191310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 308.198576] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 308.205858] CPU: 1 PID: 13463 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 308.212959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.222306] Call Trace: [ 308.224898] dump_stack+0x138/0x197 [ 308.228526] should_fail.cold+0x10f/0x159 [ 308.232674] ? __might_sleep+0x93/0xb0 [ 308.236567] __alloc_pages_nodemask+0x1d6/0x7a0 [ 308.241238] ? __alloc_pages_slowpath+0x2930/0x2930 [ 308.246254] ? rcu_read_lock_sched_held+0x110/0x130 [ 308.251281] copy_process.part.0+0x26a/0x6a00 [ 308.255786] ? save_trace+0x290/0x290 [ 308.259586] ? proc_fail_nth_write+0x7d/0x180 [ 308.264089] ? proc_cwd_link+0x1b0/0x1b0 [ 308.268156] ? __f_unlock_pos+0x19/0x20 [ 308.272142] ? find_held_lock+0x35/0x130 [ 308.276213] ? __cleanup_sighand+0x50/0x50 [ 308.280447] ? lock_downgrade+0x6e0/0x6e0 [ 308.284601] _do_fork+0x19e/0xce0 [ 308.288061] ? fork_idle+0x280/0x280 [ 308.291780] ? fput+0xd4/0x150 [ 308.294972] ? SyS_write+0x15e/0x230 [ 308.298687] SyS_clone+0x37/0x50 [ 308.302050] ? sys_vfork+0x30/0x30 [ 308.305597] do_syscall_64+0x1e8/0x640 [ 308.309481] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:09:46 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:46 executing program 3 (fault-call:6 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.314325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.319506] RIP: 0033:0x459879 [ 308.322687] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.330384] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 308.330390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.330395] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.330401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 11:09:46 executing program 1 (fault-call:5 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:46 executing program 5 (fault-call:8 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.330406] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:47 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x400, 0x401], 0x3, 0xa49f, 0x1, 0x7fffffff, 0x20, 0x600, {0x0, 0x2, 0x100, 0x80000001, 0x7fffffff, 0x1, 0x100, 0x0, 0x101, 0x7f, 0x80, 0x7, 0x6, 0x5, "09df63974b3883636687244b493a7ef2efebc228695f26818cd0777a54759d9e"}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73526b75a2692da0407e3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000140)={0x4, 0x1f, 0x5}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.505896] FAULT_INJECTION: forcing a failure. [ 308.505896] name failslab, interval 1, probability 0, space 0, times 0 [ 308.527468] CPU: 0 PID: 13482 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 308.534621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.543980] Call Trace: [ 308.546581] dump_stack+0x138/0x197 [ 308.550234] should_fail.cold+0x10f/0x159 [ 308.555355] should_failslab+0xdb/0x130 [ 308.559344] kmem_cache_alloc_trace+0x2e9/0x790 [ 308.564035] ? lock_downgrade+0x6e0/0x6e0 [ 308.568191] alloc_fdtable+0x7f/0x280 [ 308.571997] dup_fd+0x693/0xa40 [ 308.575300] copy_process.part.0+0x1b5a/0x6a00 [ 308.579894] ? save_trace+0x290/0x290 [ 308.583702] ? proc_fail_nth_write+0x7d/0x180 [ 308.588205] ? proc_cwd_link+0x1b0/0x1b0 [ 308.592283] ? __cleanup_sighand+0x50/0x50 [ 308.596521] ? lock_downgrade+0x6e0/0x6e0 [ 308.600681] _do_fork+0x19e/0xce0 [ 308.604142] ? fork_idle+0x280/0x280 [ 308.607866] ? fput+0xd4/0x150 [ 308.611078] ? SyS_write+0x15e/0x230 [ 308.614799] SyS_clone+0x37/0x50 [ 308.618163] ? sys_vfork+0x30/0x30 [ 308.621707] do_syscall_64+0x1e8/0x640 [ 308.625593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.630439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.635624] RIP: 0033:0x459879 [ 308.638628] FAULT_INJECTION: forcing a failure. [ 308.638628] name failslab, interval 1, probability 0, space 0, times 0 [ 308.638818] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.657697] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 308.664965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.672237] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.679503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 308.686765] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 308.694050] CPU: 1 PID: 13491 Comm: syz-executor.5 Not tainted 4.14.141 #37 11:09:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.701155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.701159] Call Trace: [ 308.701178] dump_stack+0x138/0x197 [ 308.701195] should_fail.cold+0x10f/0x159 [ 308.720943] should_failslab+0xdb/0x130 [ 308.724921] kmem_cache_alloc+0x2d7/0x780 [ 308.729066] ? creds_are_invalid+0x48/0x110 [ 308.733385] ? selinux_is_enabled+0x9/0x50 [ 308.737643] ? creds_are_invalid+0x48/0x110 [ 308.741958] __delayacct_tsk_init+0x20/0x80 [ 308.741971] copy_process.part.0+0x1a6c/0x6a00 [ 308.741989] ? save_trace+0x290/0x290 [ 308.754651] ? proc_fail_nth_write+0x7d/0x180 [ 308.759271] ? proc_cwd_link+0x1b0/0x1b0 [ 308.763335] ? __f_unlock_pos+0x19/0x20 [ 308.767315] ? __cleanup_sighand+0x50/0x50 [ 308.771551] ? lock_downgrade+0x6e0/0x6e0 [ 308.775707] _do_fork+0x19e/0xce0 [ 308.779163] ? fork_idle+0x280/0x280 [ 308.782878] ? fput+0xd4/0x150 [ 308.786072] ? SyS_write+0x15e/0x230 [ 308.789779] SyS_clone+0x37/0x50 [ 308.793125] ? sys_vfork+0x30/0x30 [ 308.796646] do_syscall_64+0x1e8/0x640 [ 308.800554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.805384] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.810555] RIP: 0033:0x459879 [ 308.813724] RSP: 002b:00007f6467376c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.821411] RAX: ffffffffffffffda RBX: 00007f6467376c90 RCX: 0000000000459879 [ 308.828661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.835910] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 308.843160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673776d4 [ 308.850406] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:47 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:47 executing program 3 (fault-call:6 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:47 executing program 5 (fault-call:8 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.043516] FAULT_INJECTION: forcing a failure. [ 309.043516] name failslab, interval 1, probability 0, space 0, times 0 [ 309.058801] CPU: 0 PID: 13512 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 309.065945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.075314] Call Trace: [ 309.077942] dump_stack+0x138/0x197 [ 309.081588] should_fail.cold+0x10f/0x159 [ 309.085749] should_failslab+0xdb/0x130 [ 309.089761] kmem_cache_alloc+0x2d7/0x780 [ 309.093922] ? lockdep_init_map+0x9/0x10 [ 309.097991] ? debug_mutex_init+0x2d/0x5a [ 309.102148] dup_fd+0x85/0xa40 [ 309.105352] copy_process.part.0+0x1b5a/0x6a00 [ 309.109940] ? save_trace+0x290/0x290 [ 309.113745] ? proc_fail_nth_write+0x7d/0x180 [ 309.118243] ? proc_cwd_link+0x1b0/0x1b0 [ 309.122322] ? __cleanup_sighand+0x50/0x50 [ 309.126558] ? lock_downgrade+0x6e0/0x6e0 [ 309.130714] _do_fork+0x19e/0xce0 [ 309.134173] ? fork_idle+0x280/0x280 [ 309.137893] ? fput+0xd4/0x150 11:09:47 executing program 1: mkdir(&(0x7f0000000100)='\x00', 0xe4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='\x88\x827\xb3Ln\xb4W\x00', 0x90004, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000037c0)={0x1, [0x0]}, &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000003a40)={r8, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={r8, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r9, 0x401}, &(0x7f0000000200)=0x8) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f00000000c0)={0x0, 0x3}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x202000, 0x0) write$P9_ROPEN(r11, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x8, 0x1, 0x5}, 0x80000000}}, 0x18) [ 309.141082] ? SyS_write+0x15e/0x230 [ 309.144799] SyS_clone+0x37/0x50 [ 309.148162] ? sys_vfork+0x30/0x30 [ 309.151709] do_syscall_64+0x1e8/0x640 [ 309.155599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.160445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.165627] RIP: 0033:0x459879 [ 309.168817] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 309.176524] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 309.183792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:47 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.191052] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.191058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 309.191063] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 309.216460] FAULT_INJECTION: forcing a failure. [ 309.216460] name failslab, interval 1, probability 0, space 0, times 0 11:09:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:47 executing program 5 (fault-call:8 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.242171] CPU: 1 PID: 13511 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 309.249293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.258647] Call Trace: [ 309.261249] dump_stack+0x138/0x197 [ 309.264891] should_fail.cold+0x10f/0x159 [ 309.269051] should_failslab+0xdb/0x130 [ 309.273041] kmem_cache_alloc_trace+0x2e9/0x790 [ 309.277723] ? lock_downgrade+0x6e0/0x6e0 [ 309.281876] alloc_fdtable+0x7f/0x280 [ 309.285681] dup_fd+0x693/0xa40 [ 309.288971] copy_process.part.0+0x1b5a/0x6a00 [ 309.288993] ? save_trace+0x290/0x290 [ 309.289005] ? proc_fail_nth_write+0x7d/0x180 [ 309.289014] ? proc_cwd_link+0x1b0/0x1b0 [ 309.297392] ? __cleanup_sighand+0x50/0x50 [ 309.297406] ? lock_downgrade+0x6e0/0x6e0 [ 309.297422] _do_fork+0x19e/0xce0 [ 309.297435] ? fork_idle+0x280/0x280 [ 309.297448] ? fput+0xd4/0x150 [ 309.305968] ? SyS_write+0x15e/0x230 [ 309.305985] SyS_clone+0x37/0x50 [ 309.305994] ? sys_vfork+0x30/0x30 [ 309.306009] do_syscall_64+0x1e8/0x640 [ 309.306017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.306034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.349149] RIP: 0033:0x459879 [ 309.352332] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 309.360034] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 309.367288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.374546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.381816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 309.389082] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:48 executing program 3 (fault-call:6 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.549767] FAULT_INJECTION: forcing a failure. [ 309.549767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.561606] CPU: 0 PID: 13538 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 309.568709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.578069] Call Trace: [ 309.580674] dump_stack+0x138/0x197 [ 309.584313] should_fail.cold+0x10f/0x159 [ 309.588473] __alloc_pages_nodemask+0x1d6/0x7a0 [ 309.593153] ? fs_reclaim_acquire+0x20/0x20 [ 309.597488] ? __alloc_pages_slowpath+0x2930/0x2930 [ 309.602522] cache_grow_begin+0x80/0x400 [ 309.606585] kmem_cache_alloc+0x6a6/0x780 [ 309.610745] dup_fd+0x85/0xa40 [ 309.613950] copy_process.part.0+0x1b5a/0x6a00 [ 309.618544] ? save_trace+0x290/0x290 [ 309.622350] ? proc_fail_nth_write+0x7d/0x180 [ 309.626923] ? proc_cwd_link+0x1b0/0x1b0 [ 309.631003] ? __cleanup_sighand+0x50/0x50 [ 309.635230] ? lock_downgrade+0x6e0/0x6e0 [ 309.639442] _do_fork+0x19e/0xce0 [ 309.643003] ? fork_idle+0x280/0x280 [ 309.646714] ? fput+0xd4/0x150 [ 309.649897] ? SyS_write+0x15e/0x230 [ 309.653596] SyS_clone+0x37/0x50 [ 309.656946] ? sys_vfork+0x30/0x30 [ 309.660471] do_syscall_64+0x1e8/0x640 [ 309.664341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.669170] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.674345] RIP: 0033:0x459879 [ 309.677541] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 309.685257] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 309.692519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.699778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.707035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 309.714294] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:48 executing program 5 (fault-call:8 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 309.788280] FAULT_INJECTION: forcing a failure. [ 309.788280] name failslab, interval 1, probability 0, space 0, times 0 [ 309.805198] CPU: 1 PID: 13545 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 309.812327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.821687] Call Trace: [ 309.824287] dump_stack+0x138/0x197 [ 309.827931] should_fail.cold+0x10f/0x159 [ 309.832093] should_failslab+0xdb/0x130 11:09:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.836079] kmem_cache_alloc_node_trace+0x280/0x770 [ 309.841186] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 309.846643] __kmalloc_node+0x3d/0x80 [ 309.850449] kvmalloc_node+0x4e/0xe0 [ 309.854173] alloc_fdtable+0xcf/0x280 [ 309.857981] dup_fd+0x693/0xa40 [ 309.861273] copy_process.part.0+0x1b5a/0x6a00 [ 309.865864] ? save_trace+0x290/0x290 [ 309.869657] ? proc_fail_nth_write+0x7d/0x180 [ 309.874134] ? proc_cwd_link+0x1b0/0x1b0 [ 309.878185] ? __cleanup_sighand+0x50/0x50 [ 309.882416] ? lock_downgrade+0x6e0/0x6e0 [ 309.886567] _do_fork+0x19e/0xce0 [ 309.890129] ? fork_idle+0x280/0x280 [ 309.893885] ? fput+0xd4/0x150 [ 309.897062] ? SyS_write+0x15e/0x230 [ 309.900760] SyS_clone+0x37/0x50 [ 309.904110] ? sys_vfork+0x30/0x30 [ 309.907635] do_syscall_64+0x1e8/0x640 [ 309.911632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.916467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.921728] RIP: 0033:0x459879 [ 309.924900] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 11:09:48 executing program 3 (fault-call:6 fault-nth:9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 309.932602] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 309.939875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.947145] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.954414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 309.961695] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 310.019415] FAULT_INJECTION: forcing a failure. [ 310.019415] name failslab, interval 1, probability 0, space 0, times 0 [ 310.031261] CPU: 1 PID: 13557 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 310.038377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.047736] Call Trace: [ 310.050332] dump_stack+0x138/0x197 [ 310.053966] should_fail.cold+0x10f/0x159 [ 310.058133] should_failslab+0xdb/0x130 [ 310.062117] kmem_cache_alloc+0x2d7/0x780 [ 310.066274] ? lockdep_init_map+0x9/0x10 [ 310.070344] ? debug_mutex_init+0x2d/0x5a [ 310.074502] dup_fd+0x85/0xa40 [ 310.077709] copy_process.part.0+0x1b5a/0x6a00 [ 310.082301] ? save_trace+0x290/0x290 [ 310.086128] ? proc_fail_nth_write+0x7d/0x180 [ 310.090626] ? proc_cwd_link+0x1b0/0x1b0 [ 310.094704] ? __cleanup_sighand+0x50/0x50 [ 310.098947] ? lock_downgrade+0x6e0/0x6e0 [ 310.100838] FAULT_INJECTION: forcing a failure. [ 310.100838] name failslab, interval 1, probability 0, space 0, times 0 [ 310.103098] _do_fork+0x19e/0xce0 [ 310.103114] ? fork_idle+0x280/0x280 [ 310.103127] ? fput+0xd4/0x150 [ 310.103141] ? SyS_write+0x15e/0x230 [ 310.128350] SyS_clone+0x37/0x50 [ 310.131724] ? sys_vfork+0x30/0x30 [ 310.135261] do_syscall_64+0x1e8/0x640 [ 310.139137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.143997] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.149177] RIP: 0033:0x459879 [ 310.152356] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.160058] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 310.167317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.174592] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.181868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 310.189126] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 310.196405] CPU: 0 PID: 13561 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 310.203513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.212870] Call Trace: [ 310.215460] dump_stack+0x138/0x197 [ 310.219094] should_fail.cold+0x10f/0x159 [ 310.223254] should_failslab+0xdb/0x130 [ 310.227235] kmem_cache_alloc+0x2d7/0x780 [ 310.231383] ? dup_fd+0x533/0xa40 [ 310.234840] copy_fs_struct+0x43/0x2d0 [ 310.238730] copy_process.part.0+0x3924/0x6a00 [ 310.243319] ? save_trace+0x290/0x290 [ 310.247121] ? proc_fail_nth_write+0x7d/0x180 [ 310.251618] ? proc_cwd_link+0x1b0/0x1b0 [ 310.255691] ? __cleanup_sighand+0x50/0x50 [ 310.259934] ? lock_downgrade+0x6e0/0x6e0 [ 310.264091] _do_fork+0x19e/0xce0 11:09:48 executing program 5 (fault-call:8 fault-nth:9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 310.267543] ? fork_idle+0x280/0x280 [ 310.271253] ? fput+0xd4/0x150 [ 310.274440] ? SyS_write+0x15e/0x230 [ 310.278149] SyS_clone+0x37/0x50 [ 310.281513] ? sys_vfork+0x30/0x30 [ 310.285059] do_syscall_64+0x1e8/0x640 [ 310.288953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.293808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.298996] RIP: 0033:0x459879 [ 310.302196] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.310029] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 11:09:48 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:48 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:48 executing program 3 (fault-call:6 fault-nth:10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 310.317296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.324564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.331823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 310.331829] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:49 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 310.472585] FAULT_INJECTION: forcing a failure. [ 310.472585] name failslab, interval 1, probability 0, space 0, times 0 [ 310.539446] CPU: 1 PID: 13575 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 310.546583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.555943] Call Trace: [ 310.556132] FAULT_INJECTION: forcing a failure. [ 310.556132] name failslab, interval 1, probability 0, space 0, times 0 [ 310.558531] dump_stack+0x138/0x197 [ 310.558550] should_fail.cold+0x10f/0x159 [ 310.558573] should_failslab+0xdb/0x130 [ 310.581474] kmem_cache_alloc+0x2d7/0x780 [ 310.585622] ? dup_fd+0x533/0xa40 [ 310.589084] copy_fs_struct+0x43/0x2d0 [ 310.592976] copy_process.part.0+0x3924/0x6a00 [ 310.597566] ? save_trace+0x290/0x290 [ 310.601368] ? proc_fail_nth_write+0x7d/0x180 [ 310.605861] ? proc_cwd_link+0x1b0/0x1b0 [ 310.609937] ? __cleanup_sighand+0x50/0x50 [ 310.614171] ? lock_downgrade+0x6e0/0x6e0 [ 310.618324] _do_fork+0x19e/0xce0 [ 310.621778] ? fork_idle+0x280/0x280 [ 310.625494] ? fput+0xd4/0x150 [ 310.628687] ? SyS_write+0x15e/0x230 [ 310.632401] SyS_clone+0x37/0x50 [ 310.635766] ? sys_vfork+0x30/0x30 [ 310.639310] do_syscall_64+0x1e8/0x640 [ 310.643195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.648047] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.653235] RIP: 0033:0x459879 [ 310.656425] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.664132] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 310.671402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.678670] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.685946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 310.693214] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 310.702025] CPU: 0 PID: 13590 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 310.709148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.718512] Call Trace: [ 310.721108] dump_stack+0x138/0x197 [ 310.724741] should_fail.cold+0x10f/0x159 [ 310.728901] should_failslab+0xdb/0x130 [ 310.732888] kmem_cache_alloc_node_trace+0x280/0x770 [ 310.737999] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 310.743455] __kmalloc_node+0x3d/0x80 [ 310.747258] kvmalloc_node+0x4e/0xe0 [ 310.750973] alloc_fdtable+0xcf/0x280 [ 310.754802] dup_fd+0x693/0xa40 [ 310.758096] copy_process.part.0+0x1b5a/0x6a00 [ 310.762692] ? save_trace+0x290/0x290 [ 310.766520] ? proc_fail_nth_write+0x7d/0x180 [ 310.771032] ? proc_cwd_link+0x1b0/0x1b0 [ 310.775108] ? __cleanup_sighand+0x50/0x50 [ 310.779341] ? lock_downgrade+0x6e0/0x6e0 [ 310.783498] _do_fork+0x19e/0xce0 [ 310.786957] ? fork_idle+0x280/0x280 [ 310.790677] ? fput+0xd4/0x150 [ 310.793876] ? SyS_write+0x15e/0x230 [ 310.797597] SyS_clone+0x37/0x50 [ 310.800962] ? sys_vfork+0x30/0x30 [ 310.804506] do_syscall_64+0x1e8/0x640 [ 310.808394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.813245] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.818437] RIP: 0033:0x459879 [ 310.821646] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.829358] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 11:09:49 executing program 5 (fault-call:8 fault-nth:10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 310.836716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.844080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.851352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 310.858618] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:49 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 310.993636] FAULT_INJECTION: forcing a failure. [ 310.993636] name failslab, interval 1, probability 0, space 0, times 0 [ 311.041722] CPU: 1 PID: 13601 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 311.048867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.058226] Call Trace: [ 311.060847] dump_stack+0x138/0x197 [ 311.064487] should_fail.cold+0x10f/0x159 [ 311.068642] should_failslab+0xdb/0x130 [ 311.072624] kmem_cache_alloc+0x2d7/0x780 [ 311.076778] ? _raw_spin_unlock+0x2d/0x50 [ 311.080940] copy_process.part.0+0x3987/0x6a00 [ 311.085529] ? save_trace+0x290/0x290 [ 311.089331] ? proc_fail_nth_write+0x7d/0x180 [ 311.093825] ? proc_cwd_link+0x1b0/0x1b0 [ 311.097894] ? __cleanup_sighand+0x50/0x50 [ 311.102129] ? lock_downgrade+0x6e0/0x6e0 [ 311.106279] _do_fork+0x19e/0xce0 [ 311.109736] ? fork_idle+0x280/0x280 [ 311.113453] ? fput+0xd4/0x150 [ 311.116657] ? SyS_write+0x15e/0x230 [ 311.120378] SyS_clone+0x37/0x50 [ 311.123739] ? sys_vfork+0x30/0x30 [ 311.127277] do_syscall_64+0x1e8/0x640 [ 311.131165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.136013] entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:09:49 executing program 3 (fault-call:6 fault-nth:11): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:49 executing program 5 (fault-call:8 fault-nth:11): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 311.141461] RIP: 0033:0x459879 [ 311.144647] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.152354] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 311.159624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.166892] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.174159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 311.181428] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:49 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:49 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x3, 0x1, 0x4, 0x1}}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000080), 0x3f) [ 311.354587] FAULT_INJECTION: forcing a failure. [ 311.354587] name failslab, interval 1, probability 0, space 0, times 0 [ 311.364425] FAULT_INJECTION: forcing a failure. [ 311.364425] name failslab, interval 1, probability 0, space 0, times 0 [ 311.398365] CPU: 0 PID: 13617 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 311.405513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.414899] Call Trace: [ 311.417497] dump_stack+0x138/0x197 [ 311.421138] should_fail.cold+0x10f/0x159 [ 311.425299] should_failslab+0xdb/0x130 [ 311.429286] kmem_cache_alloc+0x2d7/0x780 [ 311.433434] ? dup_fd+0x533/0xa40 [ 311.436888] copy_fs_struct+0x43/0x2d0 [ 311.440777] copy_process.part.0+0x3924/0x6a00 [ 311.445365] ? save_trace+0x290/0x290 [ 311.449159] ? proc_fail_nth_write+0x7d/0x180 [ 311.453654] ? proc_cwd_link+0x1b0/0x1b0 [ 311.457725] ? __cleanup_sighand+0x50/0x50 [ 311.461955] ? lock_downgrade+0x6e0/0x6e0 [ 311.466203] _do_fork+0x19e/0xce0 [ 311.469654] ? fork_idle+0x280/0x280 [ 311.473375] ? fput+0xd4/0x150 [ 311.476582] ? SyS_write+0x15e/0x230 [ 311.480292] SyS_clone+0x37/0x50 [ 311.483650] ? sys_vfork+0x30/0x30 [ 311.487188] do_syscall_64+0x1e8/0x640 [ 311.491070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.495917] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.501097] RIP: 0033:0x459879 [ 311.504275] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.511975] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 311.519238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.526499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.533762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 311.541024] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 311.548383] CPU: 1 PID: 13618 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 311.555493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.564844] Call Trace: [ 311.567435] dump_stack+0x138/0x197 [ 311.571068] should_fail.cold+0x10f/0x159 [ 311.575223] should_failslab+0xdb/0x130 [ 311.579203] kmem_cache_alloc+0x2d7/0x780 [ 311.583349] ? _raw_spin_unlock_irq+0x28/0x90 [ 311.587850] ? trace_hardirqs_on_caller+0x400/0x590 [ 311.592875] copy_process.part.0+0x1cd5/0x6a00 [ 311.597461] ? save_trace+0x290/0x290 [ 311.601263] ? proc_fail_nth_write+0x7d/0x180 [ 311.605755] ? proc_cwd_link+0x1b0/0x1b0 [ 311.609829] ? __cleanup_sighand+0x50/0x50 [ 311.614063] ? lock_downgrade+0x6e0/0x6e0 [ 311.618221] _do_fork+0x19e/0xce0 [ 311.621683] ? fork_idle+0x280/0x280 [ 311.625413] ? fput+0xd4/0x150 [ 311.628607] ? SyS_write+0x15e/0x230 [ 311.632327] SyS_clone+0x37/0x50 [ 311.635698] ? sys_vfork+0x30/0x30 [ 311.639244] do_syscall_64+0x1e8/0x640 [ 311.643128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.648937] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.654124] RIP: 0033:0x459879 [ 311.657314] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.665021] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 311.672293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.679566] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.686838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 11:09:50 executing program 3 (fault-call:6 fault-nth:12): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 311.694105] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 11:09:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0xfffffffffffffffb) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:50 executing program 5 (fault-call:8 fault-nth:12): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:50 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = getgid() setfsgid(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 311.927082] FAULT_INJECTION: forcing a failure. [ 311.927082] name failslab, interval 1, probability 0, space 0, times 0 [ 311.947394] FAULT_INJECTION: forcing a failure. [ 311.947394] name failslab, interval 1, probability 0, space 0, times 0 [ 311.999361] CPU: 1 PID: 13637 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 312.006594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.015950] Call Trace: [ 312.018541] dump_stack+0x138/0x197 [ 312.022179] should_fail.cold+0x10f/0x159 [ 312.026332] should_failslab+0xdb/0x130 [ 312.030342] kmem_cache_alloc+0x2d7/0x780 [ 312.034494] ? _raw_spin_unlock_irq+0x28/0x90 [ 312.038994] ? trace_hardirqs_on_caller+0x400/0x590 [ 312.044014] copy_process.part.0+0x1cd5/0x6a00 [ 312.048604] ? save_trace+0x290/0x290 [ 312.052404] ? proc_fail_nth_write+0x7d/0x180 [ 312.056896] ? proc_cwd_link+0x1b0/0x1b0 [ 312.060968] ? __cleanup_sighand+0x50/0x50 [ 312.065198] ? lock_downgrade+0x6e0/0x6e0 [ 312.069346] _do_fork+0x19e/0xce0 [ 312.072807] ? fork_idle+0x280/0x280 [ 312.076526] ? fput+0xd4/0x150 [ 312.079718] ? SyS_write+0x15e/0x230 [ 312.083431] SyS_clone+0x37/0x50 [ 312.086795] ? sys_vfork+0x30/0x30 [ 312.090330] do_syscall_64+0x1e8/0x640 [ 312.094216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.099063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.104247] RIP: 0033:0x459879 [ 312.107433] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.115137] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 312.122409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.129671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.136937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 312.144205] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 312.154201] CPU: 0 PID: 13636 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 312.161315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.170659] Call Trace: [ 312.173232] dump_stack+0x138/0x197 [ 312.176846] should_fail.cold+0x10f/0x159 [ 312.180981] should_failslab+0xdb/0x130 [ 312.184938] kmem_cache_alloc+0x2d7/0x780 [ 312.189074] ? _raw_spin_unlock_irq+0x28/0x90 [ 312.193553] ? trace_hardirqs_on_caller+0x400/0x590 [ 312.198554] copy_process.part.0+0x1cd5/0x6a00 [ 312.203123] ? save_trace+0x290/0x290 [ 312.206907] ? proc_fail_nth_write+0x7d/0x180 [ 312.211383] ? proc_cwd_link+0x1b0/0x1b0 [ 312.215432] ? __cleanup_sighand+0x50/0x50 [ 312.219651] ? lock_downgrade+0x6e0/0x6e0 [ 312.223784] _do_fork+0x19e/0xce0 [ 312.227222] ? fork_idle+0x280/0x280 [ 312.230920] ? fput+0xd4/0x150 [ 312.234096] ? SyS_write+0x15e/0x230 [ 312.237792] SyS_clone+0x37/0x50 [ 312.241162] ? sys_vfork+0x30/0x30 [ 312.244687] do_syscall_64+0x1e8/0x640 [ 312.248555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.253386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.258555] RIP: 0033:0x459879 [ 312.261729] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.269420] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 312.276673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.283923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.291175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 312.298438] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:50 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:50 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:51 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x9) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000180)={0x348, 0x0, &(0x7f00000001c0)}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) sendmmsg$nfc_llcp(r4, &(0x7f0000003280)=[{&(0x7f0000000300)={0x27, 0x0, 0x400, 0x4, 0x1703, 0x3f, "bb16b993d6398e0661b5767556cf9a57b8aee749199a31fa3140c50be169b3a9214e965f74b830016da3e68043df051e12125242c62e90dbccbda010a38fcb", 0x35}, 0x60, &(0x7f0000002840)=[{&(0x7f0000000380)="12f12e840f9e21142af93429efc3a8ccb6fd774b3943eeb32d77a1c860d015dd9ff560406489020544fe762bc46bbb13f481c1920df3d9fc9f754ec80d89197acbb1d2630ad612940788e1a3", 0x4c}, {&(0x7f0000000580)="f4dab9eb178f0b846af0a3aad1743376bf5146938c7623c64c543d74e89f9d930c8d9bbec5e12d63760a1c4e78621a716467346d9da5e7acdc54cb0879ced98e6efd648d3159455fc2bd4b60ad7216cb76b43db56da54df3a4c067a54215fc5ea3bd788ce1ff5900db63243197ce16c90b220835ff08d7951aca148ba792ce0d5816e283ce59b5558024a1ffae56fbfc8d994e527e4ef0d06a9bc1d2060460a3b47c88c0cf868e1bee222442e93bc9b062eb672e073514753bfb33a5dd214b86ec0dafb5b1231719b3404f65cb217c01b6b3464f4de29ee5a129a8f69a59c9d224093e5e6f508a5bd43f", 0xea}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="2365ac8629437a85873908b56a9850f6eb353561f0070596160a73a084a6789083912a81275fbe01edf8bbe6624d744c01b2ac8bd28eeb216810bd39cac6c2416caf587ff36d52c54c19fc948dcf22", 0x4f}, {&(0x7f0000001700)="6b122a6427377359f09d0f4c08b3f02b1f27d1ea02f488076f7340da62576f27e95b5358d5c38b22eadf16e1484c454f4efb9d30480939ca29e972d98b26d23f229d7d2c3ac606ccfbb5eb12b73e45b1174b5348c0ab897ae127d8c3397552d764e740", 0x63}, {&(0x7f0000001780)="5535e119c61e2b9dcd70c700e015e091c6956072aacd5f85dcc68c2c981f18c330e826a1fafe4b0737af39ec572f86ccfee1ab249ce0da0333c39cdc31aefe175f5095044883a5152a0c1a414a6a2275c99711f71b58e727e06b4a58721ae4a3e8cb11845f4b24709eb96af8484a738665587512fecc4d643c7ea3e86ee888ed983e7674b654e8c0fd9c0c088ecd10f978509a142ada018e025ee61a208f167174a72af0b70f8217838481", 0xab}, {&(0x7f0000001840)="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", 0x1000}], 0x7, &(0x7f00000028c0)={0xb0, 0x105, 0x5, "67a0e9c67dfde040906e53bf4701f67306da0ab5e6dbe1a2ac95452be91a1e89e007cee4a9596b314975b990da7706130be074a3bcd349cfd436f2f00bb42756105d4020c8339b988e053f8f723c2727d76f6f54304af2e325180928f62195ec33034c0db4819ac5a0aaeafe9c7316481ee9a15c248870e7510d346e86825a372c2e715ffc580795a500a6986ba4e9ada0f25b0a12f3431e2b4879"}, 0xb0, 0x10040840}, {&(0x7f0000002980)={0x27, 0x0, 0x1, 0x5, 0x800, 0xfffffffffffffffb, "a154cbd40112817cd20faad5a212cfdfe29399308b84a40c6beb70184661ab69de7ce19a94818be264933da46a9a3e01ba51151664625e0509befffce01bde", 0x3d}, 0x60, &(0x7f0000000200)=[{&(0x7f0000002a00)="7a4a9c71e5f808def71c47146fcb521ab1c2f49d5e20deac3496c9c2aa5e7a9822d22473825b07fd045c2a33f91ffda9344b2317ad27beb1ce6cb935611b54fa974bca9ac988ed64fe88f6d54a48", 0x4e}, {&(0x7f0000002a80)="dc2623ecdde12df6573bdcacb84fedb449a54aaee1d122d0a8a361e4ac98df391ad49d5c7078d03a2733b055a471a7058c155ab2dbee1d9cdd4463c1ac1e26c3849ccf088df614999e712f58ad14e067c12f614b2605c6d448ff0d9f45b01ea2f96675a68de39ad4e73ffa2912d743e01b6324de696cbbb8f1bf42c1be6b84c22264867de37f2f9cc2b7d559f54412005fa651aa769afe2ce5d74c8abe6051843a", 0xa1}, {&(0x7f0000002b40)="e2b18a00d85f2ecd386231d3028983b57befd84f9efaf4e7fd23e9ca83cdcb45c85a24f0dea0d3ef86698cd5e904f9b21ac13d6b66542a65b0f5048f59632226cb458ec5e4013271ba63bc40625c9e06488f5f9b95eab6", 0x57}], 0x3, &(0x7f0000002bc0)={0xd8, 0x105, 0x0, "6eb46fd1b7edf5b0f0ccc6414176bde8fcdb009448de01c5a645231c51c2ecb296746477aab380cfd12a2689c5b280d5115af0674bed3276e694ff5181dab25e8cf10d8e55a4d2372feb7abe64f5c0fa61a753f3ca1e4ebfcb655da2789444ee68316c887d8696be53107fe9cfdeb9120c33e39702bfb8d8ea7887080d8c095e17c204b286e0eab3fede48adc5efe5a4a4a5d656639eedd5250885de1bae9d4d675458ca3b276705c2ae5c6f26c16fed8fe94c9fa6d5429fd227cd5e85c8fc6caa5f49cf96facd03"}, 0xd8, 0x40084}, {&(0x7f0000002cc0)={0x27, 0x0, 0x0, 0x5, 0x2, 0x6, "9883e4fd128d99b83010c67a43dd768f3a8253c3e79df0260deac978c3991a86e5b6c9de9c0907a673e46a24611f22f27ec59dabf3c2762497cbb8a67858bf", 0x3f}, 0x60, &(0x7f0000002ec0)=[{&(0x7f0000002d40)="b083644f42ca905283a0e7cac2b12fc8da6f3eb0e683c658d7704f7413560e679b4522b7519d8300ab190b030870b00c8349b614960c9250351665cfd827addc5948aef43a40e4393c7366bd65ffd23ae3fca9a63b5b26c55fa406ad379aae503abb047f4316d42f03787f5496546ad104207571956662f710eb450aff292302fd0a5b43d4cee376b27d1823bb364bacc7f183b55d69a10a8e017e902530e49ae1d7f90a2947b0a8ae5f62313111a376152932d289794b2eb7f55173313f35c65d39142b22f7b2b23674be6cbbb9947cf632b5", 0xd3}, {&(0x7f0000000400)="773bc00a86bbaadab50e411ebe0b64868ab8650595dd9077de1d3f235d8e58d2ef035be8c7057dfbeddf72bde784d610f31818fa63", 0x35}, {&(0x7f0000002e40)="94471c40e3ffe42c81a7f430623521567cc1056a37ad6456547d45cc204040d99750de592d1f935131cbdeacdeb2482c8d01ce70fb4d88fb833c04b6e537f9feb1738fda1dc04f2aa730266fea4d5264515414955a369749e97b6932db3699b2591246fbb5652696099e4d52374bbaf4f6e265480fdd", 0x76}], 0x3, 0x0, 0x3d, 0x20000000}, {&(0x7f0000002f00)={0x27, 0x0, 0x0, 0xf, 0x2, 0x30d, "89c67b9daf009d14479c35873ab7efbf24b2769927e14486551efb14228eaf5c87cc26a3146f9759877914919389171944f29f5f2576040d358e0d521ac6d8", 0x10}, 0x60, &(0x7f00000031c0)=[{&(0x7f0000002f80)="d8002f5b156c51e4c7ff8dfccb84024adf86e7ec7574699c087f08ba0d05a6b1b394afdef1d82592cf1e8238f06844e5576f20eace405a20f01c632d34f1874c739325abfef970014bace430fc258e54d0757d01d205598e620a0e2f591ae4626cff2d3bd261f7f3295f8ae07c2bd00e39adfe822d2cc3524541b95da1c0ebb9a6ef8ca81af45869b30602aa97b5b8595540bc6a007a2b", 0x97}, {&(0x7f0000003040)="e9355225f6e47682c0c85b6c3b8fab57a85af1a2599c28ba026f7c2256e3768bf69e267cccf126ed171dbe18658d46bfb4842fa18cc7f1ccdba488f3df99240b0089d954729b28fa3d4691ac66e30ffa72f7e549d79f9ccfc7df36de0ac7a7fcc9c781930fb41e3383ff61b9e4d1b9af96975bee056ac90a11d3d12b9584b75079d82b827954bd10c61cb3d3ad7dc82a77bb6c447a641e6e4e435ae70bda59fd53f973b073cb", 0xa6}, {&(0x7f0000003100)="d6f9105f192b55a2eee69af71c29030a04c83d1ccd8fa47fd433580d555a4e706be044c24013381a0148721548008476c183eea2daf30e8c0c87705c32445b037b433396fb00aa970edb", 0x4a}, {&(0x7f0000003180)="fae7c924f8f94e86884658", 0xb}], 0x4, &(0x7f0000003200)={0x80, 0x118, 0xffff, "e5a16d7157dbdb1b7081713bea465950fb81508a171144ea7b1f53c391b7b1190ed4e01990aea827c0a0712f04131bf36c55bd237df3c412abc0d286ee3cef77c60cf06957fa1c3443794f397263844b86b2d8dd1bb32da2381206396faf5a621f5de6ef6c0bc4318d"}, 0x80}], 0x4, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x10001) close(r1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000100)) r9 = fcntl$dupfd(r1, 0x0, r8) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'\xdfZ\x00', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KVM_GET_PIT(r9, 0xc048ae65, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) close(r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r12 = fcntl$dupfd(r10, 0x0, r11) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r12, 0xc0305616, &(0x7f0000003380)={0x0, {0x1, 0x8}}) 11:09:51 executing program 5 (fault-call:8 fault-nth:13): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:51 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:51 executing program 3 (fault-call:6 fault-nth:13): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 312.657438] FAULT_INJECTION: forcing a failure. [ 312.657438] name failslab, interval 1, probability 0, space 0, times 0 [ 312.690669] FAULT_INJECTION: forcing a failure. [ 312.690669] name failslab, interval 1, probability 0, space 0, times 0 [ 312.726667] CPU: 1 PID: 13670 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 312.732179] 9pnet: Insufficient options for proto=fd [ 312.733826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.733832] Call Trace: [ 312.733851] dump_stack+0x138/0x197 [ 312.733870] should_fail.cold+0x10f/0x159 [ 312.758669] should_failslab+0xdb/0x130 [ 312.762649] kmem_cache_alloc+0x2d7/0x780 [ 312.766802] ? lockdep_init_map+0x9/0x10 [ 312.770866] ? debug_mutex_init+0x2d/0x5a [ 312.775024] copy_process.part.0+0x3c75/0x6a00 [ 312.779618] ? proc_fail_nth_write+0x7d/0x180 [ 312.784119] ? proc_cwd_link+0x1b0/0x1b0 [ 312.788195] ? __cleanup_sighand+0x50/0x50 [ 312.792432] ? lock_downgrade+0x6e0/0x6e0 [ 312.796589] _do_fork+0x19e/0xce0 [ 312.800065] ? fork_idle+0x280/0x280 [ 312.803782] ? fput+0xd4/0x150 [ 312.806976] ? SyS_write+0x15e/0x230 [ 312.810697] SyS_clone+0x37/0x50 [ 312.814063] ? sys_vfork+0x30/0x30 [ 312.817604] do_syscall_64+0x1e8/0x640 [ 312.821525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.826378] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.831562] RIP: 0033:0x459879 [ 312.834771] RSP: 002b:00007f64673b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.842482] RAX: ffffffffffffffda RBX: 00007f64673b8c90 RCX: 0000000000459879 [ 312.849751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.857140] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.864419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64673b96d4 [ 312.871688] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000005 [ 312.908314] CPU: 1 PID: 13671 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 312.915449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.924801] Call Trace: [ 312.927394] dump_stack+0x138/0x197 [ 312.931032] should_fail.cold+0x10f/0x159 [ 312.935185] should_failslab+0xdb/0x130 [ 312.939165] kmem_cache_alloc+0x2d7/0x780 [ 312.943318] ? _raw_spin_unlock+0x2d/0x50 [ 312.947477] copy_process.part.0+0x3987/0x6a00 [ 312.952071] ? save_trace+0x290/0x290 [ 312.955870] ? proc_fail_nth_write+0x7d/0x180 [ 312.960363] ? proc_cwd_link+0x1b0/0x1b0 [ 312.964440] ? __cleanup_sighand+0x50/0x50 [ 312.968677] ? lock_downgrade+0x6e0/0x6e0 [ 312.972834] _do_fork+0x19e/0xce0 [ 312.976294] ? fork_idle+0x280/0x280 [ 312.980033] ? fput+0xd4/0x150 [ 312.983223] ? SyS_write+0x15e/0x230 [ 312.986942] SyS_clone+0x37/0x50 [ 312.990306] ? sys_vfork+0x30/0x30 [ 312.993849] do_syscall_64+0x1e8/0x640 [ 312.997733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.002584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.007767] RIP: 0033:0x459879 [ 313.010955] RSP: 002b:00007fc9f6d39c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.018660] RAX: ffffffffffffffda RBX: 00007fc9f6d39c90 RCX: 0000000000459879 [ 313.025925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.033195] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.040464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9f6d3a6d4 [ 313.047733] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:51 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:52 executing program 0 (fault-call:6 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 313.468561] 9pnet: Insufficient options for proto=fd [ 313.521660] FAULT_INJECTION: forcing a failure. [ 313.521660] name failslab, interval 1, probability 0, space 0, times 0 [ 313.534104] CPU: 0 PID: 13690 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 313.541223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.550579] Call Trace: [ 313.553177] dump_stack+0x138/0x197 [ 313.556840] should_fail.cold+0x10f/0x159 [ 313.560998] should_failslab+0xdb/0x130 [ 313.564978] kmem_cache_alloc_node+0x287/0x780 [ 313.569567] ? get_pid_task+0x98/0x140 [ 313.573460] copy_process.part.0+0x17d5/0x6a00 [ 313.578048] ? save_trace+0x290/0x290 [ 313.581855] ? proc_fail_nth_write+0x7d/0x180 [ 313.586354] ? proc_cwd_link+0x1b0/0x1b0 [ 313.590516] ? __f_unlock_pos+0x19/0x20 [ 313.594491] ? find_held_lock+0x35/0x130 [ 313.598559] ? __cleanup_sighand+0x50/0x50 [ 313.602792] ? lock_downgrade+0x6e0/0x6e0 [ 313.606932] _do_fork+0x19e/0xce0 [ 313.610514] ? fork_idle+0x280/0x280 [ 313.614230] ? fput+0xd4/0x150 [ 313.617414] ? SyS_write+0x15e/0x230 [ 313.621206] SyS_clone+0x37/0x50 [ 313.624562] ? sys_vfork+0x30/0x30 [ 313.628087] do_syscall_64+0x1e8/0x640 [ 313.631959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.636805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.641996] RIP: 0033:0x459879 [ 313.645178] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.652867] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 313.660126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:52 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xfffffffffffffffd) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x144800000, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 0 (fault-call:6 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 313.667386] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.674647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 313.681911] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 313.813628] FAULT_INJECTION: forcing a failure. [ 313.813628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.826425] CPU: 0 PID: 13706 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 313.833544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.842900] Call Trace: [ 313.845502] dump_stack+0x138/0x197 [ 313.849258] should_fail.cold+0x10f/0x159 [ 313.853529] ? __might_sleep+0x93/0xb0 [ 313.857418] __alloc_pages_nodemask+0x1d6/0x7a0 [ 313.862140] ? __alloc_pages_slowpath+0x2930/0x2930 [ 313.867228] ? rcu_read_lock_sched_held+0x110/0x130 [ 313.872260] copy_process.part.0+0x26a/0x6a00 [ 313.876766] ? save_trace+0x290/0x290 [ 313.880559] ? proc_fail_nth_write+0x7d/0x180 [ 313.885044] ? proc_cwd_link+0x1b0/0x1b0 [ 313.889096] ? __f_unlock_pos+0x19/0x20 [ 313.893090] ? find_held_lock+0x35/0x130 [ 313.897147] ? __cleanup_sighand+0x50/0x50 [ 313.901365] ? lock_downgrade+0x6e0/0x6e0 [ 313.905514] _do_fork+0x19e/0xce0 [ 313.908952] ? fork_idle+0x280/0x280 [ 313.912661] ? fput+0xd4/0x150 [ 313.915867] ? SyS_write+0x15e/0x230 [ 313.919567] SyS_clone+0x37/0x50 [ 313.922936] ? sys_vfork+0x30/0x30 [ 313.926476] do_syscall_64+0x1e8/0x640 [ 313.930349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.935200] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.940394] RIP: 0033:0x459879 [ 313.943570] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.951265] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:52 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x53, 0x7fff, 0xffffffffffffffff, {0x9, 0x7}, {0x0, 0x80000}, @ramp={0x8bf8000000000000, 0xe9, {0x8, 0x0, 0x7, 0x30c}}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 0 (fault-call:6 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:52 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 313.958626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.965883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.973140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 313.980415] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 314.076353] FAULT_INJECTION: forcing a failure. [ 314.076353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.091289] CPU: 1 PID: 13719 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 314.098411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.107794] Call Trace: [ 314.110370] dump_stack+0x138/0x197 [ 314.113988] should_fail.cold+0x10f/0x159 [ 314.118125] ? __might_sleep+0x93/0xb0 [ 314.122014] __alloc_pages_nodemask+0x1d6/0x7a0 [ 314.126683] ? __alloc_pages_slowpath+0x2930/0x2930 [ 314.131698] ? rcu_read_lock_sched_held+0x110/0x130 [ 314.136715] copy_process.part.0+0x26a/0x6a00 [ 314.141207] ? save_trace+0x290/0x290 [ 314.144993] ? proc_fail_nth_write+0x7d/0x180 [ 314.149474] ? proc_cwd_link+0x1b0/0x1b0 [ 314.153525] ? __f_unlock_pos+0x19/0x20 [ 314.157487] ? find_held_lock+0x35/0x130 [ 314.161539] ? __cleanup_sighand+0x50/0x50 [ 314.165771] ? lock_downgrade+0x6e0/0x6e0 [ 314.169909] _do_fork+0x19e/0xce0 [ 314.173350] ? fork_idle+0x280/0x280 [ 314.177051] ? fput+0xd4/0x150 [ 314.180236] ? SyS_write+0x15e/0x230 [ 314.183936] SyS_clone+0x37/0x50 [ 314.187286] ? sys_vfork+0x30/0x30 [ 314.190810] do_syscall_64+0x1e8/0x640 [ 314.194682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.199510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.204687] RIP: 0033:0x459879 [ 314.207859] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.215549] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:52 executing program 0 (fault-call:6 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 314.222802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.230054] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.237307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 314.244571] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:52 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 314.385662] FAULT_INJECTION: forcing a failure. [ 314.385662] name failslab, interval 1, probability 0, space 0, times 0 [ 314.399998] IPVS: ftp: loaded support on port[0] = 21 [ 314.413587] CPU: 0 PID: 13728 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 314.420710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.430067] Call Trace: [ 314.432665] dump_stack+0x138/0x197 [ 314.436303] should_fail.cold+0x10f/0x159 [ 314.440458] should_failslab+0xdb/0x130 [ 314.444437] kmem_cache_alloc+0x2d7/0x780 [ 314.448590] ? creds_are_invalid+0x48/0x110 [ 314.452920] ? __validate_process_creds+0x14c/0x200 [ 314.457942] prepare_creds+0x3e/0x380 [ 314.461751] copy_creds+0x7b/0x4f0 [ 314.465289] ? lockdep_init_map+0x9/0x10 [ 314.469334] copy_process.part.0+0x868/0x6a00 [ 314.473930] ? save_trace+0x290/0x290 [ 314.477738] ? proc_fail_nth_write+0x7d/0x180 [ 314.482228] ? proc_cwd_link+0x1b0/0x1b0 [ 314.486271] ? __f_unlock_pos+0x19/0x20 [ 314.490231] ? __cleanup_sighand+0x50/0x50 [ 314.494452] ? lock_downgrade+0x6e0/0x6e0 [ 314.498657] _do_fork+0x19e/0xce0 [ 314.502102] ? fork_idle+0x280/0x280 [ 314.505809] ? fput+0xd4/0x150 [ 314.508986] ? SyS_write+0x15e/0x230 [ 314.512685] SyS_clone+0x37/0x50 [ 314.516031] ? sys_vfork+0x30/0x30 [ 314.519553] do_syscall_64+0x1e8/0x640 [ 314.523509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.528338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:09:53 executing program 0 (fault-call:6 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 314.533563] RIP: 0033:0x459879 [ 314.536733] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.544422] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 314.551681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.558951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.566209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 314.573468] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:53 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[]) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0xa, 0x8001, 0x9, 0x800}) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 314.648394] FAULT_INJECTION: forcing a failure. [ 314.648394] name failslab, interval 1, probability 0, space 0, times 0 [ 314.661194] CPU: 0 PID: 13739 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 314.669094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.678453] Call Trace: [ 314.681045] dump_stack+0x138/0x197 [ 314.684671] should_fail.cold+0x10f/0x159 [ 314.688825] should_failslab+0xdb/0x130 [ 314.692808] kmem_cache_alloc+0x2d7/0x780 [ 314.696954] ? creds_are_invalid+0x48/0x110 [ 314.701271] ? selinux_is_enabled+0x9/0x50 [ 314.705490] ? creds_are_invalid+0x48/0x110 [ 314.709798] __delayacct_tsk_init+0x20/0x80 [ 314.714110] copy_process.part.0+0x1a6c/0x6a00 [ 314.718682] ? save_trace+0x290/0x290 [ 314.722467] ? proc_fail_nth_write+0x7d/0x180 [ 314.726943] ? proc_cwd_link+0x1b0/0x1b0 [ 314.730991] ? __f_unlock_pos+0x19/0x20 [ 314.734954] ? __cleanup_sighand+0x50/0x50 [ 314.739190] ? lock_downgrade+0x6e0/0x6e0 [ 314.743337] _do_fork+0x19e/0xce0 [ 314.746781] ? fork_idle+0x280/0x280 [ 314.750482] ? fput+0xd4/0x150 [ 314.753659] ? SyS_write+0x15e/0x230 [ 314.757358] SyS_clone+0x37/0x50 [ 314.760707] ? sys_vfork+0x30/0x30 [ 314.764242] do_syscall_64+0x1e8/0x640 [ 314.768110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.772940] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.778112] RIP: 0033:0x459879 [ 314.781306] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.789008] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:53 executing program 0 (fault-call:6 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:53 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup3(r5, r6, 0x0) r8 = open(0x0, 0x0, 0x0) fchdir(r8) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = creat(0x0, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000027000)={0x1}) dup2(r6, r7) chdir(&(0x7f0000000040)='./file0\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) close(r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r11, 0x0, r12) [ 314.796259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.803513] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.810765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 314.818019] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 314.943416] FAULT_INJECTION: forcing a failure. [ 314.943416] name failslab, interval 1, probability 0, space 0, times 0 [ 314.965523] CPU: 1 PID: 13753 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 314.972794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.982193] Call Trace: [ 314.984775] dump_stack+0x138/0x197 [ 314.988395] should_fail.cold+0x10f/0x159 [ 314.992536] should_failslab+0xdb/0x130 [ 314.996497] kmem_cache_alloc+0x2d7/0x780 [ 315.000638] ? creds_are_invalid+0x48/0x110 [ 315.004961] ? selinux_is_enabled+0x9/0x50 [ 315.009187] ? creds_are_invalid+0x48/0x110 [ 315.013492] __delayacct_tsk_init+0x20/0x80 [ 315.017813] copy_process.part.0+0x1a6c/0x6a00 [ 315.022399] ? save_trace+0x290/0x290 [ 315.026191] ? proc_fail_nth_write+0x7d/0x180 [ 315.030676] ? proc_cwd_link+0x1b0/0x1b0 [ 315.034724] ? __f_unlock_pos+0x19/0x20 [ 315.038692] ? __cleanup_sighand+0x50/0x50 [ 315.042911] ? lock_downgrade+0x6e0/0x6e0 [ 315.047047] _do_fork+0x19e/0xce0 [ 315.050487] ? fork_idle+0x280/0x280 [ 315.054186] ? fput+0xd4/0x150 [ 315.057364] ? SyS_write+0x15e/0x230 [ 315.061063] SyS_clone+0x37/0x50 [ 315.064412] ? sys_vfork+0x30/0x30 [ 315.067937] do_syscall_64+0x1e8/0x640 [ 315.071809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.076652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.081826] RIP: 0033:0x459879 [ 315.084999] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 315.092692] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 315.099951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.107202] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.114452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 315.121726] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:54 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000300)={0x20000000, 0x1, "dde62cb4b2fa390a32a9c468d931ac49c00008a528d7839c1fbb69f7e8150663", 0x8, 0x80000001, 0x3, 0x1, 0xfd, 0xc11, 0x9, 0x2, [0x9, 0x4, 0xffffffffffffff75, 0x2]}) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000400)=""/4096) r8 = fcntl$dupfd(r0, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="dd0405998a188b020000f2652c00"]) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='\xaf\x00\x00\x87\x00\x00\x00\x00\x00\tG\xf2\x90\x81\xec%DW7\xf1|\xa4\x0eQ$O~wl>\xf2=\xf6\x06N\xdfv\xa1W\x16r\xef\xcfW\x0fH\xf2\xee\x8f\xe7Z\x85\x04u(K`\xa5\xee[\n\xb3\xc8\xfb\x86n\xd2Km`\xfd\x1d\xc1\xf7*aB/I\xac\x19`\xa9\xfd\xde\x85\xd8\x06$U\x1c\x03\xb5\r5\b\xee\xfd\xd2\x82\xa8\x1e\x8dm\xaf\x86\x86\x11\xc1b\x1fb*<>(\x94@\x9b\x14\xd1\xab\xdcX\xd0\x1b;)v<\xa1\xf4\xca\xb8\xd1\xf8\x95?m\xa3\n\xd6<\xc5\xdd\xe4d\xf2\x1f\b', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8c6dd03f945d4382, 0x80010, r10, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:54 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:54 executing program 0 (fault-call:6 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:54 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:54 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2eaa00737abae50000000000000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 315.558214] FAULT_INJECTION: forcing a failure. [ 315.558214] name failslab, interval 1, probability 0, space 0, times 0 [ 315.569771] CPU: 1 PID: 13770 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 315.576879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.586237] Call Trace: [ 315.588829] dump_stack+0x138/0x197 [ 315.592508] should_fail.cold+0x10f/0x159 [ 315.596667] should_failslab+0xdb/0x130 [ 315.600643] kmem_cache_alloc_trace+0x2e9/0x790 [ 315.605312] ? lock_downgrade+0x6e0/0x6e0 [ 315.609463] alloc_fdtable+0x7f/0x280 [ 315.613276] dup_fd+0x693/0xa40 [ 315.616561] copy_process.part.0+0x1b5a/0x6a00 [ 315.621250] ? save_trace+0x290/0x290 [ 315.625045] ? proc_fail_nth_write+0x7d/0x180 [ 315.629522] ? proc_cwd_link+0x1b0/0x1b0 [ 315.633576] ? __cleanup_sighand+0x50/0x50 [ 315.637795] ? lock_downgrade+0x6e0/0x6e0 [ 315.641931] _do_fork+0x19e/0xce0 [ 315.645370] ? fork_idle+0x280/0x280 [ 315.649067] ? fput+0xd4/0x150 [ 315.652242] ? SyS_write+0x15e/0x230 [ 315.655941] SyS_clone+0x37/0x50 [ 315.659290] ? sys_vfork+0x30/0x30 [ 315.662813] do_syscall_64+0x1e8/0x640 [ 315.666681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.671513] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.676704] RIP: 0033:0x459879 [ 315.679898] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 315.688123] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 315.695381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:54 executing program 0 (fault-call:6 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 315.702634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.709883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 315.717133] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:54 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") creat(&(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000400)=@v2, 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f0000227f74)=""/140, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in=@broadcast}}, {{@in=@multicast2}}}, &(0x7f00000000c0)=0xe8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 315.775340] 9pnet: Insufficient options for proto=fd 11:09:54 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb1e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x565}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="bf0650a05abf1e8997569619412a1eae"}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x30040002) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 315.868799] FAULT_INJECTION: forcing a failure. [ 315.868799] name failslab, interval 1, probability 0, space 0, times 0 [ 315.894387] CPU: 0 PID: 13789 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 315.901519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.901527] Call Trace: [ 315.913475] dump_stack+0x138/0x197 [ 315.917114] should_fail.cold+0x10f/0x159 [ 315.921270] should_failslab+0xdb/0x130 [ 315.925250] kmem_cache_alloc_node_trace+0x280/0x770 [ 315.930354] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 315.930373] __kmalloc_node+0x3d/0x80 [ 315.930386] kvmalloc_node+0x4e/0xe0 [ 315.930398] alloc_fdtable+0xcf/0x280 [ 315.930408] dup_fd+0x693/0xa40 [ 315.930427] copy_process.part.0+0x1b5a/0x6a00 [ 315.954983] ? save_trace+0x290/0x290 [ 315.958788] ? proc_fail_nth_write+0x7d/0x180 [ 315.963287] ? proc_cwd_link+0x1b0/0x1b0 [ 315.967361] ? __cleanup_sighand+0x50/0x50 [ 315.971601] ? lock_downgrade+0x6e0/0x6e0 [ 315.975760] _do_fork+0x19e/0xce0 [ 315.979226] ? fork_idle+0x280/0x280 [ 315.982949] ? fput+0xd4/0x150 [ 315.986138] ? SyS_write+0x15e/0x230 [ 315.989842] SyS_clone+0x37/0x50 [ 315.993197] ? sys_vfork+0x30/0x30 [ 315.996736] do_syscall_64+0x1e8/0x640 [ 316.000607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.005888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.011063] RIP: 0033:0x459879 [ 316.014235] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 316.021924] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 316.029177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.036432] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.043684] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 316.050937] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:54 executing program 0 (fault-call:6 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x1, 0xa00) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0xc000, 0x200000) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0xff, 0x6, 0x0, 0x0, @adapter={0xffff, 0x6b66, 0xffffffff00000000, 0x7, 0x1ff}}, {0xffffffffffff0000, 0x2, 0x0, 0x0, @adapter={0x8, 0x20, 0x0, 0x0, 0x6}}, {0x9, 0x2, 0x0, 0x0, @irqchip={0x6, 0x1}}]}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb0, r5, 0x202, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0xfffffffffffffdea, 0x8, 0x10001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1a) 11:09:54 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8000, 0x18100) connect$netrom(r3, &(0x7f0000000140)={{0x3, @default, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x5, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 316.223612] FAULT_INJECTION: forcing a failure. [ 316.223612] name failslab, interval 1, probability 0, space 0, times 0 [ 316.235602] CPU: 1 PID: 13807 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 316.242714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.242719] Call Trace: [ 316.242737] dump_stack+0x138/0x197 [ 316.242755] should_fail.cold+0x10f/0x159 [ 316.242769] should_failslab+0xdb/0x130 [ 316.242782] kmem_cache_alloc_node_trace+0x280/0x770 [ 316.266626] ? kasan_unpoison_shadow+0x35/0x50 [ 316.276297] __kmalloc_node+0x3d/0x80 [ 316.280095] kvmalloc_node+0x4e/0xe0 [ 316.280110] alloc_fdtable+0x13b/0x280 [ 316.280122] dup_fd+0x693/0xa40 [ 316.280142] copy_process.part.0+0x1b5a/0x6a00 [ 316.280158] ? save_trace+0x290/0x290 [ 316.280168] ? proc_fail_nth_write+0x7d/0x180 [ 316.280176] ? proc_cwd_link+0x1b0/0x1b0 [ 316.280195] ? __cleanup_sighand+0x50/0x50 [ 316.280204] ? lock_downgrade+0x6e0/0x6e0 [ 316.280219] _do_fork+0x19e/0xce0 [ 316.280232] ? fork_idle+0x280/0x280 [ 316.299424] ? fput+0xd4/0x150 [ 316.307949] ? SyS_write+0x15e/0x230 [ 316.307967] SyS_clone+0x37/0x50 [ 316.307976] ? sys_vfork+0x30/0x30 [ 316.307989] do_syscall_64+0x1e8/0x640 [ 316.307997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.308014] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.351143] RIP: 0033:0x459879 [ 316.354331] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 316.362043] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:54 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 316.369313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.376584] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.383855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 316.391125] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:55 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 11:09:55 executing program 0 (fault-call:6 fault-nth:9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:55 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000080)) [ 316.520292] 9pnet: Insufficient options for proto=fd [ 316.586870] FAULT_INJECTION: forcing a failure. [ 316.586870] name failslab, interval 1, probability 0, space 0, times 0 [ 316.624251] CPU: 1 PID: 13834 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 316.631396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.640762] Call Trace: [ 316.643363] dump_stack+0x138/0x197 [ 316.647009] should_fail.cold+0x10f/0x159 [ 316.651178] should_failslab+0xdb/0x130 [ 316.655163] kmem_cache_alloc+0x2d7/0x780 [ 316.659316] ? dup_fd+0x533/0xa40 [ 316.662776] copy_fs_struct+0x43/0x2d0 [ 316.666666] copy_process.part.0+0x3924/0x6a00 [ 316.671262] ? save_trace+0x290/0x290 [ 316.675068] ? proc_fail_nth_write+0x7d/0x180 [ 316.679565] ? proc_cwd_link+0x1b0/0x1b0 [ 316.683637] ? __cleanup_sighand+0x50/0x50 [ 316.687990] ? lock_downgrade+0x6e0/0x6e0 [ 316.692154] _do_fork+0x19e/0xce0 [ 316.695617] ? fork_idle+0x280/0x280 [ 316.699345] ? fput+0xd4/0x150 [ 316.702538] ? SyS_write+0x15e/0x230 [ 316.706257] SyS_clone+0x37/0x50 [ 316.709622] ? sys_vfork+0x30/0x30 [ 316.713170] do_syscall_64+0x1e8/0x640 [ 316.717058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.721910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.727101] RIP: 0033:0x459879 [ 316.730289] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 316.737995] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 316.745267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.752540] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.759813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 316.767091] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:55 executing program 0 (fault-call:6 fault-nth:10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:55 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x20cd0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x25) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000440)={0x0, 0xb4, 0x40, &(0x7f0000000400)=0x3}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r4 = creat(&(0x7f000000ae00)='./file0\x00', 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000037c0)={0x1, [0x0]}, &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000003a40)={r9, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f000000ae40)={r9, 0xaa, "a687491b754c51e9a6788bdb688fbf73682e002f008da66ff2e47458ea26cf07a5d798d140f04bded0dced52764701e48df7aa04917422124dd085e674fcf04e3f6882f3f6e39d16a4d7f1d949e148b981b309c03a391cf9b1917082e2881a5bc3976173657d2ec40f0e5ea54b339286a35169934f2bb29a82df5af215eb8613a0c72c35171daa3a92aad96d78e1f46512d93d61bd113f87ca22b07acf7e2b08a28c2d5c922ca899059e"}, &(0x7f000000af00)=0xb2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000000af40)={r10}, &(0x7f000000af80)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_delneigh={0x80, 0x1d, 0x10, 0x70bd28, 0x0, {0x2, 0x0, 0x0, r2, 0x4, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r3}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_LLADDR={0xc, 0x2, @random="4519972aa7ad"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_SRC_VNI={0x8, 0xb, 0x8b9}, @NDA_VLAN={0x8}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x80}}, 0x4000) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000440)={0x0, 0xb4, 0x40, &(0x7f0000000400)=0x3}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, 0x0) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_delneigh={0x80, 0x1d, 0x10, 0x70bd28, 0x0, {0x2, 0x0, 0x0, r12, 0x4, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r13}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_LLADDR={0xc, 0x2, @random="4519972aa7ad"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_SRC_VNI={0x8, 0xb, 0x8b9}, @NDA_VLAN={0x8}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x80}}, 0x4000) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000006000)={'team0\x00', 0x0}) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000440)={0x0, 0xb4, 0x40, &(0x7f0000000400)=0x3}) getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, 0x0) getsockname$packet(r16, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_delneigh={0x80, 0x1d, 0x10, 0x70bd28, 0x0, {0x2, 0x0, 0x0, r17, 0x4, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r18}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_LLADDR={0xc, 0x2, @random="4519972aa7ad"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_SRC_VNI={0x8, 0xb, 0x8b9}, @NDA_VLAN={0x8}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x80}}, 0x4000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000084c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty, 0x10001}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="eeac5db603d0c5ca3d43963ae4a9b6e3fd0f3c2e086b8d6e4ee2bfb84f40cc2994c99e93892dcadcea61ada83ffeb6df59c240141fbc45ea0b7a8a1d56b132af03b0dc2fa0", 0x45}, {&(0x7f0000000140)="e75943809ce5f4b5f5abd044fd2b9fa643c8350170bd02d5cb4a47858a1912caeeea2133d49affe96bc0e32d035b4f9ef4a4456ac43b3a61ab", 0x39}, {&(0x7f0000000180)="98e74d599f5e629cc74547d79564939b6a3efa262b5b73dc9a8bf36a7a23538365207db473f56c5ce451cc75114d5dd4a48cb85824b93df8c59363e319a5cfec0617c780d9ab5099e0e4bef68aa6db820d6736d57899611c6486debe65a545b32d99c9d6be8921222ede114964c07d85fb73215751beec5f3f711716bf88c4477aab3327483e8da937c357c64b996a095ee634aeabde0965da0324075a470769", 0xa0}], 0x3, &(0x7f0000000300)=[@rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x1, 0x3, 0x0, [@rand_addr="d89409a300d88c7c2b55956df30f61e2", @ipv4={[], [], @loopback}, @dev={0xfe, 0x80, [], 0x18}, @dev={0xfe, 0x80, [], 0xb}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, [], [@jumbo={0xc2, 0x4, 0xffffffffffff7302}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x7, 0x0, [@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @local, @dev={0xfe, 0x80, [], 0x1c}]}}}], 0xf8}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000580)="db455a8ba937acce9df5a8671b2aa5003b0f6797c06d258411e2449f31ae706c65f78cf7299ac5c2484dc1bf77926f4afacb0c707f87a50abdb64ef327f68fc9daa81c02acf84094ee9f4a3aa911026583601443b0c8b72bf145e12957ff262903c5d5ae17ac060552bb9374a0c494efc78bcd92f9e0497b19608f5beb589a8d123ce0c8b832bb8ed74e978801ed1e83b500b7dc5c42f592d8042ef30b9824fc61ae3bca46f2e2e1505500cb98db7c50be09707d9cf3a127bb331bd4d97d91f90d4573df8fbf9cb98855d59473c2b7ce0a7f5939e75d", 0xd6}, {&(0x7f0000000680)="edec960373eafaf9a4df5527470065e800f8027afae416af8afe9722140aa4dec6fc5930a06acd2d4abceb23304c9ee0954d2e72f03b971953e5f373f7904b2cff926fac63013a64cfabd2d6ba9351df84bfdf2b2519ea90b97af217a64e39b7b5aaa5104407819857a0b0fd37dfc9c3faaf13878ad9", 0x76}], 0x2, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x363c}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, [], [@enc_lim={0x4, 0x1, 0x10001}, @hao={0xc9, 0x10, @loopback}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x3, 0x9, 0x0, [@loopback, @remote, @remote, @ipv4={[], [], @multicast1}]}}}], 0xd0}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0xc07}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000880)="56501022842e89c78662fb11d15400a7731763fbc3be3ea9c782d51d1e3f63923ea56d08cb5acfe20bd6643cf2d7d3864eced703c65c07bc7f44c9bbb596ad64590755", 0x43}, {&(0x7f0000000900)="f3a4fa275c5f6e901773a1c20ad0ec6f2cee1d369dd13e17571e57dd363d4adec2b25fa3236c143ab7271e11a3b1b1d5d5bdcb532cf8da5e487141b7ed768b5c639dc27d31ce9af3013b4b4a2772", 0x4e}, {&(0x7f0000000980)="7f1f825ea77230ad2d3165ee7461b4ee", 0x10}], 0x3, &(0x7f0000000a00)=[@dstopts_2292={{0x100, 0x29, 0x4, {0x32, 0x1c, [], [@calipso={0x7, 0x20, {0x10000, 0x6, 0xe6ca, 0x401, [0x7, 0x9, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xac, "25f55188f9e7c45ccd490131d93054b48048a3179fa1e04ebe36ca3164bade79bde3e6510bc0081d58a34419172f381cd71c4bd8b7f714a5124cb956598042448ceab490035f6ffd89d6fa1f7280b491acf58efa1b40938b8b815b86be671959cecadb017a5967fcff280a4287c636ac9c06ecae2ff2e3d187ad576421961bfd872ac332477a3f9bcaf9b4a0ceacf6398ac66c2cb3ca9fed0c555d1beb46008c4c8b27a4bd22858dabab79b5"}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x89, 0x9, [], [@ra={0x5, 0x2, 0xffffffffffffffc0}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x77, 0xc, 0x7, 0x40, [0x7, 0x2, 0x7, 0xfff, 0x0, 0x8]}}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="f544995c439560646cb3c73176e9f0009c80729e053bf39654f3a4cdcec087dd42be09e8dcca95ae5210a07ca982354998bbf6c6a926ecbd1c6010bbe2659029990aaa229dc391ca20609c7adfc6ef735ed062df579eae7d7ae66c0f95795986c9679846f5a8a2659c81f90afa3fac450a7189087c439123cf9d98003ce14942fe401567001075dec61ca7ec5188d23649ab76035a09a37c22a3ca1478ed58abd220d26b48db3768f25082f3642011757295254beab367f8f9dcae51", 0xbc}, {&(0x7f0000000c40)="b847c9f3a22081dfe189914401cb8aec5bc09f4dd7016cced7040714f1c29c711dd791e2a008cd", 0x27}], 0x2}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0x5, @rand_addr="df9c72c539806bbb7689d694466a6fcf", 0x7}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="441efa9af2ef98ec8ec9e1e32e1703bacf96e40af499072b0be9a90ea2b0b10dfd401f0529a798ae6d5366ea00287e23dadea31f354f2e85b81ec54c13f27a738c075a66878155d09450c3a5d4b6b72d5d51e7b0dc1d734f6cca2948f1cba609a8323a1889e40072b98808d24e00a5defda1c46a5537e03eb4941a9e4735eda9e86b2782eb73a9554e48d928731db3903f5aac2e86e8c9643ed2ed660042ba78df3409a5bc3597f9", 0xa8}, {&(0x7f0000001dc0)="5e2ade711d9772b5afcb9b764302fb9657dfc22f340b6e4e", 0x18}, {&(0x7f0000001e00)="554d10990539db845dd2ebcdc56a6229d78a1762fbe336cfb316b1299cbfc3f7cf62ad2e4e7dadb128b832b01f5268bb3ab68e8fdfb7d9792ee8966f7c0db4f78f4a7a1f5d7a9f218e635dd53fc07bc36f477b98fb3b334cefeed382af8b2af9b4365903e487901cf19d476fd8df930d3bed1e7c18957944ed6a526387d6337c22fda15b5b76cafed9ce7aaa858a548e264953deb66136", 0x97}, {&(0x7f0000001ec0)="c7620a133412ac5f6125f7f064b5d19bbf1d0b1dd07f041e58b414466c0c0fd7970961ac7e870493d059a604f81ce0aa9ca5ba7fee8d220b2c3706beccc6de0dff1a7b067dd98ce1ae556f52ad7455fa42592f3a2c29432124b44ca01f5118a1aad2794c8612", 0x66}], 0x5, &(0x7f0000008740)=ANY=[@ANYBLOB="3001000000000000290000000400000000220000000000000001000502000101e761c8fd1d70fb146892dce6c15dc4bec6e44060da103ef5002397522e2baaec627a6eda7f632b5f35ee49fe949d3d3e0498a5cc40d4db4e5b366b098f7f51cadf53d3761a86037dfb6b80606ceb96a5dd5c10fe9aeba5b2d4ee496e4e7938fc512a5e84b325783e5fcec56cd4aa6636c5dd03f24d25cf4e4d2378885199e4ac3699a2e2a61ded75457879ed7bb51234c1e57939b7a0fcac6cffac3b3eb7480a3499a015c2cfdbde2334c4692d7272be9f146eea2feab53b2897fbad0dbdb295a5baf673906db2f60b4101435eb65cefdddb7484f33b5ee6cb5723f128f8abd79e611e547dfd2d7c72b91f2c9bfda90720000008e60600000042168763000000000b0c000000000000f7ffffffffffffff000000000000280000000000000029000000390000000002010000000000fe88000000000000000000000000010128000000000000002900000004000000010100000000000001010001050000000000000000000000280000000000000029000000360000003b01000000000000000100c204000000030102000000000096adf6873c39007d21d218556eb1518e1c4c2d74fb7a907d64e1a51f4f6656c9dc6e6764c073441b2ec31836f3e19b29a01ef55af9e1e8219860a25c4fda619197363eddabe53de329be003ea59dfaeb0f4cdb480267845e455cc5dfe0925e045561553657fa90734a44c1778dc674543ecf82bffc4f09db182470a6cd4b14e36584a09ac62c7fe0be5081db07a95b743e2b286e83a5b05207788f4ffb9603d97a909571f344f74d093a32d40912d385d1c686d7f90fcef1"], 0x1a8}}, {{&(0x7f0000002180)={0xa, 0x4e24, 0x0, @empty, 0x1}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000021c0)="bf429d2007cefd99d400529bfa9706ace91ca39219be69b4081d16a8f19bbd40d6b3d292fa82989fefab26d6ba314604f32c36c03ce834f74e0e70f43168288a23ab3896f8607298bb2c92c5b691b30a3fb4beb64200574bee8a5318585c55814e3d115c141eaaae180d0c6fb9cf410b17388160d0288cb295135114d846eabb9e69f9ff69d0508a1ea2c80316f0ef3d1b38994338234bf3b1bd73f3a6", 0x9d}], 0x1, &(0x7f00000022c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @dstopts={{0x148, 0x29, 0x37, {0x68, 0x26, [], [@jumbo={0xc2, 0x4, 0xa78}, @calipso={0x7, 0x18, {0x100, 0x4, 0x7ff, 0xfffffffffffff000, [0x0, 0x3]}}, @ra={0x5, 0x2, 0xff}, @generic={0x8, 0xfb, "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"}, @ra={0x5, 0x2, 0xffffffffffff232f}, @jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x33, 0x4, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc5}, @calipso={0x7, 0x18, {0xff, 0x4, 0x3, 0x1fd6, [0x3f, 0x7]}}, @pad1]}}}], 0x1b0}}, {{&(0x7f0000002480)={0xa, 0x4e24, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000004a80)=[{&(0x7f00000024c0)="1a05ac792ceece7396715d9c19bd822f52bf8f4d2be9a6f1a2391a5e820b4f27d6d5b64913c74b6a8da3c4d10d7b92df8fe0df73bf3fc971aeea7298b7119ba480a0c6a3003e3749e94dacacb134319e873aa7597c071fa0f805f1c69ccc55fc6a1a96cc56e65c400e32bf967d", 0x6d}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="628d46ef325af8b12ec0a43c179b356d15f199fd60d28a9e6d8beb7f11e13834861e6b761a0b43f57d0ea19b3633d051cf8abfe8", 0x34}, {&(0x7f0000003580)="b596fac0488a999f1d82ca2387e71b60f092300b73379ae4ec0e45c2ee0695381cad008a9e199bc335f80ab4e9567320197a80cc187ceecd20df42f05ae61d0995284799827f42a2587d76864d4413d9485656b89d61433564e9a338ba38c6b7402182ae2f7d812a4e409731141ecc2fd2fb3f1724deb9d74edc6deb1722b2b6745cc6c1cf393371c152b98932d9b8a31374ef83b88c524f3e23b8554699a682dcd11bc55486168b6ebbffea8e0b9041147e1ac5ba27b87f395e472b9454ba7710ab4aaa18fbc8eb80b1c4297735d34920c713155f8cd8b938823b7b8abbef8510b155fa303407ac5d99b50ab3d06acb3fce6aeb1e8a1e16c57a7fd8a305707fe7e8ca9c7dd4bc8a2d13105042e91d8a3f7d810672e353973254c25a58a87192d15600528ec192b945ab268f99c63808c48d044cfca8fed648c73fa9011962bed6d1b02b13f7eab74e5e9bbfc64caab186c610d3e6f77abd2eea8b9955555d41df481ea904fd849cf21023d52fa81b0b86f2e78e097b07c6bc9850a7509b1c737ed27b70bd2570d33d07a0403399f3a1bcc21c18d212b305ed116a0dec1abe804a7401bbb64f5d1c70e2a65fe4a9ba01bdbaafa6e3e319b1b1592a38e74d8a04c8b7ed156aedbb9b223ab1322dd27044341d298fe2488c008de5f3c52d10721fb22ddd40ae144f7e8edaf5d805652b6957fd75187f4b689e7b5341d12ed28af671b64c45fd8d780790a32e06b2daf19ddedf92bef23a4d4faa2682c83450606172a860387c209688fabf9ab18db3a122c091fb3d6929f700cf364423ef6c51d6765079845ddee1325c6733b6c40d5c583ce4734c6147c73b87d81d843741d05f478086585d7f969740f90d138171b64dd40f5392e19ee171ab37d212dbc5e138b8877c85a7a53f3dbec64c3afec4bb35edfe9f93edacf391b280f8fa2750a388ca035c9f9815b50c826498b852fff307d7a02c9e1dfa84c105141b6198ab60fa223f69de23650d68f2488a3e56b37c5c0007cf12f323c40a779026c954e088e4a1fbdff9c915b94d53466e269fe6b38593a2b195cd00638da246303b72ace7083a73c2c99f95d7d7597b3dd0ddbf149f748c7b076db60cb166d7cfc35a6c5201492989abb9bb26cd006f4ff9fd0899802986bebfc554d9ce0b353a246d7d39b1d4158c2b7171d655998541f8f35a3891a4e13b980e7cf4a7addb3fd7bb348c43400780f0211dd1f54f9829606e54cc10ddc887f83bb117c8eb025465bbf20388a4d562e1547358271dd1c76cd914cda5c5bdd3792ea67b8705fe704e53618392079e2ab28bd76441f04e3fbf47d101294fdad7429612d2e4f60efded0eaf41d24ff54a319ca19776d229e94a0ab3b6e6ed0ace725a2b2cca0043f0dbda7326fa2f7b778d3764f7021218d15963478245a7be14b10b7c1aa65fbe545a405e66fdfa945e68e42a1dd47049a514e42cada4c2ea19a6adb847883083b3251d67c3dc5762a1e5f429522eec1709fc95cbb0861f73b96cf345bcb3b2f4347d0a70274cad06c66cd414d368a9000d408998e690ae492e0b77da0f52a8da5670cb7e50aa47f12739258684844adce2f1b2acd26b22d3c5732b6e6d7b1bd1605eb0ceb63fb93d010318d239118886b4e1195c15c41a9f12cb0b4b73285e61f4b7d82aea44f63f41315710d9d8ef38b4345bafb9bf767aea8bfa5213eb1a0ed27701173148aad53334c22caa12dd03217f5fc5fd15e2a3882bd07d1342aea43bc50febeb6e6e6a9076179968ea904d7def9f95a913f9ce0f65392af6a9820a13f8aa07d04c49045dacc6c1899c0af776a65a33653e9e27337b6268ec23e88baa3dc04526d0e42cc83d0bbb2039d0bbc20ad89ac4c4e426749509b933cabe13e15ddd1eaf5281fe6d8281ac930ffa211bd463bef5bbee5e9b936d37a275aeda3c7fec71a020047113cda14eb269cde6ab342fdf1dc536c2f894f03138ea5c1a9f3c5e04ae1c94ac7e7e2f513c6eea6bcb5e66494edfc577fdc658f2a14547c3ab215f520eeadaa7cb843de2a10cad9f5ae81110bb8f2532d750ad4cb787b32e107069e7f3fac7f76b0ba9cb476283436e40cbcd280e1132ce6ee5d9f495153169dd72624da1ea4485dc9f29a43014761114d9dd91b12b42e3bf1d93216ee9009cd1502227b0b123819b3c9e6ce6f8c2ca5ac9ab301f262046f3bf99a57fab08e585559b06b533e858cf1dfadfbe4cd2d5b4f1762b13dbb29e23693885217cc1969d7eff95f3405cb3acfa00bc45e28f6c44a55f64571096b079ff9b52f2cd4e7b5b32c9bbf04f4dc780bd8a0c12be54ef21ac9a16630b1e17c086e8d6e2ed810bc89cf3bc7528d8a8edbd435f2502651635070f8bce8f4d1871c4eb04ef621fe8d5cf8d96fce58be3d1db2b5a4b45540334ba45e3bc3309b3425e4c3449e70410256662ba03804c6cfcd631d002649520c21c3b5316cd8c6b967a16476334e4a21f0f810de14b1235e7411feb7d1cca13823a88276840fc10912813510292082dea3fc42187f16c733bcff66b10a79d35f7810ae29e2a9caf7bed4f8986f4ca39cb72faf4dbf55955092069ab8283cc88444a52b0e858bc14294d313c8e638897e49fdde49a7d6b29b6bdd223166efab0363327128fc24fc1edd6f0a93f50f687164b76abad5b6e42763a88385cea44f5d58f98085a1783c929e9a9adf49e6892af66d26bfa8fd35b237ba722a79eb08ce46360b7a09b9c6db1a6f10d1e38e3c3f453b7610dccfdd09a1d57faff107ef44b93c448855b801f50097da0092582d4f0a65a66e72e46d6549010b6022f923840048427f1c678e15d2d0f1b2c1c04d27ec7cb58e7c34b0b9ae7b68432ceff4308685d60d25849d98edae2643240c7ec72d44873010f0c804d73c920ffa2ecf13ffafb5347bac8bc2187877e1f3fb70d9edf7405a99696a7594735b20dca630b05999b08060ec4c83be215ffc1b4ecaafba798f49a2cde98b352f2615004749d71c1318f10dc612a4649df400c160acb01585bd7c4b343ebfe8b43d7a1011a5051c27c95d2cea262010fdf08e365cfc94a71954d3c436f52e723c868fac6731d842592e646ad2ef7c55b01c99e69354d0ae3f854f8fc4f4868b16336f0aea4286953b80f72a37d76d0356f4ac84d8cd927154fb498d22201ddda15905f5d14a4808abcbe710545075d3c67f3a3843b5bd434c0f94fc96e669ea08d341d923339da8d5299e835dcbcd085eca5e752b6d51296ff5a465e3c1ab4b9342daa8743fca6b7b705a60ac24edf9aa8120703b31158a1b5fed39326c59352578ae2b5607a2ada328bd236012c21708f99e6f26c821b86a67c541943ab0a5bce921b8cc76fe483ce0035973c6fc0c6a4f4f359325edd35e3b8807d509cfa3db4f0e7a94c024c0b3bf9026163bfd84d15c9cc6c3ae6c34bb7588b2c24ab826abb618bb0ed14139d217ea6f85799a0186057cb835e58bd610a2c63b2d7e4b4977e173799196b8031f6871648bd3c1f585ba286e636bb73dfff656ae1e5f3b0586dcc340d426269bf1daacc1b9b4bea8788092ec8efc40a53f6b74e45616983055f0f9253101fbe35ec6195ec37200d90aeac6d0156278d91ef6066e50676d92880ebb665460269d7df84b5c77d8c23325a3d532d5b33a2011e9f33ede116dff050aa429a3bf315ddc9a7c54c7483f3a36e84a7e687de42f6321a4e1d429b14d8f5c168e63675eb79e779d59df2d285ecc000d2e2783a432cf6d00f41188ae289e6a397e04b7259d8892a724939712382bbd32f9fb7eae2c111e58f9808bc060e0022942f78407f5e54bd664ff55f8e976a7d15785ae8bcab92bcab84900beb9279b15b3f20d019eef01a09c4dc1d2e93d88a2e42641ac4db09bb3b5a33bbc7622ffda3a137877ef075d2340d43e7038f60513103d68dd3ff0d59ed3b6e826fb2ef83d0a2e573e99c393c657c3c26c484cefe78c7a01b03b689e45ee4359fd170c69e5b1229bf7b45a06103e35bd6ab49724939423f6e17b98c7757d7c85a6738c3b99b67d1dcbe5fc08fa479f43f5346e3f32e7ef51027d6d7187033b3132481d88c17db1f616c958f1a502ada1220007ddc131ebc490bead32ed711b8a78bba1a6a8815df1ff2fb329ddbd18ff7248a9ceea64af1a4130fd75dbe990fcdc37b0c9e888f1ae1c4154ce31b91c52a2c95a8e61501b293c726daa8d6aafbffba5c298509dde73f6c8aacc754e7f350d28f866d0a8e9efd06fda671975960d75ae283bf347a45b12600d50c1c9e190c09dc2cfb69de87fad3354900fe58b9c552bff0ec011e18ea2bf57db45145d40e9bd009ba062ffaa2d5f3c99cee3c60f1be439b06979133214df93ea02c1c2154f82c124d8591cd9d9f7aab0b43e9d70b2e1916a6567ca4a92e34635893f223b2e1f042f2818b2bdc2fb4160ed406e27744b25575473f9db34513386c04a853c0a4d22e458d6e02adf35bf5f6ff56a0b43aa1eb33425a212521eb6f88f5549edcd9e6f86d98e4498220109a658abce86fe77435de88e23e0781dcb69caa331c027131ffb484106e5cd7f62f9a015d2cd902225710cd4b769d0dae9fb046c97c81eb7a5dfb6882172b6c635bbb096d72d6dab9321e4d5600f7d68f2719bad1ca845a16b6b35feb64287237e565a4245a1f1a09ffc02be21e075827f3af50f4b7475cbc3d06655c07d496bdb22839e150c0a0158165fa27ff1490c60ed361cb598f8596cdc948fbacf7fc56b479fa5fd7e8b72729b6eebc194c8d144cdf1986d0db9a8f6a47aa2c0a77a83b8e519402759365d173139467ff157868f17b8a112da6fb12b0cd3de75aa06acef796503a4725316a708957b62d7ef293bdf8da5a2c4cfdadea257582c838dfad63c660bdaf06149da093d46ac008e1e09f3fde7ffb3cb5cb68645c7df266de58f527d05d47408449bd178fa472dbf267107fc5db704dd980ff6b2f89958288e0dd76c2ff70083c06e5e51147a109269e00368d9964966176a7d9693ffa1407aeece5b2c99f8eff67b43f437acd283dbf1a00f66a4f87b5c2f015c1dd76e52d33d0c95a4cf372a4864246e34c9b735f428506102d32235027828cf3982405113737a52cc2a3b472095602438eadd2f7d263d018136be1c5e323939575b6ec81d7154b37d24b239b8a7c6b66c317356c26f0df96691111636f8b7a428f09d4094205e0b7eb02ebe99718485f7009a89aa96e24b2718e3f5144b7f51a2553ccf89d9f00e2b1655b65135440a11a2bf66d4206f6b9847091f7578f221f0046f0bcf8ef7446c1f73fef0b41afa3fa31377916c4facf231eeb12b28f4b8592516537e75d0fd6668faaeec5b341c650afb66df769d2cb61db49ef34737dc95bc9c219c1048bf376084c0a975530bba7467bf1be4a9618cfcc10c0ff1b3950b2d6a51f6c5a1c5e224351a90cd3be60387b8394cde31692d7cddfec0182aac8fa7808d6bafe8e7382030ddc8346d0e2f490fb953850f277f746fdcb29bcb6eda7b61f0adc3708f5733386ebc5a44f75b47c0f147486653fef19a8e0d891e1c86d97adf21f4f29c1e72ab226e5d485a142a39a9b171567ac117a8882b76061430b6705ff4e2269838a5a46677bfba5b23371e1e1447db887b38dffebcf5bfe6dab91d432fb949bf92f17d5626b6b24891e16bf59ae7479867368f352a0d87e97fe9b9b0671ac153417494f55833be601b31044f9f4e0386902b28d58d9ea29c48e888e63d0bdc9907b68f0e68fc848e88963aba3b901e30aefb2bd1872fbb2aeae0e24d4e6e51bf4", 0x1000}, {&(0x7f0000004580)="5a7d16abddc28dc80c2fec1ff7ce701dd1a9780247f5ba03637144a61602df09e5d2e694f26a039ea6d6f18b27d8196583845caf0fdc0897a9821e03bc168545647f680030bbd0f4df25dd2d7244fae9", 0x50}, {&(0x7f0000004600)="662deb9aaa42e43ee1b13261be2f221f742e64e0f6f077266057f40a7adaa971c81ec648b5d1d2bd42294fc6ec91d8b9a4eff1dd5fd7621e3b7def6c20298b0e901b6820f3b8f690b48bd3d6288a683bc1c184e0fefb23db2a040a407b44eee5aeb393f320015e8e2c65895f518a6ae838eea0a6364475965f87c3579a930d79560b558009e298f5c2e9cf5e18a1ac198b44ef85f6d16ac7764e000c5f4776b1e7492e7a20a3922e48a4012fa1c859229eaddfe6883a98e1b53f124b2303e9c99c3d2f27c4b06a3fc28587795ee285ea3e52f7ac27facd440f07", 0xda}, {&(0x7f0000004700)="3e5850afefbb2c1d60aa62e4022f2524fcd8b418575658f955f41837d38926454480b9b9b20760ef6039413c50b696a4f61c9a3b9ea86f2e7726fbd1b87f124ebfb1cce86ea66cb7b1ee069ae35b01e7fd207953bcaec1ddee22c534396f4d91154d8fa74ba610e83c0f6a13aeb07558e5cedb8445977734683f5ccfa4a47bb6011b49032f5932d31e4b4d9c112ebd6660197486f0572d8e3817c63a3ddf11e109eacb2c4356a5a58467de19e9e209be168fb22b8a7d37614e5f517c7577ce49e7fcab8737d5c4b8f16505c0a665d6", 0xcf}, {&(0x7f0000004800)="9a3a065fedd3ce180bb4bb0cf48142a1d8b99d497becf9e7ae15cd8862a0a73ecfca504e7320b990a2a9c53815d137cdafafcddb8510f7b897d48a6fe1335e06a038395367d0d6628d6cd3b4ec3e96f78b62c6657a2ce03b0f0d97e4d981c35b2b967b40d06d1f4d58390ac0d3674d6e1fe23158abd2a0bbcc11d39889f720a646bf527245138da27a2d72fcc0846b59d08930c5466b5f0c26814bbeb5b1117e4ebf631c9aef0d193cdc58a99abe34c0340870", 0xb3}, {&(0x7f00000048c0)="18a6200e010563abd8208f7868104f224b44aca4901ca8970fd1e1924d380dfe61f55aef8a04cca2bac38ebb1d21b57d07a3a25c085602334a251fce94aa70f058de14dc504ba059b123be6c0b18d4c0dccc9009cbe6e01a5db0614ecef97fef325d44703e1a5e7feb2ad9c659447fbf618f4736d92422f5ad2094db20d05756b9af528c782350b67d5159f39f53d2577abe2fe5d597cf29aa0feee966b4740a6205aa326e0256b597b8963842adedb5c5c1f04e1fe208dd6a8c", 0xba}, {&(0x7f0000004980)="a30480d85e10dec1831fb6ed38ad71d9dd80a6a0e5cbd4022067c7507056357b7f8fa6bdf0867c5c9821bd5d207228df89be9b5f7844f90b7204f932ca3800c6c40cfb294e558d92ee4d90dbcffbd3b0df0eb8e01477d98e1454225da509fe1fd4c7001151de8fff9104a6b789259e400e16fb21262a935fd795e2f0496bda612e09f28c72b7510d7eaee80125a965650cdfd830b5adb881cc02a174fb27eec63eecf20b2969a238884d4034d13651a6fb87b806f89882504ffc6769b7561d1dfee9032740a9", 0xc6}], 0xa, &(0x7f0000004b40)=[@rthdr={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x1, 0x9, 0x0, [@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, @empty, @rand_addr="43236eba663e638499576f723481bd99", @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x1, 0x0, 0x0, [@rand_addr="a88f89e24f66084b5c5a3149d6b7b5e9", @dev={0xfe, 0x80, [], 0x29}, @remote, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x380e}}, @flowinfo={{0x14, 0x29, 0xb, 0x6460}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x0, 0x16, [], [@ra={0x5, 0x2, 0x56}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xffffffff}, @calipso={0x7, 0x38, {0x9, 0xc, 0xfffffffffffffc01, 0x0, [0x2, 0x4, 0x4, 0x7, 0x1, 0x9]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1b}}, @enc_lim={0x4, 0x1, 0x769}, @calipso={0x7, 0x50, {0x9f3, 0x12, 0x3, 0x10001, [0x101, 0x0, 0x2, 0xffff, 0x80000001, 0x3, 0x3, 0xfff, 0x32]}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xc, 0xa, 0x3, 0x80, 0x0, [@ipv4={[], [], @multicast2}, @rand_addr="7731d0b01578180f907d6d630880f967", @ipv4={[], [], @empty}, @dev={0xfe, 0x80, [], 0x1e}, @empty]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0xe3, 0x8, [], [@enc_lim={0x4, 0x1, 0x3ff}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x59b, 0xc, 0x1, 0xff, [0x0, 0x80, 0x1f, 0x100000000, 0x7, 0x6]}}]}}}], 0x2a8}}, {{&(0x7f0000004e00)={0xa, 0x4e22, 0x3f59ab2a, @empty, 0x4f}, 0x1c, &(0x7f0000005fc0)=[{&(0x7f0000004e40)="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", 0x1000}, {&(0x7f0000005e40)="8027e71747c8e0d9956921ac25d8484423e43ab53c7e4a83527dd1b040d778e2d09432ba255c80d9c2461a0754d0b4d494d7c9c843067c64be49f0d42b960290d0eb65ac5265d913802d479dfc01aed4e708a4941af36c290bb89eb4a0d73b070ba97c6f7bc3c3a7c75c4e86e437d33a6eee3f1dc9d8212ee13f6d01fd57af99e3521625b4426e9e84310f3875dd9928b5cc6d1b00d12773a671bcfae71f49b3d1866dd2d5d946b31769fd44d55dad64166e84409f1e394e75cd52ffeb163c37ac6fca0f8de34e294e631c9fd5213b4954e549ec9d9fae626732abb6ee49d806296c", 0xe2}, {&(0x7f0000005f40)="da6a8cf3a0ab7cf160c7c696c009c54b240b9369ffb31fabe803940eb0bb0772fda967619a547a57c62e6bc8486d8cd4742eec6b3dfffdb73059bf6ee223cd8866e7fb3d7b56be081ec0", 0x4a}], 0x3, &(0x7f0000006040)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r13}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0xfffffffffffffe01}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x1662, 0x0, [@mcast2, @dev={0xfe, 0x80, [], 0x26}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r15}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x4, 0x81, 0x0, [@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, @local, @dev={0xfe, 0x80, [], 0xe}, @local, @mcast2]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2e, 0x5, [], [@calipso={0x7, 0x28, {0x8, 0x8, 0x8, 0x0, [0x8, 0x501, 0xc3a3, 0x0]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x95b5}}], 0x1e0}}, {{&(0x7f0000006240)={0xa, 0x4e24, 0x4, @ipv4={[], [], @empty}, 0x6}, 0x1c, &(0x7f0000006400)=[{&(0x7f0000006280)="4adefccf8f53a1100a7bb1466a383e79be07f1af8698fd2ab6ff182a8a801f91f9efb436fe141f841fec49cf0d6a9db5dc3120820a2ee314be233d51e8a0c0e95917551633cd9af1390d6cc269ddd65d607632a8c26de982b5624857eb432638b80aa1da642c0a6e9e247c626b782d8522535b131c2e5615de020de12dd7d3c0a254653128720cc904c1755d1a3aab5f0703439e34f202ed122267b8045426eb89561a4b1b972b72b5e0cacc5e5f06587918e05753926cf0b2ad98c874d6097e98164f9cecca56307da0373b48b7353767e7f2f567de3c92ccaab9e2", 0xdc}, {&(0x7f0000006380)="c8df80ed2a8b90255122e7", 0xb}, {&(0x7f00000063c0)="ea538e31a87bb21707a7a7e16a47324489ab4f1f2b6c3f92b390287715941d107557e6d7d77aff88c1", 0x29}], 0x3, &(0x7f0000006440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}], 0x18}}, {{&(0x7f0000006480)={0xa, 0x4e22, 0x9, @rand_addr="0b1a7337f56e0d26905c47eb970a312f", 0x7}, 0x1c, &(0x7f0000006a80)=[{&(0x7f00000064c0)="f126db26c845165ccffad66b504bb9a18835f51ff37bbdad4165b4140e054555a90f90e1d8bba81e1378ac936df1000fe2287ee0384e51c201a9f487c3bffd8055a2438c1462c2b2bc9008a4f9b6d1c7e1fa7a5957a261b0f15d8bed2ce104e731caae5c32cbc11bd55cce53f54c047ed44d197875765c4290d632226dd3975dcb9bcc0b6dd19ddd13084f12abe43912a267bb96e00695223ef69cb821f990d8f29793fca69c3abc578e0dffbb3345fef64930f1ff058f20", 0xb8}, {&(0x7f0000006580)="d68afa16b98ac29d907394701dd2452ec572bb06cd3f3c4be29a675bc43e5acc72426efc308cef983896ccc4bfa5fc780cc6152993a60aee7781ba7026a37097ab59fb9e9f393942e2d94e47270a1a2786bff222b8258bb529f2a58ff4599f89290d60563453cea02d5e6d3ac49ff1ec4c1238bb456ed49a11016ab597d34a77c1b3f210ec58b135e87ded2b82e283b4236ad87d20bda68be44cfebcda08d2c4d53feaf0de34a364572fb402d7e29a1ff8d7af97672f89b5f1836a84cbbdafc1fb5e64eb29fb36b891a6fb99b09ea4f26178", 0xd2}, {&(0x7f0000006680)="6bacc9a4df2d74f2424530c21f75e8fa870082f642400d9866dc2a8ebb0f0cb340ab9ce822912690d6a2a9a42b2de825c9c3a88ff7587ea70077e765437bacc4515237749af12d876c6e31f81ca338a7057a850218d1ce43b633c2abaed53aa6e96fcc13435eab44add0870931173711570f34d9ca0fec18a255879f5200dd09e76c7dcc8d296d729449addb17e869384d439b2b81d87c676f", 0x99}, {&(0x7f0000006740)="8858b6cf4c65e0112216d63a44f245145020179a063ce022fb1276cf0b0a40e5cfd9826d3443494019ad10ba3ecfdf439fcb906e4799cd5329625b8cd5de3e1421f88c791429c357d3ec62", 0x4b}, {&(0x7f00000067c0)="af2efd1c044077c06a8ead2b8998446a432eec5e73cd527917f0dff7bd9a5a932bb6207603063cae38de06a1e030834aea2978f03ccaf40259d998a3f0fff5f1ca5770bff63d7eef07ceb4e3adfbeda5f69ff130acbd72e23b1e06549b0f7e339a5538dad8775f1e5ea44637cf408fbb81dddc55b5da0fc0106509adf30d3953ece4a43fae2d3e7d6b73b07d1b02d2bbcf423c77152e5b", 0x97}, {&(0x7f0000006880)="df5a2f0cac742c129a69b967cb84fcf060fe463fb8c20f20961eb5a97498253592dc9dbac23ccb6aba858842bfe49d76dde6d57c", 0x34}, {&(0x7f00000068c0)="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", 0xff}, {&(0x7f00000069c0)="f42b72b18bf8e1d4892a834cbec53123618b0bcddace7f71ca83db6fc842089abe7760272343b44cfcd3696382416c87a0fad1f9952845997520c70e53aa91", 0x3f}, {&(0x7f0000006a00)="794528c579389b48f5f47b3e34e17e5367aff534cc7e6f32cf6623a1fad0a36a800fc9c87b42eec5b86ffd5257621e0dde5b7b1bbce7394f51c7415c4122a0e2e39a31b12c75f1", 0x47}], 0x9, &(0x7f0000006b40)=[@dstopts={{0x128, 0x29, 0x37, {0x2, 0x21, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @generic={0x7fffffff, 0xaa, "ac210b1b53d9d73a5fcddf26b589dbf0b1f25c07c9e0b1eaad5c70e8f6918f8f443f346a4ff695153b4bb4bb5267e9ef71dee0a91a71b2d1fc979c1b512b1ce20fc12c221e4d276c80631ee9124a66be8d2a19a63fceb1ce146f30c7988179a9d57b3360a4ebfb6d59a7db688cb9ed2169f01cfea85ff08cfd3e1b0102a8398fe693ce0eadd9a1d6304f9bdadc71542642e52413a4b2933c8c2c72a2d78a3d496f691ecbba223630e304"}, @pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0xd7, 0x1, [0xffffffffffffffff, 0x6, 0x8, 0x7, 0x7fffffff, 0x1, 0x0]}}, @jumbo={0xc2, 0x4, 0x7f}]}}}, @dstopts_2292={{0x1b8, 0x29, 0x4, {0x87, 0x33, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x4, 0x39, "27f314e24d09aaa01e7e5dafb89dbcf17b1fb3af00e4fe8afe42293483a0fa5e5377586e8475b554209c9d7885e0e58c5c9aeef57d9afc5f60"}, @generic={0x57bd, 0x51, "3455c1598e10b6a5bf6be253201c7caa37f01f2d85c3d73a340e3bbe526120f1f831c1fcbfaae2b6ed5778f9f9c355d4edd01a5dd1b78466328606ba315557bc89825c3dacdcfa4456aa037e6de232799e"}, @hao={0xc9, 0x10, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xde, "bbf5323846ea76e79e66a650f86c6a045cd21b428b1e68eb53fc59419e1f9256c4732d8a91633d7824aac939a009d32ae3c9dbbc92f93bb5245741dfaa86343bea3953b0806c1c5f31242915b7cd9c0363d48a9606fccd5a6031fd00c9c5515d6b8c11811de78f2081eb29f3862d52e4851b2c244a86d650fab5a1f57e52f2fcfee2e9230ce756c0dbd7d361fff7189442c81edbad612f51bfbc9c41449a2e4fc532e9c92ad3f7941c12cda22cf7e8684d23a52314f16a88c4a496d731e4e35688e712f9b12eff18aeba9dec709c3fbeb63729e4a71fc6bde462a9ed16f7"}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x88, 0x9, [], [@ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x20, {0x4, 0x6, 0x4, 0x0, [0x7, 0xc7, 0x20]}}, @enc_lim={0x4, 0x1, 0x400}, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x1f, "df4f2574a0caa848ce899b33fad1780cea7aab8f3c90ff2363b988d07f3e7a"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x2, 0x0, [@rand_addr="68218fab48df9ccc8f3cacdfbf37bb62"]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x3a, 0x10, [], [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x92}, @jumbo, @calipso={0x7, 0x40, {0x31, 0xe, 0x0, 0x5, [0x8, 0x26bf, 0xdba, 0x80000000, 0x4, 0x101, 0x650]}}, @ra={0x5, 0x2, 0x14000}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x4}, @pad1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x8, 0x6, 0x0, 0xa0, 0x0, [@rand_addr="c3d29c9d60b943c3a9ebb49075ca6bef", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote]}}}, @rthdrdstopts={{0x11c8, 0x29, 0x37, {0x7, 0x236, [], [@hao={0xc9, 0x10, @mcast2}, @generic={0x101, 0x1000, "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"}, @generic={0x400000, 0xd0, "69229cfd5a706695a7cad145969ce17d499c772f7c43514d6425261489a407e64ff606703b7ea0d3364953d45a0d72d547f7df9c75d6c92be7d204effc84f08dff7f08bb1f650e1d68aa24cd64a620e3d6f913a9e92cd2761de760fd732acaafcbea616aa998b19aaa5d7bc97bf77f0261d02eea301da267737074bec85ec81bf22294270fc71d4f9348296ff728737a153f5867d998a86cc04eb554ce4022738c8d76705233d938bae44dc48f03d5b43ef53ba0d4ff272a803536c093fd86dbf50baf9e7cf7e5411ff0741b1939d061"}, @generic={0xfff, 0xc8, "bb03b4908a56764e455b2f00e1d177c937e5e12aca1c6168801ee1cba3359a33c968fa035d4bd4ff84b6303aacdb1e67c9e1adb42b86523ffac92262b3ea8b93fd3c04d4ff69ee1fdb3ab1254c7971ffd47d5dcbda91e37d40029b15cf711fc039a14cb94a443c53d60fce6125893bd3f30963d6717f2838dde431738beda927365b3d9f1aa63ee65508f17d034120061a970e109acaf5733755502bf03c5febaacc2c2192320658a69cd60fff5bbf47ade0e13406b6ef7273c83df57e9bf94be936cf9f56ac0b87"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="d65b4bae6b6142519634cf3239cc7a99", r18}}}, @dstopts_2292={{0x130, 0x29, 0x4, {0x33, 0x22, [], [@calipso={0x7, 0x18, {0x2, 0x4, 0x3ff, 0xeb, [0x1bc, 0x9]}}, @pad1, @ra={0x5, 0x2, 0x6}, @generic={0x7, 0xdc, "31f53d114c66129f319aec087b1cb4b4b7af46a92cc4118a86df3e03199b65c05b153fdd52856a8751ddd50e28f4950d0beba56efb3699a97d9916252c1f2514ed59185b18bcd6a136f793f904a317e99941244db087ed1977a4298fdfdf90257f45a5c3d9903ef180660efd71a59dc4c92dc3186d43295d5a6ebe124ebc0f201343df85d7cc0f6cb4dfc710ee3dc09a28ec3d536f9291b0fb1721f0ea1ba76a198f333358250d57ffc07dcc23b878603a1a1d96e3002b9e37cddfdafb24e8634dd7e895ebe90eaf0a7209cb56bae6304fc8fbb940707ff2146b04a2"}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x1d8, 0x29, 0x4, {0x89, 0x37, [], [@pad1, @generic={0x4, 0xdc, "9a82e674c8910eca6239bcc8fdb6207e82fa1d2478c64b62a72a85c39067b17c63e2513b289adc12cda1b6649f4f0d7c6dc57f3d97439abc580b81071ce833318c645babc26510f011a54f95212060e45b9d75c588e496e8548f5cc15f5bf9a8af2c47e0ebb4e91c042e8d05d30602c1941f9eceb8e41d33d396b2a9bf1b3ffd0fd13f3698a15f564589c888874115c518c3c4a0ee27b29e89e6a8391a744cfbe59d7374d70023dc85bf21918533c192616e9ec2ca9c9b8a6edaf5babca82545712db0e1785f703f2f51b2467140abf15782ffb0e20d4c5406863661"}, @jumbo={0xc2, 0x4, 0x20}, @calipso={0x7, 0x10, {0x7f, 0x2, 0xfffffffffffffbe0, 0x1, [0x8000]}}, @generic={0x5, 0xa9, "788c18d5d1bf3fc0d9794272af11c02a6c848332a725f7ff0597391bf1147d4ec10fa6659b394e6ec16fba6e0e80bac3420f985b250f04a12a740e364854bff89f239d305232c70a50ccc0f157b65fdc74db4d184baf9299da1780df5d6c1caba7e150228377a16d57956fa3808b5d3d1dfd014f2ea36028f2db821f7548d64d156110e2445d1c91e7c335db63cf2d557676f4e4c0cddba55d9569095a25cfb0455d22e9383363414f"}, @enc_lim={0x4, 0x1, 0xffff}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}]}}}], 0x1950}}], 0xa, 0x20000000) [ 316.978009] FAULT_INJECTION: forcing a failure. [ 316.978009] name failslab, interval 1, probability 0, space 0, times 0 [ 316.995794] CPU: 0 PID: 13842 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 317.002931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.012282] Call Trace: [ 317.014873] dump_stack+0x138/0x197 [ 317.018506] should_fail.cold+0x10f/0x159 [ 317.022657] should_failslab+0xdb/0x130 [ 317.026634] kmem_cache_alloc+0x2d7/0x780 [ 317.030784] ? dup_fd+0x533/0xa40 [ 317.034240] copy_fs_struct+0x43/0x2d0 [ 317.038133] copy_process.part.0+0x3924/0x6a00 [ 317.042719] ? save_trace+0x290/0x290 [ 317.046517] ? proc_fail_nth_write+0x7d/0x180 [ 317.051013] ? proc_cwd_link+0x1b0/0x1b0 [ 317.055089] ? __cleanup_sighand+0x50/0x50 [ 317.059321] ? lock_downgrade+0x6e0/0x6e0 [ 317.063474] _do_fork+0x19e/0xce0 [ 317.066926] ? fork_idle+0x280/0x280 [ 317.070644] ? fput+0xd4/0x150 [ 317.073836] ? SyS_write+0x15e/0x230 [ 317.077551] SyS_clone+0x37/0x50 [ 317.080909] ? sys_vfork+0x30/0x30 [ 317.084448] do_syscall_64+0x1e8/0x640 [ 317.088334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.093182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.098371] RIP: 0033:0x459879 [ 317.101557] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.109265] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 317.116545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:55 executing program 0 (fault-call:6 fault-nth:11): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 317.123804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.131059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 317.138313] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:55 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 317.305810] FAULT_INJECTION: forcing a failure. [ 317.305810] name failslab, interval 1, probability 0, space 0, times 0 [ 317.333067] CPU: 1 PID: 13856 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 317.340218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.349586] Call Trace: [ 317.352188] dump_stack+0x138/0x197 [ 317.355828] should_fail.cold+0x10f/0x159 [ 317.359996] should_failslab+0xdb/0x130 [ 317.363975] kmem_cache_alloc+0x2d7/0x780 [ 317.368126] ? _raw_spin_unlock_irq+0x28/0x90 [ 317.372628] ? trace_hardirqs_on_caller+0x400/0x590 [ 317.377654] copy_process.part.0+0x1cd5/0x6a00 [ 317.382249] ? save_trace+0x290/0x290 [ 317.386048] ? proc_fail_nth_write+0x7d/0x180 [ 317.390558] ? proc_cwd_link+0x1b0/0x1b0 [ 317.394637] ? __cleanup_sighand+0x50/0x50 [ 317.398873] ? lock_downgrade+0x6e0/0x6e0 [ 317.403030] _do_fork+0x19e/0xce0 [ 317.406489] ? fork_idle+0x280/0x280 [ 317.410207] ? fput+0xd4/0x150 [ 317.413409] ? SyS_write+0x15e/0x230 [ 317.417126] SyS_clone+0x37/0x50 [ 317.420493] ? sys_vfork+0x30/0x30 [ 317.424046] do_syscall_64+0x1e8/0x640 [ 317.427932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.432783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.437983] RIP: 0033:0x459879 [ 317.441171] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.448884] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:56 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 317.456154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.463426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.470701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 317.477975] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:56 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:56 executing program 0 (fault-call:6 fault-nth:12): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:56 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:56 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 317.932335] FAULT_INJECTION: forcing a failure. [ 317.932335] name failslab, interval 1, probability 0, space 0, times 0 [ 317.962295] CPU: 0 PID: 13883 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 317.969437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.978813] Call Trace: [ 317.981410] dump_stack+0x138/0x197 [ 317.985050] should_fail.cold+0x10f/0x159 [ 317.989210] should_failslab+0xdb/0x130 [ 317.993195] kmem_cache_alloc+0x2d7/0x780 [ 317.997349] ? lockdep_init_map+0x9/0x10 [ 318.001418] ? debug_mutex_init+0x2d/0x5a [ 318.005570] copy_process.part.0+0x3c75/0x6a00 [ 318.010160] ? proc_fail_nth_write+0x7d/0x180 [ 318.014656] ? proc_cwd_link+0x1b0/0x1b0 [ 318.018730] ? __cleanup_sighand+0x50/0x50 [ 318.022962] ? lock_downgrade+0x6e0/0x6e0 [ 318.027119] _do_fork+0x19e/0xce0 [ 318.030577] ? fork_idle+0x280/0x280 [ 318.034291] ? fput+0xd4/0x150 [ 318.037481] ? SyS_write+0x15e/0x230 [ 318.041205] SyS_clone+0x37/0x50 [ 318.044572] ? sys_vfork+0x30/0x30 [ 318.048110] do_syscall_64+0x1e8/0x640 [ 318.051994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.056863] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.062052] RIP: 0033:0x459879 [ 318.065253] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 318.072963] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:09:56 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x3008453, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 318.080233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.087497] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.094764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 318.102029] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:56 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0xfffffffffffffffa, 0x2194317d}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@obj_role={'obj_role', 0x3d, 'wlan1!lobdevwlan1mi;O\x9b\x00DR\x8f\xcc\xf7\xdcR2@E_\x9dD\xbeT{)\xf0\xca:\xb5^\x86+0\x95\xb8\xedt\xaf^\tm\x0f*\xd4\xa8YQ\x96\xb1\xde>\'>fg\x00\xce\xde\xe1p;\x05$!\xc0Ju\xfd\xa1\av\xdf!\x95\x1c\xd8\x8c%\xec\x92jg\x05\x85PvN\x8a{\xd9A/M\xb0m\xc9\x9d&Uw\xf4\xd06\vi\xc3\xdaKq\xfa\xe9\xa9\xfac\xfe\x82R[\xdehU3\xe1\xe1\x1fI\xd4\xa4\xa5\x87\x90\"K\xc3+\t>\xcbD\xf2/\xc5a\xeb\xa9\xf3>\xb3\xbd\xf1\xf8y\xdbd\xdf\xcb\xf2p\xe1y\xfb1\xdd\x99\xf8y(\xe95v\xafkN\x04\xe4i\xc0\x17S\xa2\xb7\x95z\x91\x8e\x11Pm\x10T\xc7U\xce\xb6\x9d\xd3A9\xde\x10\x84i\x0f<'}}, {@subj_user={'subj_user', 0x3d, '*'}}, {@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'staff_u'}}]}}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:56 executing program 0 (fault-call:6 fault-nth:13): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:56 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 318.542880] FAULT_INJECTION: forcing a failure. [ 318.542880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.585181] CPU: 0 PID: 13906 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 318.592330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.601685] Call Trace: [ 318.604282] dump_stack+0x138/0x197 [ 318.607924] should_fail.cold+0x10f/0x159 [ 318.612075] ? __might_sleep+0x93/0xb0 [ 318.615976] __alloc_pages_nodemask+0x1d6/0x7a0 [ 318.620656] ? fs_reclaim_acquire+0x20/0x20 [ 318.624985] ? __alloc_pages_slowpath+0x2930/0x2930 [ 318.630006] ? check_preemption_disabled+0x3c/0x250 [ 318.635024] alloc_pages_current+0xec/0x1e0 [ 318.639350] __get_free_pages+0xf/0x40 [ 318.643236] pgd_alloc+0x25/0x2b0 [ 318.646692] ? lockdep_init_map+0x9/0x10 [ 318.650756] mm_init+0x578/0x970 [ 318.654260] copy_process.part.0+0x3ccd/0x6a00 [ 318.658892] ? proc_fail_nth_write+0x7d/0x180 [ 318.663388] ? proc_cwd_link+0x1b0/0x1b0 [ 318.667470] ? __cleanup_sighand+0x50/0x50 [ 318.671714] ? lock_downgrade+0x6e0/0x6e0 [ 318.675870] _do_fork+0x19e/0xce0 [ 318.679331] ? fork_idle+0x280/0x280 [ 318.683047] ? fput+0xd4/0x150 [ 318.686240] ? SyS_write+0x15e/0x230 [ 318.689958] SyS_clone+0x37/0x50 [ 318.693323] ? sys_vfork+0x30/0x30 [ 318.696864] do_syscall_64+0x1e8/0x640 [ 318.700752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.705603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.710817] RIP: 0033:0x459879 [ 318.714005] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 318.721714] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 318.729070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.736338] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.743608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 318.750877] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:57 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:57 executing program 0 (fault-call:6 fault-nth:14): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 318.936536] FAULT_INJECTION: forcing a failure. [ 318.936536] name failslab, interval 1, probability 0, space 0, times 0 [ 318.983434] CPU: 1 PID: 13917 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 318.990595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.999974] Call Trace: [ 319.002569] dump_stack+0x138/0x197 [ 319.006212] should_fail.cold+0x10f/0x159 [ 319.010383] should_failslab+0xdb/0x130 [ 319.014365] kmem_cache_alloc+0x2d7/0x780 [ 319.018517] ? lock_downgrade+0x6e0/0x6e0 [ 319.022672] __khugepaged_enter+0x37/0x340 [ 319.026911] copy_process.part.0+0x5557/0x6a00 [ 319.031497] ? proc_fail_nth_write+0x7d/0x180 [ 319.035999] ? __cleanup_sighand+0x50/0x50 [ 319.040228] ? lock_downgrade+0x6e0/0x6e0 [ 319.044376] _do_fork+0x19e/0xce0 [ 319.047834] ? fork_idle+0x280/0x280 [ 319.051552] ? fput+0xd4/0x150 [ 319.054751] ? SyS_write+0x15e/0x230 [ 319.058471] SyS_clone+0x37/0x50 [ 319.061836] ? sys_vfork+0x30/0x30 [ 319.065384] do_syscall_64+0x1e8/0x640 [ 319.069275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.074134] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.079325] RIP: 0033:0x459879 [ 319.082512] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.090218] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 319.097485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.104753] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.112018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 319.119285] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:57 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 11:09:57 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/156, 0x9c}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="02dd775ec8bfe9f8587f6900"]) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffe00}}, 0x2, 0x7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r3, 0x8}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 319.415968] 9pnet: Insufficient options for proto=fd 11:09:58 executing program 0 (fault-call:6 fault-nth:15): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 319.467851] 9pnet: Insufficient options for proto=fd 11:09:58 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='de\xad\x9dl\xdeZ\x15\x9e', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 319.630903] FAULT_INJECTION: forcing a failure. [ 319.630903] name failslab, interval 1, probability 0, space 0, times 0 [ 319.667102] CPU: 0 PID: 13933 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 319.674250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.683609] Call Trace: [ 319.686209] dump_stack+0x138/0x197 [ 319.689964] should_fail.cold+0x10f/0x159 [ 319.694120] should_failslab+0xdb/0x130 [ 319.698098] kmem_cache_alloc+0x2d7/0x780 [ 319.702249] ? lock_downgrade+0x6e0/0x6e0 [ 319.706403] __khugepaged_enter+0x37/0x340 [ 319.710673] copy_process.part.0+0x5557/0x6a00 [ 319.715261] ? proc_fail_nth_write+0x7d/0x180 [ 319.719767] ? __cleanup_sighand+0x50/0x50 [ 319.723998] ? lock_downgrade+0x6e0/0x6e0 [ 319.728141] _do_fork+0x19e/0xce0 [ 319.731584] ? fork_idle+0x280/0x280 [ 319.735297] ? fput+0xd4/0x150 [ 319.738479] ? SyS_write+0x15e/0x230 [ 319.742191] SyS_clone+0x37/0x50 [ 319.745543] ? sys_vfork+0x30/0x30 [ 319.749083] do_syscall_64+0x1e8/0x640 [ 319.752967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.757810] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.762987] RIP: 0033:0x459879 [ 319.766158] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.773847] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 319.781097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.788349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.795602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 319.802858] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:58 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:58 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0x3, 0x0, 0x0, @irqchip={0x66, 0xfffffffffffffff7}}, {0x3ff, 0x3, 0x0, 0x0, @msi={0x9, 0x100, 0xcaa}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/246) 11:09:58 executing program 0 (fault-call:6 fault-nth:16): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 320.068631] FAULT_INJECTION: forcing a failure. [ 320.068631] name failslab, interval 1, probability 0, space 0, times 0 [ 320.095331] CPU: 1 PID: 13953 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 320.102476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.111832] Call Trace: [ 320.114433] dump_stack+0x138/0x197 [ 320.118075] should_fail.cold+0x10f/0x159 [ 320.122669] should_failslab+0xdb/0x130 [ 320.126653] kmem_cache_alloc+0x2d7/0x780 [ 320.130806] ? lock_downgrade+0x6e0/0x6e0 [ 320.134960] __khugepaged_enter+0x37/0x340 [ 320.139202] copy_process.part.0+0x5557/0x6a00 [ 320.143791] ? proc_fail_nth_write+0x7d/0x180 [ 320.148304] ? __cleanup_sighand+0x50/0x50 [ 320.152544] ? lock_downgrade+0x6e0/0x6e0 [ 320.156696] _do_fork+0x19e/0xce0 [ 320.160169] ? fork_idle+0x280/0x280 [ 320.163883] ? fput+0xd4/0x150 [ 320.167070] ? SyS_write+0x15e/0x230 [ 320.170769] SyS_clone+0x37/0x50 [ 320.174116] ? sys_vfork+0x30/0x30 [ 320.177657] do_syscall_64+0x1e8/0x640 [ 320.181524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.186353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.191523] RIP: 0033:0x459879 [ 320.194704] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 320.202411] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 320.209661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:58 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 320.216923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.224176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 320.231427] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x20000000000089f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x100) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000300)={0x20, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xb1]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4090) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250100000008000600040000001400040081ffffff0200000000040000000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x9c1ff951b342f73, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008080}, 0x404c840) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:59 executing program 0 (fault-call:6 fault-nth:17): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x1ff}, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x1010, r2, 0xfffffffffffffffd) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 320.583367] FAULT_INJECTION: forcing a failure. [ 320.583367] name failslab, interval 1, probability 0, space 0, times 0 [ 320.607424] CPU: 0 PID: 13966 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 320.614640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.623991] Call Trace: [ 320.626586] dump_stack+0x138/0x197 [ 320.630227] should_fail.cold+0x10f/0x159 [ 320.634397] should_failslab+0xdb/0x130 [ 320.638388] kmem_cache_alloc+0x47/0x780 [ 320.642459] ? __lock_is_held+0xb6/0x140 [ 320.646530] ? check_preemption_disabled+0x3c/0x250 [ 320.651557] anon_vma_clone+0xde/0x470 [ 320.655461] anon_vma_fork+0x87/0x4d0 [ 320.659278] copy_process.part.0+0x45e2/0x6a00 [ 320.663886] ? __cleanup_sighand+0x50/0x50 [ 320.668135] ? lock_downgrade+0x6e0/0x6e0 [ 320.672293] _do_fork+0x19e/0xce0 [ 320.675750] ? fork_idle+0x280/0x280 [ 320.679465] ? fput+0xd4/0x150 [ 320.682660] ? SyS_write+0x15e/0x230 [ 320.686375] SyS_clone+0x37/0x50 [ 320.689738] ? sys_vfork+0x30/0x30 [ 320.693278] do_syscall_64+0x1e8/0x640 [ 320.697162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.702006] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.707191] RIP: 0033:0x459879 [ 320.710375] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 320.718079] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 320.725352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:09:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f00000001c0)=""/113, 0x71}, &(0x7f0000000240), 0x1}, 0x20) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 320.732621] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.739887] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 320.747159] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:59 executing program 3: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:59 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:59 executing program 0 (fault-call:6 fault-nth:18): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$setflags(r2, 0x2, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 320.955609] FAULT_INJECTION: forcing a failure. [ 320.955609] name failslab, interval 1, probability 0, space 0, times 0 [ 320.968096] CPU: 0 PID: 13992 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 320.975214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.984565] Call Trace: [ 320.987160] dump_stack+0x138/0x197 [ 320.990800] should_fail.cold+0x10f/0x159 [ 320.994961] should_failslab+0xdb/0x130 [ 320.998945] kmem_cache_alloc+0x47/0x780 [ 321.003012] ? anon_vma_chain_link+0x142/0x1a0 [ 321.007593] anon_vma_clone+0xde/0x470 [ 321.011485] anon_vma_fork+0x87/0x4d0 [ 321.015293] copy_process.part.0+0x45e2/0x6a00 [ 321.019892] ? __cleanup_sighand+0x50/0x50 [ 321.024130] ? lock_downgrade+0x6e0/0x6e0 [ 321.028283] _do_fork+0x19e/0xce0 [ 321.031830] ? fork_idle+0x280/0x280 [ 321.035547] ? fput+0xd4/0x150 [ 321.038760] ? SyS_write+0x15e/0x230 [ 321.042478] SyS_clone+0x37/0x50 [ 321.045851] ? sys_vfork+0x30/0x30 [ 321.049395] do_syscall_64+0x1e8/0x640 [ 321.053281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.058127] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.063313] RIP: 0033:0x459879 [ 321.066498] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.074204] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 321.081469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.088734] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.096001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 11:09:59 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/141) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77669bf76c45aa646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x800, 0x1f, &(0x7f0000000180)=0xfffffffffffffff8}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 321.103266] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:09:59 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 321.184131] 9pnet: Insufficient options for proto=fd 11:09:59 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, 0x20010, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 321.207222] 9pnet: Insufficient options for proto=fd 11:09:59 executing program 0 (fault-call:6 fault-nth:19): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:09:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080)=0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 321.335347] FAULT_INJECTION: forcing a failure. [ 321.335347] name failslab, interval 1, probability 0, space 0, times 0 [ 321.376063] CPU: 0 PID: 14014 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 321.383206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.392564] Call Trace: [ 321.395156] dump_stack+0x138/0x197 [ 321.398792] should_fail.cold+0x10f/0x159 [ 321.402963] should_failslab+0xdb/0x130 [ 321.406939] kmem_cache_alloc+0x47/0x780 [ 321.411007] ? anon_vma_chain_link+0x142/0x1a0 [ 321.415595] anon_vma_clone+0xde/0x470 [ 321.419491] anon_vma_fork+0x87/0x4d0 [ 321.423297] copy_process.part.0+0x45e2/0x6a00 [ 321.427917] ? __cleanup_sighand+0x50/0x50 [ 321.432157] ? lock_downgrade+0x6e0/0x6e0 [ 321.436313] _do_fork+0x19e/0xce0 [ 321.439768] ? fork_idle+0x280/0x280 [ 321.443482] ? fput+0xd4/0x150 [ 321.446676] ? SyS_write+0x15e/0x230 [ 321.450392] SyS_clone+0x37/0x50 [ 321.453755] ? sys_vfork+0x30/0x30 [ 321.457292] do_syscall_64+0x1e8/0x640 [ 321.461175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.466020] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.471209] RIP: 0033:0x459879 [ 321.474393] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.482103] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 321.489401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.496673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.503969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 321.511260] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:00 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580)='devtmpfs\xe4>\x9f\xf3\xd5\x00\xb7\xbe\xdfO\vI\xbf\xdf\xe5\"a\x92IAy#~o\x14\xe7\xb75\xd1\xf60e\xb5\x9eV\xd35e4\xa9q\x9c\x117\r5\xdde\xb4`_\x1b\x06R.\x0f[\xe6w\x93[!\xba\v\xbd>?\xbeq\xc2\xa7\xaf\xadX\xab9\x9e?\xc8Mt\xd1\x9a\xb1\x1a9C\x83\x93;\xff\xe9\x99\x005L\xcd\xa2\x8b\xec!m\xf4\xf8\xc3\xf4\f\n[r\x92D\x14>\x99\xb2vK\xb6\x18a\xce\xfe\xcct\xa9\xcd\x11\x93\x9f\xe7fv\x16\x16\xe9\xf5\x01kjYu\x92\x1cT\x93\xd5\x06f\xbb\xe5\xaf\xe5\x8f\x12$\xa9\x13\x11(f\xfe\xbe8}\xedn\\\xcc\x1b\xf5I\xa4\xe1\xf4\xd87k\xfc8R\x10\x16\xc6\xc9\xef\xdf7\xbd\x1c\xf6\xa2\xb4\x98\xb4\x84\xd6V4bRPM\x03[\x19u&\xa1\xaeN\x98\x16\x17&\xe7\n\'54\xe8\xc9S\xff\x7f\x05g\xcez\xc6\xf07\x02\xee!|\x1e%\xc1T\xcbf\xe5\t?:\x98Y\f,f`\xc0\xa3\xb8M\xce_\xab6.\xc0\xda\xcdv\x13\xc3\x10@uj\x82\xc1%\b\xff\x934\x84\xdd0p\x82C\x19\x10\x99\xd55\x8eT\xbc\xea\xb5\xd9\xa4m\xc9\xed\x9c\x90[_\x803;t\xfd\xf3r\xae\xeb[\xde\x917\x01\xf3\xa5\xb1\x82\v\x11}\xc1N\xb0\x98\x10!\x84L?$7\x13\x1d-0\x80kYc\x83\vd\r\xd6\xd1\x05*\x9d\xbe\xdc\xfa\xac\x9b\xb4\xba\xbaV\x85s\x977V\xcb^\xb3\x11}\x80\x1dV\xd0\xda\x94\x04Nu\xca\x1d\xff\x00\xa1lB\xc6\x13\x01\xb7E\xbb\xf4\xd0P\xa9\x99\xfd\xf6\xbfx\x8c\"\a\xaa\xa1%\x0ec<\b^X\x8e\xb4\xb3\xc0\xa7\x9b\xba\x01\xeb\xe1\xc0\x06l\xf3\x10\xbdNJ\xd0K\x0eb\x8d\x8a\xfd\xe8\xf7ww\x94\\\xab\xbf\xe2\xacY5QW51K\xafD\x80hT\xb98N\x12`\xaf\x12\xe8a\x88\xc2\x04\x1c>\x81\xd3\x0e\xa9\xa2\x9dL{G\xb4\x9d\'\x83\x81ChD\xfb\x8d:\xa8\x88u\xd7', 0x88, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffffb, @local, 0x7}}, 0x9, 0x0, 0x6, 0x48, 0x20}, 0x98) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000080)=0x1) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:00 executing program 0 (fault-call:6 fault-nth:20): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:00 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 321.644111] FAULT_INJECTION: forcing a failure. [ 321.644111] name failslab, interval 1, probability 0, space 0, times 0 [ 321.696133] CPU: 1 PID: 14028 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 321.703287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.712665] Call Trace: [ 321.715261] dump_stack+0x138/0x197 [ 321.718906] should_fail.cold+0x10f/0x159 [ 321.723059] ? anon_vma_clone+0xde/0x470 [ 321.727125] should_failslab+0xdb/0x130 [ 321.731104] kmem_cache_alloc+0x47/0x780 [ 321.735167] ? anon_vma_chain_link+0x142/0x1a0 [ 321.739750] anon_vma_clone+0xde/0x470 [ 321.743645] anon_vma_fork+0x87/0x4d0 [ 321.747453] copy_process.part.0+0x45e2/0x6a00 [ 321.752049] ? __cleanup_sighand+0x50/0x50 [ 321.756281] ? lock_downgrade+0x6e0/0x6e0 [ 321.760430] _do_fork+0x19e/0xce0 [ 321.763895] ? fork_idle+0x280/0x280 [ 321.767611] ? fput+0xd4/0x150 [ 321.770800] ? SyS_write+0x15e/0x230 [ 321.774543] SyS_clone+0x37/0x50 [ 321.777908] ? sys_vfork+0x30/0x30 [ 321.781447] do_syscall_64+0x1e8/0x640 [ 321.785479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.790333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.795520] RIP: 0033:0x459879 [ 321.798703] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.806411] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 321.813688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.820961] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.828227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 321.835492] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:00 executing program 0 (fault-call:6 fault-nth:21): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 321.962042] FAULT_INJECTION: forcing a failure. [ 321.962042] name failslab, interval 1, probability 0, space 0, times 0 [ 321.978241] CPU: 1 PID: 14042 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 321.985480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.994840] Call Trace: [ 321.997436] dump_stack+0x138/0x197 [ 322.001076] should_fail.cold+0x10f/0x159 [ 322.005235] should_failslab+0xdb/0x130 [ 322.009219] kmem_cache_alloc+0x2d7/0x780 [ 322.013367] ? anon_vma_clone+0x310/0x470 [ 322.017524] anon_vma_fork+0xe9/0x4d0 [ 322.021330] copy_process.part.0+0x45e2/0x6a00 [ 322.025934] ? __cleanup_sighand+0x50/0x50 [ 322.030190] ? lock_downgrade+0x6e0/0x6e0 [ 322.034347] _do_fork+0x19e/0xce0 [ 322.037801] ? fork_idle+0x280/0x280 [ 322.041520] ? fput+0xd4/0x150 [ 322.044713] ? SyS_write+0x15e/0x230 [ 322.048427] SyS_clone+0x37/0x50 [ 322.051795] ? sys_vfork+0x30/0x30 [ 322.055340] do_syscall_64+0x1e8/0x640 [ 322.059227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.064072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.069257] RIP: 0033:0x459879 [ 322.072443] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 322.080147] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 322.087416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.094681] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.101945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 11:10:00 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 322.109213] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:00 executing program 0 (fault-call:6 fault-nth:22): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 322.241355] FAULT_INJECTION: forcing a failure. [ 322.241355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.258647] CPU: 1 PID: 14048 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 322.265771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.275294] Call Trace: [ 322.277889] dump_stack+0x138/0x197 [ 322.281539] should_fail.cold+0x10f/0x159 [ 322.285689] ? __might_sleep+0x93/0xb0 [ 322.289586] __alloc_pages_nodemask+0x1d6/0x7a0 [ 322.294260] ? save_stack+0xa9/0xd0 [ 322.297888] ? __alloc_pages_slowpath+0x2930/0x2930 [ 322.302905] ? anon_vma_fork+0x1ce/0x4d0 [ 322.306969] ? copy_process.part.0+0x45e2/0x6a00 [ 322.311724] ? _do_fork+0x19e/0xce0 [ 322.315355] ? __lock_acquire+0x5f7/0x4620 [ 322.319595] alloc_pages_current+0xec/0x1e0 [ 322.323918] __get_free_pages+0xf/0x40 [ 322.327811] get_zeroed_page+0x11/0x20 [ 322.331705] __pud_alloc+0x3b/0x200 [ 322.335332] pud_alloc+0xc9/0x130 [ 322.338786] copy_page_range+0x2de/0x1bd0 [ 322.342992] ? find_held_lock+0x35/0x130 [ 322.347055] ? find_held_lock+0x35/0x130 [ 322.351120] ? __pmd_alloc+0x410/0x410 [ 322.355007] ? __vma_link_rb+0x247/0x340 [ 322.359075] copy_process.part.0+0x4764/0x6a00 [ 322.363678] ? __cleanup_sighand+0x50/0x50 [ 322.367909] ? lock_downgrade+0x6e0/0x6e0 [ 322.372064] _do_fork+0x19e/0xce0 [ 322.375520] ? fork_idle+0x280/0x280 [ 322.379237] ? fput+0xd4/0x150 [ 322.382431] ? SyS_write+0x15e/0x230 [ 322.386146] SyS_clone+0x37/0x50 11:10:00 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x400, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000000c0)={r4, 0x2}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 322.389508] ? sys_vfork+0x30/0x30 [ 322.393054] do_syscall_64+0x1e8/0x640 [ 322.396941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.401796] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.406985] RIP: 0033:0x459879 [ 322.410276] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 322.417981] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 322.425242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.432505] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:01 executing program 0 (fault-call:6 fault-nth:23): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:01 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 322.439755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 322.447005] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffe1, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000340)="00aa8174ecd434d2979cb8e674823f5a40594aa4860eefd62eb35d099b88a01867f914971702dc2bc85d16c6ffffffff0000000062e6f78dae3ce2c84aba3ac9de7f2cf6", 0x43, 0x7f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000180)="e47880b825389ba6c6021caa10e53dbd5d5e4ef25e79ec9f12396e838389", 0x1e}, {&(0x7f00000001c0)="6e2fbd2659d33c3a060e326d8656a984afa368a8dd82118606a8ee1c01c00ba1806bb7de9856e9ac8ca034b746845ec8029ac1a2d723b953bb9cce070f6d7de17340b133b161779c2f5e55f0e29f3adcb7504108a8fa12a3ba256650113c0d525a41", 0x62, 0x9}], 0x1010040, 0x0) [ 322.588200] FAULT_INJECTION: forcing a failure. [ 322.588200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.601288] CPU: 0 PID: 14072 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 322.608409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.617941] Call Trace: [ 322.620534] dump_stack+0x138/0x197 [ 322.624172] should_fail.cold+0x10f/0x159 [ 322.628335] ? __might_sleep+0x93/0xb0 [ 322.632218] __alloc_pages_nodemask+0x1d6/0x7a0 [ 322.636877] ? __alloc_pages_slowpath+0x2930/0x2930 [ 322.641895] alloc_pages_current+0xec/0x1e0 [ 322.641981] __pmd_alloc+0x41/0x410 [ 322.650047] copy_page_range+0x12b7/0x1bd0 [ 322.650063] ? find_held_lock+0x35/0x130 [ 322.650083] ? __pmd_alloc+0x410/0x410 [ 322.650093] ? __vma_link_rb+0x247/0x340 [ 322.650107] copy_process.part.0+0x4764/0x6a00 [ 322.657643] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=b88078e4) [ 322.658413] ? __cleanup_sighand+0x50/0x50 [ 322.658426] ? lock_downgrade+0x6e0/0x6e0 [ 322.658443] _do_fork+0x19e/0xce0 [ 322.658457] ? fork_idle+0x280/0x280 [ 322.658470] ? fput+0xd4/0x150 [ 322.658482] ? SyS_write+0x15e/0x230 [ 322.701190] SyS_clone+0x37/0x50 [ 322.704550] ? sys_vfork+0x30/0x30 [ 322.708081] do_syscall_64+0x1e8/0x640 [ 322.712000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.716841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.722018] RIP: 0033:0x459879 [ 322.725190] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 11:10:01 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:01 executing program 0 (fault-call:6 fault-nth:24): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 322.736889] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 322.744148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.751405] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.758664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 322.765915] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:01 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x420480, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 322.864078] FAULT_INJECTION: forcing a failure. [ 322.864078] name failslab, interval 1, probability 0, space 0, times 0 [ 322.880777] CPU: 1 PID: 14092 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 322.887911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.897262] Call Trace: [ 322.899856] dump_stack+0x138/0x197 [ 322.903492] should_fail.cold+0x10f/0x159 [ 322.907650] should_failslab+0xdb/0x130 [ 322.911639] kmem_cache_alloc+0x2d7/0x780 [ 322.915774] ? alloc_pages_current+0xf4/0x1e0 [ 322.920255] __pmd_alloc+0xbd/0x410 [ 322.923868] copy_page_range+0x12b7/0x1bd0 [ 322.928089] ? find_held_lock+0x35/0x130 [ 322.932149] ? __pmd_alloc+0x410/0x410 [ 322.936018] ? __vma_link_rb+0x247/0x340 [ 322.940086] copy_process.part.0+0x4764/0x6a00 [ 322.944667] ? __cleanup_sighand+0x50/0x50 [ 322.948886] ? lock_downgrade+0x6e0/0x6e0 [ 322.953019] _do_fork+0x19e/0xce0 [ 322.956454] ? fork_idle+0x280/0x280 [ 322.960155] ? fput+0xd4/0x150 [ 322.963327] ? SyS_write+0x15e/0x230 [ 322.967024] SyS_clone+0x37/0x50 [ 322.970372] ? sys_vfork+0x30/0x30 [ 322.973893] do_syscall_64+0x1e8/0x640 [ 322.977761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.982590] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.987771] RIP: 0033:0x459879 [ 322.990940] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 322.998627] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 323.005877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:10:01 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 323.013126] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.020377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 323.027626] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:01 executing program 0 (fault-call:6 fault-nth:25): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:01 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000100)={0xc025, 0x2}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x3a, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x28, 0x3, 0x34}, {@rand_addr=0x7, 0x4e22, 0x2, 0xbf, 0x1ff, 0x2}}, 0x44) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7764646e6f3d787d95d61dabc8b90f6dbbbc99d4d799249273e5aa50388f2ee08b907c8f7aa829bb", @ANYRESHEX=r2, @ANYBLOB=',@']) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)={0x6}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 323.165257] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 323.167542] FAULT_INJECTION: forcing a failure. [ 323.167542] name failslab, interval 1, probability 0, space 0, times 0 [ 323.178993] 9pnet: Insufficient options for proto=fd [ 323.182984] CPU: 1 PID: 14105 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 323.194986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.204339] Call Trace: [ 323.206918] dump_stack+0x138/0x197 [ 323.210540] should_fail.cold+0x10f/0x159 [ 323.214674] ? anon_vma_clone+0xde/0x470 [ 323.218722] should_failslab+0xdb/0x130 [ 323.222683] kmem_cache_alloc+0x47/0x780 [ 323.226741] ? anon_vma_chain_link+0x142/0x1a0 [ 323.231308] anon_vma_clone+0xde/0x470 [ 323.235186] anon_vma_fork+0x87/0x4d0 [ 323.238975] copy_process.part.0+0x45e2/0x6a00 [ 323.243557] ? __cleanup_sighand+0x50/0x50 [ 323.247777] ? lock_downgrade+0x6e0/0x6e0 [ 323.251920] _do_fork+0x19e/0xce0 [ 323.255359] ? fork_idle+0x280/0x280 [ 323.259057] ? fput+0xd4/0x150 [ 323.262236] ? SyS_write+0x15e/0x230 [ 323.265939] SyS_clone+0x37/0x50 [ 323.269285] ? sys_vfork+0x30/0x30 [ 323.272810] do_syscall_64+0x1e8/0x640 [ 323.276680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.281513] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.286688] RIP: 0033:0x459879 [ 323.289863] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.297576] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 323.304832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:10:01 executing program 0 (fault-call:6 fault-nth:26): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 323.312097] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.319355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 323.326616] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 323.346323] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 11:10:01 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:01 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r2 = getgid() r3 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r3, 0xee00, 0xee01]) getgroups(0x3, &(0x7f0000000240)=[0x0, r3, 0xee00]) r5 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r5, 0xee00, 0xee01]) setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00000000010001000000000002000200", @ANYRES32=r1, @ANYBLOB="04009dc50000000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="10000200000000002000040000000000"], 0x44, 0x1) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) r5 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) setresuid(r6, r2, r5) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d756e69822c63616368653d6d733d757365722c6163636573733dc180fcac61d3264c64d25e01377577cce6e158e11c7ebf05c8b4cae9dba3a0a70ddb02453cc7901744624451d91bd087f12c54c3a4244500144b3901efc053073113b96bb02e7168940300000000000000dfba33ff2dc76113ae88f3645eb68db68575e777c4b8259a51e108cf852ce8341048e38b82802f213f98ae4abd533ca777871f1cb72e630a91063ee2cc8a8a220fa19d1879682ee8108f106729cdcc0e3cf97e3dbf4687c80045696b1e859cfe012e3fa83250297bb4bbb8746e83d08000b2050c70c6b94036b957b79795b9020c8200bdda43", @ANYRESDEC=r2, @ANYBLOB=',\x00']) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x1, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 323.497733] FAULT_INJECTION: forcing a failure. [ 323.497733] name failslab, interval 1, probability 0, space 0, times 0 [ 323.509881] CPU: 1 PID: 14126 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 323.517036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.517042] Call Trace: [ 323.517066] dump_stack+0x138/0x197 [ 323.517087] should_fail.cold+0x10f/0x159 [ 323.537780] should_failslab+0xdb/0x130 [ 323.541865] kmem_cache_alloc+0x2d7/0x780 [ 323.546032] ptlock_alloc+0x20/0x70 [ 323.546047] pte_alloc_one+0x60/0x100 [ 323.553490] __pte_alloc+0x2a/0x2d0 [ 323.557315] copy_page_range+0x11ba/0x1bd0 [ 323.561599] ? __pmd_alloc+0x410/0x410 [ 323.565517] copy_process.part.0+0x4764/0x6a00 [ 323.570201] ? __cleanup_sighand+0x50/0x50 [ 323.574587] ? lock_downgrade+0x6e0/0x6e0 [ 323.578758] _do_fork+0x19e/0xce0 [ 323.582339] ? fork_idle+0x280/0x280 [ 323.586108] ? fput+0xd4/0x150 [ 323.589319] ? SyS_write+0x15e/0x230 [ 323.593187] SyS_clone+0x37/0x50 [ 323.596566] ? sys_vfork+0x30/0x30 [ 323.600237] do_syscall_64+0x1e8/0x640 [ 323.604133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.608989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.614183] RIP: 0033:0x459879 [ 323.617369] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.625167] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 323.632522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.640833] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.648154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 323.655421] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:02 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40001, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000001c0)=0xbf8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xe180, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r2, 0x3, 0x0, "595b747b25f0f0a7501db1e6a65149d64bf6c5a935af6d28cc0e203ce6646bc65ea0bd20a12e00255481cf7f82f341fa7d2660caf31da409deed44357b5c69834282c376c99840ce605c18aed09a5bc74b3f613eb00437a9ce8408ad8f5835f3367d79a85a94a8e5fc170842622ff0c54d1851c462761ab54c45"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 0 (fault-call:6 fault-nth:27): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0)=0x200, &(0x7f0000000400)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(r4, &(0x7f0000000300)='./file1\x00', 0x40, 0x18) write$FUSE_BMAP(r5, &(0x7f0000000340)={0x18, 0x0, 0x2, {0xfffffffffffff100}}, 0x18) r6 = socket$inet_udplite(0x2, 0x2, 0x88) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) write$UHID_CREATE(r8, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/130, 0x82, 0x95, 0x7, 0x1, 0x2000000000000, 0x80}, 0x120) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x10000, 0x200000) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0xc029, 0x1}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 323.693152] audit: type=1400 audit(1567681802.252:83): avc: denied { map } for pid=14131 comm="syz-executor.3" path="socket:[54066]" dev="sockfs" ino=54066 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1 [ 323.848979] FAULT_INJECTION: forcing a failure. [ 323.848979] name failslab, interval 1, probability 0, space 0, times 0 [ 323.864234] CPU: 1 PID: 14157 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 323.871373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.880832] Call Trace: [ 323.883494] dump_stack+0x138/0x197 [ 323.887128] should_fail.cold+0x10f/0x159 [ 323.891285] should_failslab+0xdb/0x130 [ 323.895253] kmem_cache_alloc+0x2d7/0x780 [ 323.899406] copy_process.part.0+0x444f/0x6a00 [ 323.903994] ? __cleanup_sighand+0x50/0x50 [ 323.908224] ? lock_downgrade+0x6e0/0x6e0 [ 323.912371] _do_fork+0x19e/0xce0 [ 323.915823] ? fork_idle+0x280/0x280 [ 323.919537] ? fput+0xd4/0x150 [ 323.922725] ? SyS_write+0x15e/0x230 [ 323.926435] SyS_clone+0x37/0x50 [ 323.929788] ? sys_vfork+0x30/0x30 [ 323.933330] do_syscall_64+0x1e8/0x640 [ 323.937211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.942051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:10:02 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 11:10:02 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$poke(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x80000000) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 323.947238] RIP: 0033:0x459879 [ 323.950424] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.958141] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 323.965404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.972668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.980021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 323.987288] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:02 executing program 0 (fault-call:6 fault-nth:28): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x7688, 0x9, 0x4, 0x1000, {0x0, 0x7530}, {0x1, 0x0, 0x80, 0x1, 0x3f, 0x5, "e13aa61c"}, 0x2000000, 0x4, @userptr=0x7f, 0x4}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x5, 0x81}) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 324.124149] FAULT_INJECTION: forcing a failure. [ 324.124149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.136658] CPU: 0 PID: 14179 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 324.143773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.153478] Call Trace: [ 324.156095] dump_stack+0x138/0x197 [ 324.159842] should_fail.cold+0x10f/0x159 [ 324.164024] ? __might_sleep+0x93/0xb0 [ 324.167937] __alloc_pages_nodemask+0x1d6/0x7a0 [ 324.172625] ? __alloc_pages_slowpath+0x2930/0x2930 [ 324.177666] alloc_pages_current+0xec/0x1e0 [ 324.177681] __pmd_alloc+0x41/0x410 [ 324.177691] copy_page_range+0x12b7/0x1bd0 [ 324.185795] ? find_held_lock+0x35/0x130 [ 324.185822] ? __pmd_alloc+0x410/0x410 [ 324.185832] ? __vma_link_rb+0x247/0x340 [ 324.185849] copy_process.part.0+0x4764/0x6a00 [ 324.185880] ? __cleanup_sighand+0x50/0x50 [ 324.185890] ? lock_downgrade+0x6e0/0x6e0 [ 324.215119] _do_fork+0x19e/0xce0 [ 324.218732] ? fork_idle+0x280/0x280 [ 324.222606] ? fput+0xd4/0x150 [ 324.225813] ? SyS_write+0x15e/0x230 [ 324.229627] SyS_clone+0x37/0x50 [ 324.232994] ? sys_vfork+0x30/0x30 [ 324.236619] do_syscall_64+0x1e8/0x640 [ 324.240746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.245594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.250785] RIP: 0033:0x459879 [ 324.254128] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.261837] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:10:02 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:02 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000140)='5%*&,\x00', &(0x7f0000000180)='/dev/net/tun\x00', &(0x7f00000001c0)='$mime_type\x00', &(0x7f0000000200)='9p\x00', &(0x7f0000000300)='cpuset&)4\'\x00', &(0x7f0000000340)='wfdno', &(0x7f0000000580)='mem\x00\x00\x00\x00\x00\x00\a\x13', &(0x7f0000000380)='trusted}\\\x00', &(0x7f00000003c0)='trusted\\+trustedcpusetprocppp1,-\x00', &(0x7f0000000400)='rfdno'], &(0x7f00000007c0)=[&(0x7f0000000740)='keyring{(-posix_acl_access\x00', &(0x7f0000000780)='\x00'], 0x400) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:02 executing program 0 (fault-call:6 fault-nth:29): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 324.269202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.276476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.276483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 324.276488] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 324.399494] FAULT_INJECTION: forcing a failure. [ 324.399494] name failslab, interval 1, probability 0, space 0, times 0 [ 324.415209] CPU: 0 PID: 14197 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 324.422462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.431830] Call Trace: [ 324.434434] dump_stack+0x138/0x197 [ 324.438073] should_fail.cold+0x10f/0x159 [ 324.442225] should_failslab+0xdb/0x130 [ 324.446211] kmem_cache_alloc+0x47/0x780 [ 324.450286] ? __lock_is_held+0xb6/0x140 [ 324.454347] ? check_preemption_disabled+0x3c/0x250 [ 324.459712] anon_vma_clone+0xde/0x470 [ 324.463616] anon_vma_fork+0x87/0x4d0 [ 324.467422] copy_process.part.0+0x45e2/0x6a00 [ 324.472028] ? __cleanup_sighand+0x50/0x50 [ 324.476287] ? lock_downgrade+0x6e0/0x6e0 [ 324.480455] _do_fork+0x19e/0xce0 [ 324.483908] ? fork_idle+0x280/0x280 [ 324.487617] ? fput+0xd4/0x150 [ 324.490810] ? SyS_write+0x15e/0x230 [ 324.494525] SyS_clone+0x37/0x50 [ 324.497889] ? sys_vfork+0x30/0x30 [ 324.501441] do_syscall_64+0x1e8/0x640 [ 324.505328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.510168] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.515356] RIP: 0033:0x459879 [ 324.518534] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.526238] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 324.533671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.540941] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:03 executing program 0 (fault-call:6 fault-nth:30): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 324.548215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 324.555577] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 324.635594] FAULT_INJECTION: forcing a failure. [ 324.635594] name failslab, interval 1, probability 0, space 0, times 0 [ 324.647298] CPU: 1 PID: 14203 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 324.654538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.664049] Call Trace: [ 324.666653] dump_stack+0x138/0x197 [ 324.671669] should_fail.cold+0x10f/0x159 [ 324.675833] ? anon_vma_clone+0xde/0x470 [ 324.679902] should_failslab+0xdb/0x130 11:10:03 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x3, @raw_data="2835c6c2b802a22668004d0401c679d61e6407eeb623cc23f1b5594beb349c088f32785ee7f4642ade0c20189ca2fff546128a5bba26ce46a003d3e4fb7d6fe476cb786682a5c689e02e2f8a49517050f89ae4cdf8ed95d68e001fb855228df81fa3d2b6f8088165872c908933df080d33caba3939638fee815be2ed144c26e0fc5ebbc5473694a93031a19575ca40d813f6eb0d0a40f870db5d784ca5d81f7c72071aee32811c71e01cb6c44858e720b144208b387b634714c44ff7340bf7f49329ee9957d97001"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 324.683886] kmem_cache_alloc+0x47/0x780 [ 324.687960] ? anon_vma_chain_link+0x142/0x1a0 [ 324.692560] anon_vma_clone+0xde/0x470 [ 324.696464] anon_vma_fork+0x87/0x4d0 [ 324.700362] copy_process.part.0+0x45e2/0x6a00 [ 324.704953] ? __cleanup_sighand+0x50/0x50 [ 324.709304] ? lock_downgrade+0x6e0/0x6e0 [ 324.713460] _do_fork+0x19e/0xce0 [ 324.716929] ? fork_idle+0x280/0x280 [ 324.720651] ? fput+0xd4/0x150 [ 324.723836] ? SyS_write+0x15e/0x230 [ 324.727618] SyS_clone+0x37/0x50 [ 324.730986] ? sys_vfork+0x30/0x30 [ 324.734549] do_syscall_64+0x1e8/0x640 [ 324.738525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.743367] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.748553] RIP: 0033:0x459879 [ 324.751749] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.759643] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 324.766989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.774622] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:03 executing program 0 (fault-call:6 fault-nth:31): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 324.781902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 324.789356] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:03 executing program 2: 11:10:03 executing program 2: [ 324.895669] FAULT_INJECTION: forcing a failure. [ 324.895669] name failslab, interval 1, probability 0, space 0, times 0 [ 324.915537] CPU: 1 PID: 14211 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 324.922688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.932055] Call Trace: [ 324.934660] dump_stack+0x138/0x197 [ 324.938316] should_fail.cold+0x10f/0x159 11:10:03 executing program 2: [ 324.942609] should_failslab+0xdb/0x130 [ 324.946602] kmem_cache_alloc+0x47/0x780 [ 324.950692] ? anon_vma_chain_link+0x142/0x1a0 [ 324.955292] anon_vma_clone+0xde/0x470 [ 324.959202] anon_vma_fork+0x87/0x4d0 [ 324.963188] copy_process.part.0+0x45e2/0x6a00 [ 324.967841] ? __cleanup_sighand+0x50/0x50 [ 324.972091] ? lock_downgrade+0x6e0/0x6e0 [ 324.976263] _do_fork+0x19e/0xce0 [ 324.979736] ? fork_idle+0x280/0x280 [ 324.983468] ? fput+0xd4/0x150 [ 324.986672] ? SyS_write+0x15e/0x230 [ 324.990406] SyS_clone+0x37/0x50 11:10:03 executing program 2: [ 324.993783] ? sys_vfork+0x30/0x30 [ 324.997339] do_syscall_64+0x1e8/0x640 [ 325.001236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.006095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.011417] RIP: 0033:0x459879 [ 325.014617] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 325.022512] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 325.029791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.037077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:03 executing program 2: [ 325.044355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 325.051758] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:03 executing program 2: 11:10:03 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 11:10:03 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:03 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 11:10:03 executing program 0 (fault-call:6 fault-nth:32): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:03 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) r6 = getgid() getgroups(0x5, &(0x7f0000006640)=[0xee00, 0xee01, r6, 0xee00, 0xee01]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r8, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x167, 0x7d, 0x2, {{0x0, 0x151, 0x8, 0x5, {0xeb}, 0x80000, 0x10001, 0x6, 0x100, 0x8, '\'keyring', 0x9, 'devtmpfs\x00', 0x102, 'mem\x00\x00\x00\x00\x00\x00\a\x13', 0xb, '*\xe8-vboxnet1'}, 0x1, '^', r5, r6, r8}}, 0x167) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:03 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x3, 0x3, 0x3, 0x100000001, 0xd0, "34056e62dfee27419eb73c10bf2943bf7bda306f701f52a52744643efef627a5488ca76cdb1c88823ed00379825315d03ff9ef4c6c999163c0d2e29ca276a536e704f6b52687cca0cd012f644c39e3086e94ffa0e812b09bded9daef30752834d5c16e52784f7affdec13efecf2977e08ea4d0f4e1518e037b4980fde04cd03d3d345c89e9046806eb3e8fea93d8348e03a11d44d8ca0f14116708c45df4dabc6963f9bfd5ca0c3624e30ab1054a52aa18ca34b19f68ae03392e2776dcf6a2455f61b6a9ca0c39675a63668e00c03a4a"}, 0xda, 0x3) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x53012, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 325.390747] FAULT_INJECTION: forcing a failure. [ 325.390747] name failslab, interval 1, probability 0, space 0, times 0 [ 325.418242] CPU: 1 PID: 14252 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 325.425406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.434768] Call Trace: [ 325.437384] dump_stack+0x138/0x197 [ 325.441030] should_fail.cold+0x10f/0x159 [ 325.445203] should_failslab+0xdb/0x130 [ 325.449195] kmem_cache_alloc+0x2d7/0x780 [ 325.453456] ? anon_vma_clone+0x310/0x470 [ 325.457623] anon_vma_fork+0x1ce/0x4d0 [ 325.461530] copy_process.part.0+0x45e2/0x6a00 [ 325.466149] ? __cleanup_sighand+0x50/0x50 [ 325.470512] ? lock_downgrade+0x6e0/0x6e0 [ 325.474681] _do_fork+0x19e/0xce0 [ 325.478319] ? fork_idle+0x280/0x280 [ 325.482046] ? fput+0xd4/0x150 [ 325.485252] ? SyS_write+0x15e/0x230 [ 325.488978] SyS_clone+0x37/0x50 [ 325.492429] ? sys_vfork+0x30/0x30 [ 325.496927] do_syscall_64+0x1e8/0x640 [ 325.500812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.505742] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.510926] RIP: 0033:0x459879 [ 325.514108] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 325.521907] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 325.529171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.536438] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.543701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 325.551050] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:04 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='d?\x00t\xd7]\xe2u\x1eCX\x11\x8f\xf24\xeam\x00MlV?6\xd2\x8a\x91\x9b@\x10\x88\x83EM\x1d(\x05&\x94O\xdf\x00'/56, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000100)=0x6) clone(0x2000, 0x0, 0x0, 0x0, 0x0) 11:10:04 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000037c0)=ANY=[@ANYBLOB="018b7b00", @ANYRES32=0x0], &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000003a40)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e22, 0x7, @remote, 0xed}}}, 0x84) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:04 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/240, 0xf0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)={0x5, 0x4, 0x4, 0xe782d0c5d89bf2a, {0x77359400}, {0x5034964147d8a0ed, 0x8, 0x80000, 0x8, 0x7f, 0x100000000, "9fc84606"}, 0x4, 0x1, @userptr=0x3ff, 0x4}) 11:10:04 executing program 0 (fault-call:6 fault-nth:33): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 325.881141] FAULT_INJECTION: forcing a failure. [ 325.881141] name failslab, interval 1, probability 0, space 0, times 0 [ 325.893449] CPU: 1 PID: 14284 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 325.900591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.910027] Call Trace: [ 325.912646] dump_stack+0x138/0x197 [ 325.916312] should_fail.cold+0x10f/0x159 [ 325.920492] should_failslab+0xdb/0x130 [ 325.924488] kmem_cache_alloc+0x2d7/0x780 [ 325.928647] ? __pmd_alloc+0x410/0x410 [ 325.932656] copy_process.part.0+0x444f/0x6a00 [ 325.937267] ? __cleanup_sighand+0x50/0x50 [ 325.941516] ? lock_downgrade+0x6e0/0x6e0 [ 325.945687] _do_fork+0x19e/0xce0 [ 325.949288] ? fork_idle+0x280/0x280 [ 325.953014] ? fput+0xd4/0x150 [ 325.956221] ? SyS_write+0x15e/0x230 [ 325.959949] SyS_clone+0x37/0x50 [ 325.963325] ? sys_vfork+0x30/0x30 [ 325.967146] do_syscall_64+0x1e8/0x640 [ 325.971048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.976039] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.981238] RIP: 0033:0x459879 [ 325.984431] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 325.992146] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 325.999427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.006705] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.013986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 326.021265] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:04 executing program 0 (fault-call:6 fault-nth:34): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:04 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 11:10:04 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000140)='5%*&,\x00', &(0x7f0000000180)='/dev/net/tun\x00', &(0x7f00000001c0)='$mime_type\x00', &(0x7f0000000200)='9p\x00', &(0x7f0000000300)='cpuset&)4\'\x00', &(0x7f0000000340)='wfdno', &(0x7f0000000580)='mem\x00\x00\x00\x00\x00\x00\a\x13', &(0x7f0000000380)='trusted}\\\x00', &(0x7f00000003c0)='trusted\\+trustedcpusetprocppp1,-\x00', &(0x7f0000000400)='rfdno'], &(0x7f00000007c0)=[&(0x7f0000000740)='keyring{(-posix_acl_access\x00', &(0x7f0000000780)='\x00'], 0x400) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:04 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000037c0)={0x1, [0x0]}, &(0x7f0000003800)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x5, 0x2, 0x3, 0xffffffffffffffff}) dup2(r3, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003a40)={r2, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r2, 0x21, "321a35d04630ab7dade0434d59380a1f9bc19282656c45f1eef03ab5d03792fc54"}, &(0x7f00000000c0)=0x29) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 326.176801] FAULT_INJECTION: forcing a failure. [ 326.176801] name failslab, interval 1, probability 0, space 0, times 0 [ 326.192626] CPU: 1 PID: 14294 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 326.199771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.209139] Call Trace: [ 326.211960] dump_stack+0x138/0x197 [ 326.215614] should_fail.cold+0x10f/0x159 [ 326.219788] should_failslab+0xdb/0x130 [ 326.223783] kmem_cache_alloc+0x2d7/0x780 [ 326.227946] ? __pmd_alloc+0x410/0x410 [ 326.231863] copy_process.part.0+0x444f/0x6a00 [ 326.236566] ? __cleanup_sighand+0x50/0x50 [ 326.240812] ? lock_downgrade+0x6e0/0x6e0 [ 326.244971] _do_fork+0x19e/0xce0 [ 326.248437] ? fork_idle+0x280/0x280 [ 326.252164] ? fput+0xd4/0x150 [ 326.255359] ? SyS_write+0x15e/0x230 [ 326.259073] SyS_clone+0x37/0x50 [ 326.262570] ? sys_vfork+0x30/0x30 [ 326.266113] do_syscall_64+0x1e8/0x640 [ 326.270136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.275122] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.280304] RIP: 0033:0x459879 [ 326.283517] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 326.291216] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 326.298474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.305731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.312992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 326.320277] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:04 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x23, 0x9, 0x80000000}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'yraI\x8dW@d,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000080)={0x1ff00000000, 0x6e, 0x7fff, 0x605}) 11:10:05 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000001580)=[{&(0x7f0000000100)="a6f56392b22330f268041a86233c2c5244afe3d83786c593f836f13b2663f175b615d88bb1e8112c", 0x28, 0x10000}, {&(0x7f0000000480)="62e96dd5e8f334abe041572d29879fbe6cf6198ee33cba02cd987f08cfbb73c3e9b0cb820e92379a1a8d4a976d5909a7b0bd1a24e563833f51ab859bb239fa4a4570f1c9260e277fb7e496df97f3995545d0e28461c76436c24cc6fa0fd464522ef3fa80cd3d93fa2dd23dfa671f6147c2d8b2b0f5fd637a205101c72ff3472807b42d829691d55e79bfdb0763a67c53fa4fdaccedde52de51a10892a4f14ebf607924da9fbb0eac5e0e25c9edbbc6810bf4153757cee8d7430703bc876548ffca0db3cc6304155e1e2501dda68efeb4d50f0c3a00fa3ec1d1de67201e1930b12a2ece718ebdee9e8d411dd4d4bfc053fb4ac0691d65062634830dab02bf43d71ac98d8eaccc7a74dd641419c351ef7dae93a5f797c5a2050e0c5cadb8525e6d6a8144ad421f9686ced6bd9bc81eeafdc1abad0090e8c4e230d143f1c0d641ec3f1c97bcf92d99a18e18ffa6d22ffa423f43f243ab2a6ca58e1da7c4c2cc735e1c176672902d9f04e9278f72d55ae1fe799a9d3e1615ce379b83eef0244b739d05c173d438690ddfa827f0a81e7d019a61b59944ddcbba057a24c5105fa49d0ef9ea0b5007b1381ea057f11f312891c86865032e8abc5e105541eea46325e632dd3b670de40cf6d18068e2be99a3c19ab14b87b2c2745f3cb1384eb31f879469fc516f3dd50648c5badec8b505dc9ebf06511369b3764279e4453a0ea6d925f9edf0e4dd78b877054f123cd6015b32eeabfe67431e72b9232c9e2858f88fad0d5c95607d1fee0e8a84284704b4e1f954d1fd3468de34879aa154f9f9c81a639ae199e233c523e1fad36bf7a6e3368d56c4cacd7fce25dc74443bfd74112d6b5d2bac18da37e0d64ce6e54ad04c618bdf5535a549ae4a306d9c68305e2e481ecbae451cabd04eb0e9c4e61b5c492ef3245a20e65838bba85e8b2ec2a2e219c7460a527fbf52054b71ea11035c03f8fae2dedc6e6c176be7fb6a675100f3957abfbb63e6d06b1eb78be3933b55c3c46da90b8feb5c0b47871623813012b1e0ccc94fdfcd1d4398d2d9fb8d3fb15a9bdb8eb9d71e5d1b27e49966c3716da6539bff382a2bb225c123a188090f27ca6d5b31ee02283cac6190bb0c52cec43c4a5afdfb5fcbcb4833d0d8492d7bcee6f644831c68cf61775eafe068eb48661ee4932382a06ec326ccd315dcbf29ceb8886d5fe4a202ff99cc4a167ee117fa65260ea82051597a4c489abad95954c1c501aa1af0d0a4b09fd9e5e45942920322abcff6619ae3e76845d1ff435a04f97d1846df765b45ac949430e0bb07d8dc328a1b3241f2dddf86d15c36778ad495d2dd5b078afc962aeabfaad98f91d5c629765716fa444ffe9ab670d123f9da275ad593f45a59a1fde63a56520fd18460a13762726a7e6323c61827303e132a4e8fb37a2e7ee824abe9fd9e4dfdc09d9e56f7aad478c427260f544685f158e2a295381b04653b59b66f83d278e276ad724cb1a0386c55100c49a3321024ef106868fee40c4883128e3fa870821198e19b567b6041d58ca6a467bf2369bf31a14e42bca49a749609223a6846b75a16cecfa7de825b50c97f7bb711d19928bbb818559814baa6889577ec066cc65901b14c50730e07af514dc49eae63690da04747e51cffa0f39502c11cf0df72533d54cc13e1b32879588f0bd0758f044cb2aebb13c0e1dffd0e71ab056346a17175ffe5c23d3a86b4a3d6cd0bc10b90bfda622227b556ad4c9f8efe49ca230d395358087079a042397604714b96241b382a2dce8f945cbd9251d79bdf6f77b25e01b60c6857fa8580fda877b0346f885e011da19751da89b1e7303e92f74fb0ec4358d6380ff8d7674b0cc4d5260fb50b1ecb7137ba5aabc857b21b54d0b956915401c24834c834ec16a0552612816b10504a3b3631091918f4eac1cc4c598a2c309e47a1debcdcc5a0492ee35d09cec0693e983c030f705d78062cdc47ccddecf77ff462af9510197253deabbddfb6f3d4d0984395f62b707fb2c5224d8ecc555606652c783f82406258288eef05bc317c0b0d54814098ca7b5729d71b8c0de563ad13e2216802315689bef4a01d20fac636c5e76c572b56585376a7f1a664d352de84cdf7abb7483087f6431bc967673e4cd521b658179e7f2398067b77df2311076058aac79daf6f305d6d3ca6ee3d329788e9c35e8481172892365a0eff1934c74617ef67d4ce00e5caf502c872aac66ab3abcb0452300948f2ff2b791e868f7f6da9992cc5292b7b78347b00f869bca29175c362461c10c28953c55f7e2caeefa133e10682dd3f1af91512d14be20fd33480bde221181e56b9b2b5d5eb446edc8b4adc3c7bc56d844fcf0f57f0cdfc5fe7f347bcde932b0193861b40f04ed56f2713a4d6cbb71624198545b74dfef6a44922d013b4184a849390d4a660d2ff4cb3ebd7dc91624af70f3aa9b4b4c89d7c02acf6db0f8ac7ce75c461667622ac138738f573077ca41cf2240b5bb3051a99c3a0cc979f4d4af1a3e6238d1da4bb0a60b7d4dfd16f2d8bf40e9680c492d1cc1a203a8ac5ac211b36c0b4de18633c185ac5234a132858e5335341ebcdd97b56eefb6e9cb4745cff2f94191002c603ceda2c4c0e3dc9357a94882346b249b45d0e010556bf1600c75be7ab2e5ffa20c80be96f48e344c58773bec34dbe80494f87f20d6ab7690e7eacf065c3bd8e3be50b4478944a6d24e32be0c16be10910df1345a48804d37889d8208965e944cebfa71cbb7ba8f5338128a5078750419810a6581dbdefbfa1d7f066dfd0e47d9c3e4527dfacd854627868f09aa267ca119889b6fa473a096876d3560686a1ac4892deb24207f581dda57a32a3175a4bf244561c2f20e3862e6a3e40b3d8b0090c80c53ce04fd802a6737f93ecdfbf9aafc95fe2f76ca94dc756630f9aa365273fe5ae3b893cbb1b35df10d6ded4d8de9a01ffc71d4ea16b7ccf8c25f9a6be20b70024e5a725e4e4fc53424a5e80774013d9ef918563acbdedcd810fff0369c35015b6b9c9a3052f475e35978d996b9192a8b2cf48f4cafb6c57becdccc366f2478f67765ae238b84fd873afb8d86e84f8ee91d748cbc553b516e25659e0f271887d89ac726ab1304ff0bd542182cea5e760346b7e0298b9b7bdd5ed0586b3ff303944875fa09b2fd99aed03372ab3f351d1bf030a00c4f7ab1b2b1ec685e7d5a69ce266f3760da88eb746e2adf7549d0b2f86266e209a2182712c957393662fbb1a58faf3fad8faab48f084f800d6a7ad55a3954f94682286390454394cb1bfe662b436bf88cef344d6900cc44f6c03a44291a51798c782eaaaa3723d55f684f1213af53a25cb46886ef49780adacd9ba7ba1f17d46732fd6a03965d87b24334a7390c47056d3da48e2dc1790c3953a906a36f1438e4f264b7e1ee975a5fda8a9ec6ed6195b1c23e0a0ab00b99a9ce248368bd5130e5794b77f6d8cbfbb9e7152d31bdde58695face499f069d0c29a6cf977f8e033181b2f7aad86982807cee6ef349a4b462465d412a7b993ac307fc4eb72c52f21609a9ad868b52c6f5b9eed95d153797546de8dad7fbec89a78ff7b4b9e187eef74a853167d8cf47963c235cb34b41a21616cea3ab16331cc3d4fe40627375b8e2ba79d19bafd054dc7e73e6f37c824228e9ca9bef299ef6a016c2587018af7df992376a182c979265fbb49582f4d3ad0d19a52864dd468a97a1e9c9483e69151eacf9b1c6afa76f31b6b85a7fb78140564819a2563326449815d3fcaa5688311aa49b30abf176bbf5ebd51f3fa6bf2efeaa84055c55fdbe4e8497aaa9b38c25bbc699f36cc5a5a678ba54e36d1c32fbf8f253e7facacb0d36fbb24a4264a041914382c750599e0906cf7abc865049310861c9102c426602ee110f9720c291987f5db3b5fff8485ca1b54e8cb62e86342acf59822135442b347ab1dd6a345e035da823ffbc2e55cc7b1918753e6654f2a0279975efbbf951163c2383911eca443ad0ce8c79981cbad0c3053884ead21554129414bf9ee7fa07d0d044a5f68683071f95e6c60def23de76bc5f3ad70c258ba220efb0fada8ee70307e41ba962f4482f9c1654f951daf0c75d0421433164ed195742a14ba7a845d8640efe150716a879cf52a6aa6d72f657fc35b1e01511000ee971c1b7b5c628f89017b1e5be57f581942fa9ce9253b5d376b9e59eeeb1f0014f08e7044552535274cf845e9a796e27c8f3215fa247316a4626db06d5f7156c8c64a468ea629f4160e5f37793d7802fad482f16b80c0097bbfb05f6dcecb5a23e5361ffb2e2f983fe85178b41948bbf87d8efadf4ffc9a6cc84f8481ae49857776d9ec2cb61f622e8b0f5cc698574521f444e583e79ce05aa16cc35d32d8a9811f90812d2dfc1cc12bc64d6dce91ffebf1a9f1265dcb3f6a92d5add8edbf0f0fa6ce2b39697b3d52a7641c2c5036f10d488c7804271ca0a60ba305d4b790a17d2472d881615afef07bf7797fc141f67eaf2f171a08327b8bf578a80582f007315be7c44a10d88b9af6d4e605e0fa33779019e594a1ac2dd8e130b8592cb719aa9f80df0592af49e9cbff74eb40d5deab216b78f7477090bacf487069ef0c187ca1f2647a43a5d0467f07c6337f09bb09c37561a24df4e74609f8bb2a692810535099d2cd40690984265ae911b97b34f96aa1906a62a9d4e666ba149873987dea681a3bbbb2bfb7bf10fe9998aac281b1fc8c73dccd23170df6f003efe72e73d624c86b45b2d8add9dcad95ece528a3e4d10f1506f73951059c8ebeb0b06b87980e050e43d9a5665d31461b8e0eb8414efb79a387f12b0cc4b68dd95b5652b0986c344c0d259adee8df1d9faa18549d9a34ce04943e7d8b4288ba949ad5026b37baa91d86ca753f7fd654d11035f4f955adccb6c687f834519ea445a86e9b1c42629fc79e8311dc9c2a9bc6e79dbfb0eb0fef25eca49f152a2be0228b3a126b52c54615e38ba506d19aa0a8e1d476991da71c993ba9b92593a18d0927437fe85225eef0ce14dd8de8c1285490a9b131634ded82f8089da065127039d430b9902577eaf5f59f97c121eebc93bc3f56150d2c8e14503ec9541a1cc15bf909f18b480c330b1a06b139155d2e694167fa2948592623fc05cc546d9a2c0b54b84f5c892af0fa33369f7949570542c7f97c63f52708e45e3074123eacc5d7c9c7942fb818d7966997635997c4135461b29b84b4dd41c8239a05f57055a27ac272c1e5ad2ab5fb22804b3ea718d628632cc4ee6ce1bbcf7b5209efd245742dcecf44f49023c8f62031c55aebc5aad095ef5f9854cedaa3feab33b7d83f20707e884f2cd56dd8608737939f8111a55fe3dd20911a71ec601e25f730fc4a42b62be1dbb7f4f56b56aa1435542c789782ea1186e7886c0b83926a32a66f1989718157c35bd0e41cf315a752877c54876b7aaa1f54c190e0d23d662052907a5f1682c847d2c6ff810868060f1fc311e304caf2c50b5ebd6de5591efe07331e1858c279784d79d22bf364651f407ab8834dc4cfed38b73abb6b6ced0b75eff36badb6606766dc0f52c4970de833232d465e728c49462c449cb4638cbe614087d7f34b902661b97d48978b0c47efc21deb8f6ffb26a6c6bc3fcce26be150cb25c786d8deb45cec61ffff9910c867111861023c770083e009d740f75b4e8a01799ef626f8aff7f4990ae7c9898a1c96f5deda88d325e95193627c9ef4b2e6184bb63024f638685bb39f632a93557707412b52fc20eb3155b1bc31ee925896e2d0be4fe1752dc95", 0x1000, 0x6}, {&(0x7f0000000140)="ec10ae0711f3108be6bc009f997b4bc7ca35c8712959d05622a07a6d46de26d01fd411340eaf9516589d388cca2112ba2c1502b0a584aeb17213dbe2bfa269cd6c85b72a90283badb9b675523fbf2058452faf2578e7e6012a09230b0fb04ae2d54ac9727dd1c8574835a23a", 0x6c, 0xffff}, {&(0x7f0000000300)="8740791525f4fa6bb14b5d3be6ef1195b35b96ecadf9134ad4760b589fe294037af47bfc1b7b672f381e52aa7d0789f804532b973f5564e301d230703e6f02ad9d0a6c8acc7a040e85aa4d64e24de00a8b28d54c546513e81df8efa723960915d5ab8d304179e94fcea335a0eee64296cf9d4955a07731ac5347337cc8b7eea2241158b652ea7dc63a3ed445c9da1543f411d829834cc22453a7c2f0df17b5ef96e5dee2c442091213b443d9e58bc7aefc63e1fe40667b4fa6513694c3ff74f32c6b1465af53a32e0d775581b58d3151bdf3263832cc150962ccd0bf051dcf400d5ef8bcfb85a7acb4e7971d8da567cf19dd321a39", 0xf5, 0xd3a}, {&(0x7f00000001c0)="9e024ff4c6414628bb902703524330954322d7f565eb03498b5a92bf8f1c6c7c382d3833340e6c2f599bc87db6e0d4bee002", 0x32, 0x8001}, {&(0x7f0000001480)="7c51e138e2f0ff7ac0ec8d6b9fd4c184056244a3572b72326c31d397c03cd96bbe56e161829a0cf2436c20ddddc4ad9bf51186dc8d08c73f17f8f43d480f0de3b0e8fc6754cf82156c1074a071c2b8d9b94402d8dbb6132d505853c7faf27b23dfecdfb83d84cdf39021b931c85bbcf570324dccc04321f47bf819eb0cf95e4215c794488e161183e89d3737992585fdc2aba7792f3601e080708072718d5496e6828c9a8c49a49a88c8bb6c6c804eceb9e06e0c2ec2519844b4bd9a1f22f87cb2cde6fecfc09f6f00d395a65e250843d448fbaf4ae23418a891ffce1149ce4a531854f3d519f2d34a0940cec2ecf528", 0xf0, 0x4}, {&(0x7f0000000200)="dbf2e9aa61acef7af30dac65054ca6c604788912b3e1e181e2c5c61b54b5b4b856c3f68ec89bd5dae2a905abd898de6beb479126ce02728837a7a545f3f736f5a3def1663427b23ab8f394f41adf07fd433b33735b6d802d5f8e2eef865f5923adadab65d8837295e849f7b4058578c07fb71d", 0x73}, {&(0x7f0000000400)="c0c3c8ada340e587cd19e553ac9d93c957e195eeae24bd71023bdb9d94e204aed6df5db35bd8881468e3ec6cb87a8a63961b53485996d35afe39", 0x3a, 0x9}], 0x400, &(0x7f0000001780)={[{@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@nodiscard='nodiscard'}, {@nodiscard='nodiscard'}, {@quota='quota'}, {@resize='resize'}, {@uid={'uid', 0x3d, r2}}, {@resize='resize'}], [{@permit_directio='permit_directio'}, {@seclabel='s\xe5clabel'}, {@smackfshat={'smackfshat'}}, {@smackfsroot={'smackfsroot'}}, {@smackfsdef={'smackfsdef', 0x3d, 'devtmpfs\x00'}}]}) 11:10:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 0 (fault-call:6 fault-nth:35): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xf1353f84d8a3133e, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 326.717024] FAULT_INJECTION: forcing a failure. [ 326.717024] name failslab, interval 1, probability 0, space 0, times 0 [ 326.728865] CPU: 0 PID: 14330 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 326.735994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.745359] Call Trace: [ 326.747952] dump_stack+0x138/0x197 [ 326.752141] should_fail.cold+0x10f/0x159 [ 326.756290] should_failslab+0xdb/0x130 [ 326.760263] kmem_cache_alloc+0x2d7/0x780 [ 326.764412] copy_process.part.0+0x444f/0x6a00 [ 326.769002] ? __cleanup_sighand+0x50/0x50 [ 326.773244] ? lock_downgrade+0x6e0/0x6e0 [ 326.777404] _do_fork+0x19e/0xce0 [ 326.780865] ? fork_idle+0x280/0x280 [ 326.784665] ? fput+0xd4/0x150 [ 326.787855] ? SyS_write+0x15e/0x230 [ 326.791564] SyS_clone+0x37/0x50 [ 326.795048] ? sys_vfork+0x30/0x30 [ 326.798672] do_syscall_64+0x1e8/0x640 [ 326.802551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.807400] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.812589] RIP: 0033:0x459879 11:10:05 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4001, &(0x7f0000000240)=ANY=[]) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 0 (fault-call:6 fault-nth:36): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 326.815769] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 326.823797] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 326.831095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.838357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.845620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 326.852890] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:05 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 11:10:05 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000140)='5%*&,\x00', &(0x7f0000000180)='/dev/net/tun\x00', &(0x7f00000001c0)='$mime_type\x00', &(0x7f0000000200)='9p\x00', &(0x7f0000000300)='cpuset&)4\'\x00', &(0x7f0000000340)='wfdno', &(0x7f0000000580)='mem\x00\x00\x00\x00\x00\x00\a\x13', &(0x7f0000000380)='trusted}\\\x00', &(0x7f00000003c0)='trusted\\+trustedcpusetprocppp1,-\x00', &(0x7f0000000400)='rfdno'], &(0x7f00000007c0)=[&(0x7f0000000740)='keyring{(-posix_acl_access\x00', &(0x7f0000000780)='\x00'], 0x400) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/166) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x99, 0x3, 0x4, 0x4000, {0x0, 0x2710}, {0x2, 0x6, 0x75, 0x1e, 0x20, 0x5, "f0249e5f"}, 0x1, 0x2, @fd=r5, 0x4}) chdir(&(0x7f0000000040)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 327.101625] FAULT_INJECTION: forcing a failure. [ 327.101625] name failslab, interval 1, probability 0, space 0, times 0 [ 327.128308] CPU: 0 PID: 14357 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 327.136663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.146030] Call Trace: [ 327.148645] dump_stack+0x138/0x197 [ 327.152416] should_fail.cold+0x10f/0x159 [ 327.156588] should_failslab+0xdb/0x130 [ 327.160586] kmem_cache_alloc+0x2d7/0x780 [ 327.164753] ? anon_vma_clone+0x310/0x470 [ 327.169062] anon_vma_fork+0xe9/0x4d0 [ 327.172930] copy_process.part.0+0x45e2/0x6a00 [ 327.177530] ? __cleanup_sighand+0x50/0x50 [ 327.181770] ? lock_downgrade+0x6e0/0x6e0 [ 327.185914] _do_fork+0x19e/0xce0 [ 327.189484] ? fork_idle+0x280/0x280 [ 327.193201] ? fput+0xd4/0x150 [ 327.196445] ? SyS_write+0x15e/0x230 [ 327.200155] SyS_clone+0x37/0x50 [ 327.203514] ? sys_vfork+0x30/0x30 [ 327.207054] do_syscall_64+0x1e8/0x640 [ 327.210936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.215793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.220981] RIP: 0033:0x459879 [ 327.224163] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 327.231862] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 327.239128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:10:05 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:05 executing program 0 (fault-call:6 fault-nth:37): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 327.246488] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.253773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 327.261056] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 327.393780] FAULT_INJECTION: forcing a failure. [ 327.393780] name failslab, interval 1, probability 0, space 0, times 0 [ 327.415239] CPU: 0 PID: 14380 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 327.422406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.431782] Call Trace: [ 327.434400] dump_stack+0x138/0x197 [ 327.438051] should_fail.cold+0x10f/0x159 [ 327.442303] ? anon_vma_clone+0xde/0x470 [ 327.446403] should_failslab+0xdb/0x130 [ 327.450393] kmem_cache_alloc+0x47/0x780 [ 327.454468] ? anon_vma_chain_link+0x142/0x1a0 [ 327.459065] anon_vma_clone+0xde/0x470 [ 327.462973] anon_vma_fork+0x87/0x4d0 [ 327.466793] copy_process.part.0+0x45e2/0x6a00 [ 327.471408] ? __cleanup_sighand+0x50/0x50 [ 327.475666] ? lock_downgrade+0x6e0/0x6e0 [ 327.479831] _do_fork+0x19e/0xce0 [ 327.483302] ? fork_idle+0x280/0x280 [ 327.487034] ? fput+0xd4/0x150 [ 327.490239] ? SyS_write+0x15e/0x230 [ 327.493977] SyS_clone+0x37/0x50 [ 327.497357] ? sys_vfork+0x30/0x30 [ 327.500917] do_syscall_64+0x1e8/0x640 [ 327.504821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.509684] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.515054] RIP: 0033:0x459879 [ 327.518261] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 327.525978] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 327.533255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:10:06 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'vlan0\x00', 0x3}, 0x18) 11:10:06 executing program 0 (fault-call:6 fault-nth:38): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 327.540535] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.547831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 327.555220] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 327.702973] FAULT_INJECTION: forcing a failure. [ 327.702973] name failslab, interval 1, probability 0, space 0, times 0 [ 327.719110] CPU: 1 PID: 14391 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 327.726241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.735724] Call Trace: [ 327.741634] dump_stack+0x138/0x197 [ 327.745416] should_fail.cold+0x10f/0x159 [ 327.749580] should_failslab+0xdb/0x130 [ 327.753572] kmem_cache_alloc+0x47/0x780 [ 327.757646] ? anon_vma_chain_link+0x142/0x1a0 [ 327.762240] anon_vma_clone+0xde/0x470 [ 327.766142] anon_vma_fork+0x87/0x4d0 [ 327.769958] copy_process.part.0+0x45e2/0x6a00 [ 327.774576] ? __cleanup_sighand+0x50/0x50 [ 327.778834] ? lock_downgrade+0x6e0/0x6e0 [ 327.783006] _do_fork+0x19e/0xce0 [ 327.786583] ? fork_idle+0x280/0x280 [ 327.790306] ? fput+0xd4/0x150 [ 327.793509] ? SyS_write+0x15e/0x230 [ 327.797240] SyS_clone+0x37/0x50 [ 327.800612] ? sys_vfork+0x30/0x30 [ 327.804165] do_syscall_64+0x1e8/0x640 [ 327.808195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.813060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.818287] RIP: 0033:0x459879 [ 327.821492] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 327.829205] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 327.836760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.844042] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:06 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 11:10:06 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dew\x00\x00d\xbb\x00\x00\x00\x00)\xa5\xb8\x1e\x11w\xea\xf4\xed\xd9\xb9\x00\x00\xa6\x93%\xabE|\xbf\xad\xa4(\x04\xac\a\xa7f\xd6\v\x1a\xb2C\xe3N\xd3>\xbf\xc6\x85\x92=\xa1U\xe8\xd5\x18\x8b\x9c\x11\xaa\xa2*\xe3Io/\x8bbv\xf1\xbb\xd8\xaf\xa8f\xf6\x16\xd7M\a\xcbY\v6\xd9\xf1\x9b\x01Z\x18[om\xc30\xbd\x8fS\x98\x15\xca\'x\xb9\xad\xf00\x94\x02\x0fw\xeb\xe2', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000000)={0x0, 0x101, [0x1000, 0x7, 0x9, 0x80000000, 0xb28], 0xaadd}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:06 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/166) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 327.851324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 327.858606] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:06 executing program 0 (fault-call:6 fault-nth:39): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:06 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x7, 0x0, 0x7, 0x3ff, 'syz0\x00', 0xfffffffffffffff9}) r3 = fcntl$dupfd(r1, 0x406, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000080)={0xd, 0x0, {0x57, 0x4e, 0x100000001, {0x8, 0xd62f}, {0x6, 0x51b}, @const={0x2, {0x9, 0x1, 0x8, 0x5}}}, {0x56, 0x1ff, 0x7, {0x200, 0x7}, {0x1, 0x80000001}, @const={0x1, {0x1, 0x80000001, 0xffff, 0x10001}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) utimensat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='3\x00']) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x81, 0x10001, 0x100000001, 0x0, 0x6, 0x5, 0x101, 0x6, 0x964b, 0x0, 0x100}, 0x21e) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 328.046043] FAULT_INJECTION: forcing a failure. [ 328.046043] name failslab, interval 1, probability 0, space 0, times 0 [ 328.081405] CPU: 1 PID: 14414 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 328.088556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.098049] Call Trace: [ 328.100665] dump_stack+0x138/0x197 [ 328.104315] should_fail.cold+0x10f/0x159 [ 328.108482] should_failslab+0xdb/0x130 [ 328.112475] kmem_cache_alloc+0x2d7/0x780 [ 328.116637] ? anon_vma_clone+0x310/0x470 [ 328.120804] anon_vma_fork+0x1ce/0x4d0 [ 328.124708] copy_process.part.0+0x45e2/0x6a00 [ 328.129326] ? __cleanup_sighand+0x50/0x50 [ 328.133576] ? lock_downgrade+0x6e0/0x6e0 [ 328.137742] _do_fork+0x19e/0xce0 [ 328.141210] ? fork_idle+0x280/0x280 [ 328.144948] ? fput+0xd4/0x150 [ 328.148151] ? SyS_write+0x15e/0x230 [ 328.151876] SyS_clone+0x37/0x50 [ 328.155260] ? sys_vfork+0x30/0x30 [ 328.158817] do_syscall_64+0x1e8/0x640 [ 328.162715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.167575] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.172773] RIP: 0033:0x459879 [ 328.175967] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 328.183816] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 328.191090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.198363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.205644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 328.212923] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:06 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000001580)=[{&(0x7f0000000100)="a6f56392b22330f268041a86233c2c5244afe3d83786c593f836f13b2663f175b615d88bb1e8112c", 0x28, 0x10000}, {&(0x7f0000000480)="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", 0x1000, 0x6}, {&(0x7f0000000140)="ec10ae0711f3108be6bc009f997b4bc7ca35c8712959d05622a07a6d46de26d01fd411340eaf9516589d388cca2112ba2c1502b0a584aeb17213dbe2bfa269cd6c85b72a90283badb9b675523fbf2058452faf2578e7e6012a09230b0fb04ae2d54ac9727dd1c8574835a23a", 0x6c, 0xffff}, {&(0x7f0000000300)="8740791525f4fa6bb14b5d3be6ef1195b35b96ecadf9134ad4760b589fe294037af47bfc1b7b672f381e52aa7d0789f804532b973f5564e301d230703e6f02ad9d0a6c8acc7a040e85aa4d64e24de00a8b28d54c546513e81df8efa723960915d5ab8d304179e94fcea335a0eee64296cf9d4955a07731ac5347337cc8b7eea2241158b652ea7dc63a3ed445c9da1543f411d829834cc22453a7c2f0df17b5ef96e5dee2c442091213b443d9e58bc7aefc63e1fe40667b4fa6513694c3ff74f32c6b1465af53a32e0d775581b58d3151bdf3263832cc150962ccd0bf051dcf400d5ef8bcfb85a7acb4e7971d8da567cf19dd321a39", 0xf5, 0xd3a}, {&(0x7f00000001c0)="9e024ff4c6414628bb902703524330954322d7f565eb03498b5a92bf8f1c6c7c382d3833340e6c2f599bc87db6e0d4bee002", 0x32, 0x8001}, {&(0x7f0000001480)="7c51e138e2f0ff7ac0ec8d6b9fd4c184056244a3572b72326c31d397c03cd96bbe56e161829a0cf2436c20ddddc4ad9bf51186dc8d08c73f17f8f43d480f0de3b0e8fc6754cf82156c1074a071c2b8d9b94402d8dbb6132d505853c7faf27b23dfecdfb83d84cdf39021b931c85bbcf570324dccc04321f47bf819eb0cf95e4215c794488e161183e89d3737992585fdc2aba7792f3601e080708072718d5496e6828c9a8c49a49a88c8bb6c6c804eceb9e06e0c2ec2519844b4bd9a1f22f87cb2cde6fecfc09f6f00d395a65e250843d448fbaf4ae23418a891ffce1149ce4a531854f3d519f2d34a0940cec2ecf528", 0xf0, 0x4}, {&(0x7f0000000200)="dbf2e9aa61acef7af30dac65054ca6c604788912b3e1e181e2c5c61b54b5b4b856c3f68ec89bd5dae2a905abd898de6beb479126ce02728837a7a545f3f736f5a3def1663427b23ab8f394f41adf07fd433b33735b6d802d5f8e2eef865f5923adadab65d8837295e849f7b4058578c07fb71d", 0x73}, {&(0x7f0000000400)="c0c3c8ada340e587cd19e553ac9d93c957e195eeae24bd71023bdb9d94e204aed6df5db35bd8881468e3ec6cb87a8a63961b53485996d35afe39", 0x3a, 0x9}], 0x400, &(0x7f0000001780)={[{@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@nodiscard='nodiscard'}, {@nodiscard='nodiscard'}, {@quota='quota'}, {@resize='resize'}, {@uid={'uid', 0x3d, r2}}, {@resize='resize'}], [{@permit_directio='permit_directio'}, {@seclabel='s\xe5clabel'}, {@smackfshat={'smackfshat'}}, {@smackfsroot={'smackfsroot'}}, {@smackfsdef={'smackfsdef', 0x3d, 'devtmpfs\x00'}}]}) 11:10:06 executing program 0 (fault-call:6 fault-nth:40): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 328.237793] 9pnet: Insufficient options for proto=fd [ 328.374016] FAULT_INJECTION: forcing a failure. [ 328.374016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.412171] CPU: 1 PID: 14428 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 328.419319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.428791] Call Trace: [ 328.428814] dump_stack+0x138/0x197 [ 328.435019] should_fail.cold+0x10f/0x159 [ 328.439184] ? __might_sleep+0x93/0xb0 [ 328.439666] JFS: discard option not supported on device [ 328.443081] __alloc_pages_nodemask+0x1d6/0x7a0 [ 328.443090] ? save_stack+0x45/0xd0 [ 328.443097] ? kasan_kmalloc+0xce/0xf0 [ 328.443104] ? kasan_slab_alloc+0xf/0x20 [ 328.443114] ? __alloc_pages_slowpath+0x2930/0x2930 [ 328.443133] alloc_pages_current+0xec/0x1e0 [ 328.443146] pte_alloc_one+0x1a/0x100 [ 328.443154] __pte_alloc+0x2a/0x2d0 [ 328.443163] copy_page_range+0x11ba/0x1bd0 [ 328.443176] ? anon_vma_fork+0x358/0x4d0 [ 328.489983] ? vma_compute_subtree_gap+0x190/0x1f0 [ 328.494939] ? __pmd_alloc+0x410/0x410 [ 328.498841] copy_process.part.0+0x4764/0x6a00 [ 328.503464] ? __cleanup_sighand+0x50/0x50 [ 328.507833] ? lock_downgrade+0x6e0/0x6e0 [ 328.511999] _do_fork+0x19e/0xce0 [ 328.515466] ? fork_idle+0x280/0x280 [ 328.519188] ? fput+0xd4/0x150 [ 328.522391] ? SyS_write+0x15e/0x230 [ 328.526117] SyS_clone+0x37/0x50 [ 328.529632] ? sys_vfork+0x30/0x30 [ 328.533409] do_syscall_64+0x1e8/0x640 [ 328.537308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.542252] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.547448] RIP: 0033:0x459879 [ 328.550646] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 328.558363] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 328.565636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.572925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.580299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 328.587578] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:07 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0)=0x200, &(0x7f0000000400)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(r4, &(0x7f0000000300)='./file1\x00', 0x40, 0x18) write$FUSE_BMAP(r5, &(0x7f0000000340)={0x18, 0x0, 0x2, {0xfffffffffffff100}}, 0x18) r6 = socket$inet_udplite(0x2, 0x2, 0x88) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) write$UHID_CREATE(r8, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/130, 0x82, 0x95, 0x7, 0x1, 0x2000000000000, 0x80}, 0x120) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:07 executing program 0 (fault-call:6 fault-nth:41): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:07 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 11:10:07 executing program 3: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4, 0x4}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x1000000000000) r2 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000340)=""/19) shmctl$IPC_RMID(r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 328.859992] FAULT_INJECTION: forcing a failure. [ 328.859992] name failslab, interval 1, probability 0, space 0, times 0 [ 328.906620] CPU: 1 PID: 14449 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 328.913788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.923282] Call Trace: [ 328.925889] dump_stack+0x138/0x197 [ 328.929559] should_fail.cold+0x10f/0x159 [ 328.933727] should_failslab+0xdb/0x130 [ 328.937719] kmem_cache_alloc+0x47/0x780 [ 328.941794] ? __lock_is_held+0xb6/0x140 [ 328.945863] ? check_preemption_disabled+0x3c/0x250 [ 328.950894] anon_vma_clone+0xde/0x470 [ 328.954802] anon_vma_fork+0x87/0x4d0 [ 328.958618] copy_process.part.0+0x45e2/0x6a00 [ 328.963559] ? __cleanup_sighand+0x50/0x50 [ 328.967804] ? _raw_spin_unlock_irq+0x28/0x90 [ 328.972311] _do_fork+0x19e/0xce0 [ 328.975783] ? finish_task_switch+0x14d/0x650 [ 328.980295] ? fork_idle+0x280/0x280 [ 328.984196] ? __schedule+0x7c0/0x1cd0 [ 328.988222] ? pci_mmcfg_check_reserved+0x150/0x150 [ 328.993268] SyS_clone+0x37/0x50 [ 328.996641] ? sys_vfork+0x30/0x30 [ 329.000190] do_syscall_64+0x1e8/0x640 [ 329.004085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.008950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.014157] RIP: 0033:0x459879 [ 329.017349] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 329.025061] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 329.032332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.039611] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.046890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 329.054166] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:07 executing program 3: lsetxattr$security_ima(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "f53f1381f7"}, 0x6, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) setxattr$security_smack_transmute(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000980)='TRUE', 0x4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000008c0)=[0x100000000, 0x9]) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x100, 0x4) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3f, 0x200) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000440)={0x0, 0xb4, 0x40, &(0x7f0000000400)=0x3}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@dev}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_delneigh={0x80, 0x1d, 0x10, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r7}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_LLADDR={0xc, 0x2, @random="4519972aa7ad"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_SRC_VNI={0x8, 0xb, 0x8b9}, @NDA_VLAN={0x8}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x80}}, 0x4000) syz_mount_image$minix(&(0x7f0000000740)='minix\x00', &(0x7f0000000780)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000880)=[{&(0x7f00000007c0)="8110742b608b65a2941f38a6c4b1c742bd5683cf58d6e39dc034cc78931bdea0cf31184c0fcc47d7e173dac691b57090abd25e459bc58359969914af91f16da40fb9e4c95aedb3c9a3dd7ee5228249cc645bac9926feddf646eca909a9ec650cd727778c906a9003a4890c8aa641b5012a11ca3dc9f35b7cec739e7f5788a53f42cbefabc1147d911bbea567e87c771563360aeb5fe428", 0x97, 0x3}], 0x121085, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', r7}) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e20, 0xff, @remote, 0x44}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="acf69f9f7e1d7fa112e8b5962fd273f4475abc48973c66d3208850544a058ad17649b5f144b42d6c08270cdca8fed1e33ebba4ed3aec8d701fd26f8a373f541695df003f5bea3998bc7dfa16bb11784b4006bdc198864cf62126e84178f8ee1d2bbb8ea9ac9b9e7e35fe400a508502737f8a1300ce7f9d2622b1e36a91e0bca4f792b891c59fab0f4898e08ee9f6c4f7a9c7108b099c0b286b596d839da3471d376d014141d1b114f05b70bc58d59badbe9ced46730853836fb424255bb4241e8e2b5a47a4", 0xc5}, {&(0x7f0000000300)="6d6cb20ea933f07c4f1c6bf3324e033863de68675ec8d80ee8d83b695401975fd3ede1bf22c0eef58d834fe71f1493da2ebfbae9f4c0a9ac46b5ba4216cacecb2e3234376e032a332642daa933f219732575921b50263d9396300f072af4d3c66d16878d7797b01467e9da44b52581373f0cef6a626005f0e44e2641296f4308d19e892bb0b7005620ae2ff927447a9932c3d59800bc676abd423eb90765d43699867b80da268f792ff0e7d28188ced2c4e340cfa3ce97c9cb8242202e1b36f8911e1d95a78fe6d420afff88e7e44b06663b726199493e762087665c228a205d9e8986c35a96", 0xe6}, {&(0x7f0000000580)="443104f11c590ece686c09ba149090225ccf9f6c9b55f9ba87d7a2d333f91b32c3ad66070a84e7697c1f03f715ad2e01302943e5c504df16f450682d1c4ec5a7f1b9cb5833517006a475f2defcc5fd3717ea1c4391535186f3d9f7f0198e015da2efd30321c35ca195378c4116ee18e72ff77ccdc306718b73d2ea9600f2458fb167bd7600bc864b133f72c0e51508243f2dab0d87f2428cc95d6dac4f990dc0f79be116941e47692a4c539f1c7dad4dbf4eae16a6e68c82e759056b74b1afc57a8bd5f56e39f4bee9dbc68564f805c2e5e12c86aff5d6f9d0bfe9cd74b1d5856f6f7c", 0xe3}, {&(0x7f0000000680)="55cb00a854d4fca57cb320ef5b72207c088360522d7212957f7dde49ffe26e80428386cbffbc48b4165471eddd9f8f9b8f0d0e73bc8ebc87101a365d9e1e0ac178ab9df1698390d8f1aeea557205b31acd7f4a0b08fabc0d56f511bc33e0f1ee6f398378ee0c75398632a833fa9d094741cb7660cdc879aa8399255d5e249615c306ab1834ab14381d2cb7ea", 0x8c}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="580000000000000029000000040000001d0700000000000007280000000108bf61f0f8ffffffffffffff010000000000000001000000000000000800000000000000c9100000000000000000000000000000000000000000300000000000000029000000360000002c02000000000000050200060502ba8c05020002040122c20400000035000000240000000000000029000000320000002e56fbdfc37b39b1ace55f4d799e61ba", @ANYRES32=r8, @ANYBLOB="00000000280000000000000029000000390000002f0202080000000000000000000000000000000000000000480000000000000029000000390000002e06024f00000000fe800000000000000000000000000023a94588ec66c0d35653344f2cfbdaa5a600000000000000000000ffffe00000013f04c4e707a82688bcfd7ffdd17c19e1b20d0e7c39b64614c095470ebf540b5a655c0755b414a791b0a873b5de6e807136411cd703eb858e604c0be270f8c73453ccba4821a78ecd2c35f7008d0930e9584c50c000ace584e1f423d7b2b1e2f9118b0887e4795eefcf0d9df0d761771a07d7c72cf63cde00c0449700ac8bc3d7790c"], 0x120}, 0x4040) socket$can_raw(0x1d, 0x3, 0x1) listxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000bc0)=""/245, 0xf5) 11:10:07 executing program 0 (fault-call:6 fault-nth:42): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 329.376981] FAULT_INJECTION: forcing a failure. [ 329.376981] name failslab, interval 1, probability 0, space 0, times 0 [ 329.394555] CPU: 0 PID: 14471 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 329.402661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.412031] Call Trace: [ 329.414641] dump_stack+0x138/0x197 [ 329.418404] should_fail.cold+0x10f/0x159 [ 329.422659] ? anon_vma_clone+0xde/0x470 [ 329.426756] should_failslab+0xdb/0x130 [ 329.430759] kmem_cache_alloc+0x47/0x780 [ 329.434857] ? anon_vma_chain_link+0x142/0x1a0 [ 329.439453] anon_vma_clone+0xde/0x470 [ 329.443359] anon_vma_fork+0x87/0x4d0 [ 329.447175] copy_process.part.0+0x45e2/0x6a00 [ 329.451818] ? __cleanup_sighand+0x50/0x50 [ 329.456065] ? lock_downgrade+0x6e0/0x6e0 [ 329.460223] _do_fork+0x19e/0xce0 [ 329.463692] ? fork_idle+0x280/0x280 [ 329.467442] ? fput+0xd4/0x150 [ 329.470743] ? SyS_write+0x15e/0x230 [ 329.474472] SyS_clone+0x37/0x50 [ 329.477862] ? sys_vfork+0x30/0x30 [ 329.481421] do_syscall_64+0x1e8/0x640 [ 329.485323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.490184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.495383] RIP: 0033:0x459879 [ 329.498577] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 329.506295] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 329.513576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:10:08 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:08 executing program 0 (fault-call:6 fault-nth:43): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 329.521072] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.528356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 329.535639] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:08 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 329.665779] FAULT_INJECTION: forcing a failure. [ 329.665779] name failslab, interval 1, probability 0, space 0, times 0 [ 329.678284] CPU: 1 PID: 14481 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 329.685420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.694879] Call Trace: [ 329.697491] dump_stack+0x138/0x197 [ 329.701137] should_fail.cold+0x10f/0x159 [ 329.705326] should_failslab+0xdb/0x130 [ 329.709317] kmem_cache_alloc+0x2d7/0x780 [ 329.713490] ptlock_alloc+0x20/0x70 [ 329.717131] pte_alloc_one+0x60/0x100 [ 329.720948] __pte_alloc+0x2a/0x2d0 [ 329.724591] copy_page_range+0x11ba/0x1bd0 [ 329.728883] ? __pmd_alloc+0x410/0x410 [ 329.732790] copy_process.part.0+0x4764/0x6a00 [ 329.737404] ? __cleanup_sighand+0x50/0x50 [ 329.741658] ? lock_downgrade+0x6e0/0x6e0 [ 329.745822] _do_fork+0x19e/0xce0 [ 329.749295] ? fork_idle+0x280/0x280 [ 329.753026] ? fput+0xd4/0x150 [ 329.756234] ? SyS_write+0x15e/0x230 [ 329.759972] SyS_clone+0x37/0x50 [ 329.763350] ? sys_vfork+0x30/0x30 [ 329.767004] do_syscall_64+0x1e8/0x640 [ 329.770905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.775772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.780974] RIP: 0033:0x459879 [ 329.784173] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 329.791894] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 329.799176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.806460] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:10:08 executing program 0 (fault-call:6 fault-nth:44): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 329.813745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 329.821034] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 329.936267] FAULT_INJECTION: forcing a failure. [ 329.936267] name failslab, interval 1, probability 0, space 0, times 0 [ 329.954176] CPU: 1 PID: 14488 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 329.961431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.970953] Call Trace: [ 329.973562] dump_stack+0x138/0x197 [ 329.977208] should_fail.cold+0x10f/0x159 [ 329.981512] should_failslab+0xdb/0x130 [ 329.985519] kmem_cache_alloc+0x2d7/0x780 [ 329.989752] ? anon_vma_clone+0x310/0x470 [ 329.994012] anon_vma_fork+0xe9/0x4d0 [ 329.997833] copy_process.part.0+0x45e2/0x6a00 [ 330.002503] ? __cleanup_sighand+0x50/0x50 [ 330.006758] ? lock_downgrade+0x6e0/0x6e0 [ 330.010928] _do_fork+0x19e/0xce0 [ 330.014398] ? fork_idle+0x280/0x280 [ 330.018127] ? fput+0xd4/0x150 [ 330.021340] ? SyS_write+0x15e/0x230 [ 330.025069] SyS_clone+0x37/0x50 [ 330.028445] ? sys_vfork+0x30/0x30 [ 330.031999] do_syscall_64+0x1e8/0x640 [ 330.036048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.040921] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.046152] RIP: 0033:0x459879 [ 330.049533] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 330.057248] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 330.064531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.071900] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.079200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 330.086481] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:08 executing program 0 (fault-call:6 fault-nth:45): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:08 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='me-\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 330.258284] FAULT_INJECTION: forcing a failure. [ 330.258284] name failslab, interval 1, probability 0, space 0, times 0 [ 330.279064] CPU: 1 PID: 14503 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 330.286218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.295588] Call Trace: [ 330.298191] dump_stack+0x138/0x197 [ 330.301972] should_fail.cold+0x10f/0x159 [ 330.306143] should_failslab+0xdb/0x130 [ 330.310133] kmem_cache_alloc+0x2d7/0x780 [ 330.314305] copy_process.part.0+0x444f/0x6a00 [ 330.318918] ? __cleanup_sighand+0x50/0x50 [ 330.323163] ? lock_downgrade+0x6e0/0x6e0 [ 330.327374] _do_fork+0x19e/0xce0 [ 330.330843] ? fork_idle+0x280/0x280 [ 330.334564] ? fput+0xd4/0x150 [ 330.337764] ? SyS_write+0x15e/0x230 [ 330.341664] SyS_clone+0x37/0x50 [ 330.345035] ? sys_vfork+0x30/0x30 [ 330.348589] do_syscall_64+0x1e8/0x640 [ 330.352488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.357380] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.362587] RIP: 0033:0x459879 [ 330.365778] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 330.373501] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 330.380907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.388188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.395469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 330.402746] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:09 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0506107, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:09 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:09 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:09 executing program 0 (fault-call:6 fault-nth:46): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0xfff, 0x80000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = getgid() lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) lchown(&(0x7f0000000080)='./file1\x00', r2, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='system.sockprotoname\x00', &(0x7f00000003c0)=""/73, 0x49) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) symlinkat(&(0x7f00000002c0)='./file1\x00', r6, &(0x7f0000000300)='./file1\x00') [ 330.700371] FAULT_INJECTION: forcing a failure. [ 330.700371] name failslab, interval 1, probability 0, space 0, times 0 [ 330.749695] CPU: 0 PID: 14530 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 330.756945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.766334] Call Trace: [ 330.768951] dump_stack+0x138/0x197 [ 330.772602] should_fail.cold+0x10f/0x159 [ 330.776863] should_failslab+0xdb/0x130 [ 330.780863] kmem_cache_alloc+0x2d7/0x780 [ 330.785126] copy_process.part.0+0x444f/0x6a00 [ 330.789742] ? __cleanup_sighand+0x50/0x50 [ 330.793996] ? lock_downgrade+0x6e0/0x6e0 [ 330.798161] _do_fork+0x19e/0xce0 [ 330.801721] ? fork_idle+0x280/0x280 [ 330.805450] ? fput+0xd4/0x150 [ 330.808658] ? SyS_write+0x15e/0x230 [ 330.812389] SyS_clone+0x37/0x50 [ 330.815771] ? sys_vfork+0x30/0x30 [ 330.819325] do_syscall_64+0x1e8/0x640 [ 330.823220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.828076] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.833270] RIP: 0033:0x459879 [ 330.836460] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 330.844177] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 330.851544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.858821] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.866114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 330.873515] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:09 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 11:10:09 executing program 0 (fault-call:6 fault-nth:47): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:09 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x902801, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x1, 0x70, 0xda3f, 0x8000, 0x1, 0x4, 0x0, 0x4, 0x10000, 0x4, 0x2, 0x6, 0x929, 0x7ff, 0x7ff, 0x40, 0x8, 0x5, 0x9b, 0x7a, 0x7fff, 0x6, 0x10, 0x8, 0x7, 0x0, 0x7, 0x4, 0x3c, 0x8, 0xffffffffffffff25, 0x3, 0x5, 0x8, 0xc33, 0x80000001, 0x10001, 0x7b18, 0x0, 0xfff, 0x2, @perf_config_ext={0x9, 0x5}, 0x1020, 0x100000001, 0x9, 0x1, 0x0, 0x8, 0xf72}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x400000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 331.268788] FAULT_INJECTION: forcing a failure. [ 331.268788] name failslab, interval 1, probability 0, space 0, times 0 [ 331.292516] CPU: 0 PID: 14546 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 331.299762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.309276] Call Trace: [ 331.311896] dump_stack+0x138/0x197 [ 331.315542] should_fail.cold+0x10f/0x159 [ 331.319715] should_failslab+0xdb/0x130 [ 331.323714] kmem_cache_alloc+0x47/0x780 [ 331.327927] ? anon_vma_chain_link+0x142/0x1a0 [ 331.332526] anon_vma_clone+0xde/0x470 [ 331.336430] anon_vma_fork+0x87/0x4d0 [ 331.340345] copy_process.part.0+0x45e2/0x6a00 [ 331.344961] ? __cleanup_sighand+0x50/0x50 [ 331.349213] ? lock_downgrade+0x6e0/0x6e0 [ 331.353384] _do_fork+0x19e/0xce0 [ 331.356852] ? fork_idle+0x280/0x280 [ 331.360577] ? fput+0xd4/0x150 [ 331.363788] ? SyS_write+0x15e/0x230 [ 331.367617] SyS_clone+0x37/0x50 [ 331.370997] ? sys_vfork+0x30/0x30 [ 331.374555] do_syscall_64+0x1e8/0x640 [ 331.378450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.383308] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.388608] RIP: 0033:0x459879 [ 331.391804] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 331.399522] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 331.406802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.414080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.421362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 331.428873] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:10 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:10 executing program 4 (fault-call:8 fault-nth:0): openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:10 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x3}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 331.576992] x86/PAT: syz-executor.2:14553 freeing invalid memtype [mem 0x00002000-0x00002fff] 11:10:10 executing program 2 (fault-call:9 fault-nth:0): openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:10 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000080)={0x1, 0x4, 0x7, 0x2, 0x80, 0x3e603fa9}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:10 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x90204, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x3, 0x5aa) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/12) 11:10:10 executing program 0 (fault-call:6 fault-nth:48): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:10 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0a04b61cfa30af9c52f418179c7d71068dfe476c9c03e82734e34d04ab3851fba04ced4f5277c5668faddd769a853f69678c2e33b8b35fdca43c32dcda403093f40c3806a98a30a9013107f3406d407dc3712449ef344c8da3613c5c756c"]) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 332.022627] FAULT_INJECTION: forcing a failure. [ 332.022627] name failslab, interval 1, probability 0, space 0, times 0 [ 332.078698] CPU: 1 PID: 14588 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 332.086035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.095549] Call Trace: [ 332.098192] dump_stack+0x138/0x197 [ 332.099946] 9pnet: Insufficient options for proto=fd [ 332.101844] should_fail.cold+0x10f/0x159 [ 332.101872] should_failslab+0xdb/0x130 [ 332.101890] kmem_cache_alloc+0x2d7/0x780 [ 332.119449] copy_process.part.0+0x444f/0x6a00 [ 332.124060] ? __cleanup_sighand+0x50/0x50 [ 332.128354] ? lock_downgrade+0x6e0/0x6e0 [ 332.132510] _do_fork+0x19e/0xce0 [ 332.135967] ? fork_idle+0x280/0x280 [ 332.139683] ? fput+0xd4/0x150 [ 332.142939] ? SyS_write+0x15e/0x230 [ 332.146670] SyS_clone+0x37/0x50 [ 332.150039] ? sys_vfork+0x30/0x30 [ 332.153644] do_syscall_64+0x1e8/0x640 [ 332.157528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.162372] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.167555] RIP: 0033:0x459879 [ 332.170740] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 332.178441] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 332.185703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.192966] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.200229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 332.207490] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:10 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='mx\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x6c440, 0x0) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r7, 0x40086425, &(0x7f0000000840)={r8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000100)={r8, &(0x7f0000000080)=""/3}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:10 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000080)=0x78) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:11 executing program 0 (fault-call:6 fault-nth:49): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 332.394707] 9pnet: Insufficient options for proto=fd 11:10:11 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x4}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40a02000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x1a4, 0x11, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1c}, [@nested={0x128, 0x25, [@generic="f4b7fd26a5489f44a126771d62c11ae78e897e0bf2ed299a45f36f22827a64c6c39bcffcceee1f84e68b88a3fb11ee4fb42596b6805d4b1685d688c105d4f01dd9b5cee7b43ab04652f85fb8284e936c5294247a025f0aa35c27c9d12091a41b0af04d62afdcdb1776bf3ec24405f3abd58fab0bb28ef19b15c817f76260f6810cb581d10b6fb090d67efe3e421f52b97bf271543da3a31726", @generic="4b6be7e206ac9be34925a285bc8c003d31da86948d1d9c1c32d395cb0e650fec440c3c47e95b1c410e0c8fb842e39d732dda1d114fb14fd8b7882b21d9e092b7babe72d48cc0e8fc97e54760a3c602a1da256993d7e222ae5d27b928e917bb4e531a84c55ead16beaac6621817d1f154b3ccf6f2e14b6daa670157242c892c42cbcc726fa23d5b7a3a"]}, @generic="6341bed122351389334ff4159704a1d44e1e762ddc1af54786f2cc84a9d8b28b871a2999b078c8f4b6a3249f4e767dfc7e0243076b8c9fe16c2ef4823f8f1df4d3640aed20aa0ceed245d1b77cb58ddf7b3765d73cbf", @typed={0x10, 0x6d, @binary="7397fcb3a53dad0259b8"}]}, 0x1a4}}, 0x4000) chdir(&(0x7f0000000040)='./file0\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d68d21982c3a72f2c3bcd5cde50219ce3e1df4af00665b85b8dfbe4f26adef3f75be0a020462cf3a85ae648bef7854b5f16ce17c23a7b7d01377e1fbf334a00a8d85401ebb4f4ed9e4ecec70780266233900f4b0e9b488c3ee8b687d7dfa0af44919de25d06e4ebabff3c69ba57e8b92a5588bce9e83138c1cfde1bcd68d59b25b1b45dd52c05f9500b67fdc8a6628aa6e2ff56a6cb1a14929635c4c6340b4a3f462dec475d2b4702f81f74226f4441fd788581b8fca470d111bcacb3cacae8eeba1f22f620a6c986732e6bea3ae770682963e843878c678471d08aa1419fa59c3a00000000", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r5 = openat$cgroup_ro(r4, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x3) umount2(&(0x7f0000000080)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80000000, 0x5, 0x2}, 0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 332.567276] FAULT_INJECTION: forcing a failure. [ 332.567276] name failslab, interval 1, probability 0, space 0, times 0 [ 332.589438] binder: 14608:14610 ioctl 40305828 20000300 returned -22 [ 332.600066] CPU: 1 PID: 14609 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 332.607208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.616580] Call Trace: [ 332.619199] dump_stack+0x138/0x197 [ 332.622852] ? vprintk_func+0x65/0x159 [ 332.626774] should_fail.cold+0x10f/0x159 [ 332.628394] 9pnet: Insufficient options for proto=fd [ 332.630951] should_failslab+0xdb/0x130 [ 332.630972] kmem_cache_alloc+0x2d7/0x780 [ 332.630984] ? anon_vma_clone+0x310/0x470 [ 332.630999] anon_vma_fork+0x1ce/0x4d0 [ 332.631015] copy_process.part.0+0x45e2/0x6a00 [ 332.631045] ? __cleanup_sighand+0x50/0x50 [ 332.631056] ? lock_downgrade+0x6e0/0x6e0 [ 332.631071] _do_fork+0x19e/0xce0 [ 332.631086] ? fork_idle+0x280/0x280 [ 332.672645] ? fput+0xd4/0x150 [ 332.675862] ? SyS_write+0x15e/0x230 [ 332.679607] SyS_clone+0x37/0x50 [ 332.682998] ? sys_vfork+0x30/0x30 [ 332.686557] do_syscall_64+0x1e8/0x640 [ 332.687376] binder: 14608:14610 ioctl 40305828 20000300 returned -22 [ 332.690638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.690664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.690673] RIP: 0033:0x459879 11:10:11 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x6) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 332.690677] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 332.690688] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 332.690693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.690698] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.690704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 332.690709] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 332.764689] 9pnet: Insufficient options for proto=fd 11:10:11 executing program 0 (fault-call:6 fault-nth:50): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:11 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x10000, 0x0) fcntl$getflags(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000300)={0x6, 0xf, 0x35, "74491757d319a5b1a77fe7ec7d016366260532ae85f15d1046e481693b2263bce99aa10fca267f59633572ae4302bb6c66e15ab2299afd07bc7787c9", 0x1d, "ee64d831c307f6c729edde5c91723a456cb9fc98abfc73009c74fb429262a3c3d4a54c7c31d21a0bdff52d5eaab6c5aff462142c58b084d896877a9f", 0x20}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r1, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:11 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x80000001, 0xec74, 0x40}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 332.971464] FAULT_INJECTION: forcing a failure. [ 332.971464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.990359] CPU: 0 PID: 14630 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 332.997517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.006978] Call Trace: [ 333.009600] dump_stack+0x138/0x197 [ 333.013512] should_fail.cold+0x10f/0x159 [ 333.017682] ? __might_sleep+0x93/0xb0 [ 333.021603] __alloc_pages_nodemask+0x1d6/0x7a0 [ 333.026434] ? save_stack+0x45/0xd0 [ 333.030073] ? kasan_kmalloc+0xce/0xf0 [ 333.034093] ? kasan_slab_alloc+0xf/0x20 [ 333.038169] ? __alloc_pages_slowpath+0x2930/0x2930 [ 333.043221] alloc_pages_current+0xec/0x1e0 [ 333.047575] pte_alloc_one+0x1a/0x100 [ 333.051394] __pte_alloc+0x2a/0x2d0 [ 333.055034] copy_page_range+0x11ba/0x1bd0 [ 333.059287] ? anon_vma_fork+0x358/0x4d0 [ 333.063377] ? __pmd_alloc+0x410/0x410 [ 333.067433] copy_process.part.0+0x4764/0x6a00 11:10:11 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) getsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 333.072066] ? __cleanup_sighand+0x50/0x50 [ 333.076320] ? lock_downgrade+0x6e0/0x6e0 [ 333.080576] _do_fork+0x19e/0xce0 [ 333.084195] ? fork_idle+0x280/0x280 [ 333.087934] ? fput+0xd4/0x150 [ 333.091143] ? SyS_write+0x15e/0x230 [ 333.094877] SyS_clone+0x37/0x50 [ 333.098254] ? sys_vfork+0x30/0x30 [ 333.101954] do_syscall_64+0x1e8/0x640 [ 333.105856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.110718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.115912] RIP: 0033:0x459879 [ 333.119119] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 333.126948] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 333.134260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.141526] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.148930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 333.156221] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:11 executing program 0 (fault-call:6 fault-nth:51): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:11 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000f8ffffff020000000000000000e6949d000000fd00000000003288cb4b1c26000000100000000000000900000000000000ff030000020000008171a2f5d46693a7fab2e68951da8fa8fb3907151494d76953a20ed808cabc4175341792da9fa3dd3c5c41516232aa1da25103476d7475872ea871a9cbb514867461712f61e6c7dd23f7279e1f7eb938b036bb8fd8233ecf5202ef30d3dc758ec2a70f"]) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e23, @broadcast}}) [ 333.335721] FAULT_INJECTION: forcing a failure. [ 333.335721] name failslab, interval 1, probability 0, space 0, times 0 [ 333.366662] CPU: 1 PID: 14649 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 333.373838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.383212] Call Trace: [ 333.385829] dump_stack+0x138/0x197 [ 333.389675] should_fail.cold+0x10f/0x159 [ 333.393867] should_failslab+0xdb/0x130 [ 333.397871] kmem_cache_alloc+0x2d7/0x780 [ 333.402193] ptlock_alloc+0x20/0x70 [ 333.405842] pte_alloc_one+0x60/0x100 [ 333.409659] __pte_alloc+0x2a/0x2d0 [ 333.413305] copy_page_range+0x11ba/0x1bd0 [ 333.417560] ? anon_vma_fork+0x358/0x4d0 [ 333.421669] ? __pmd_alloc+0x410/0x410 [ 333.425718] copy_process.part.0+0x4764/0x6a00 [ 333.430427] ? __cleanup_sighand+0x50/0x50 [ 333.434675] ? lock_downgrade+0x6e0/0x6e0 [ 333.438850] _do_fork+0x19e/0xce0 [ 333.442324] ? fork_idle+0x280/0x280 [ 333.446060] ? fput+0xd4/0x150 [ 333.449264] ? SyS_write+0x15e/0x230 [ 333.453012] SyS_clone+0x37/0x50 [ 333.456396] ? sys_vfork+0x30/0x30 [ 333.459956] do_syscall_64+0x1e8/0x640 [ 333.463861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.468734] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.473932] RIP: 0033:0x459879 [ 333.477127] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 11:10:12 executing program 0 (fault-call:6 fault-nth:52): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 333.484851] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 333.492320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.499599] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.506883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 333.514167] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 333.693966] FAULT_INJECTION: forcing a failure. [ 333.693966] name failslab, interval 1, probability 0, space 0, times 0 [ 333.727240] CPU: 0 PID: 14661 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 333.734424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.743801] Call Trace: [ 333.746422] dump_stack+0x138/0x197 [ 333.750082] should_fail.cold+0x10f/0x159 [ 333.754264] should_failslab+0xdb/0x130 [ 333.758448] kmem_cache_alloc+0x2d7/0x780 [ 333.762626] copy_process.part.0+0x444f/0x6a00 [ 333.767248] ? __cleanup_sighand+0x50/0x50 [ 333.771672] ? lock_downgrade+0x6e0/0x6e0 [ 333.775837] _do_fork+0x19e/0xce0 [ 333.779295] ? fork_idle+0x280/0x280 [ 333.783018] ? fput+0xd4/0x150 [ 333.786212] ? SyS_write+0x15e/0x230 [ 333.789936] SyS_clone+0x37/0x50 [ 333.793308] ? sys_vfork+0x30/0x30 [ 333.796856] do_syscall_64+0x1e8/0x640 [ 333.800749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.805603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.810792] RIP: 0033:0x459879 [ 333.813972] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 333.821684] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 333.828951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.836218] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.843489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 333.850755] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:12 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x10000, 0x8, &(0x7f0000000780)=[{&(0x7f0000000300)="81db50d95c48a2140d2fa361a46dc2b1a5133474121948860ce3e3ba3a77fc1e863f050f0568effd6e4cb4c46be6b600ffd43d85991ed428cbe06286992f3a054f533b9fcc8d3b0944b878ddcdfaf35b391864c380da96e4c6b97182bba84618c728916efc664b17249a6969ed5521380eb2cc5bcbd70db2d0216438f2a60181f735d9c1a88f182357ae76cfc2c34f16e9fda8e5658b3b37b60ae0a85eb676b21372e7bf1afa084e18a36082eb479b83cd2d93815d483d59482f3b1e3f6de189c85099411ea2df10a2daa47a58c5b881b29f4242fc579c1e7530e7e64f87db6c213d838dc53b67fabb71e113c485", 0xee, 0x463f}, {&(0x7f0000000180)="48d615f87c0da72d60a3a230906f70a6e5148de09a491288c11bafb457700ce1446567eeb90d15f5044bddce51e2ae814d5ced3b15c2211013f12106879cf1f6bd8a5b24c7ea0ad9e5675bc7c9fd020806980424c0c1cd26893cc5078a0bc95d04571ba829e1526841997a816014d2106422b67d9f89354b8c2f2c5aeff00c3a7ece21ba64c4bf4620d9ace5ae6917ea60e60f06", 0x94, 0x3}, {&(0x7f0000000400)="ce2a6b88f9552288dd7978bbb89acccc4e4c31782c081630c9bdec738935519271e4f29edbfaf5b5a5aff1", 0x2b}, {&(0x7f0000000580)="b67534a61e05bdb2cc452363d41723ec275be50459911f55f089e40078ea367114bdc87245c4df3970d3a4a4a4f277b95e06a017e2f783cca255d9f4f12645317c9d42c5d302313fdec9f900d711a9a67d5a2d3cf4bcf52ee0acca52e9a0e532d8c3ca8e4e", 0x65, 0x6}, {&(0x7f0000000600)="7ddf28a4147c687032d2123465f61c51eb", 0x11, 0xffffffff}, {&(0x7f0000000640)="e07e23bda19732243777e8fc9dc30422bc16ae43a97662980da99f18f90165fb886bda86669cb5ab93cae620b5f31f5d2e79be0f74519c349549ed5f58ef433a087064c39383a573cabad635f84de7803f414cc107dd1bc1b80933b0417232f083d0d4b2d41d5d4da7e530f8319d8ad1d910d5b39c1ba34df9bdfb17394563e30ac7e800309eff3c52a218869799df11abbf33c47afc247da73b0f7f0a5bd41b556f6bda878de6dd7572a8cb", 0xac, 0xf127}, {&(0x7f0000000700), 0x0, 0x79b}, {&(0x7f0000000740)="1f5070826c754f6f838bc4cd7ee4126f13c8a7199242f5b388b71f35d1b74d82adaf934c0c94e6f781514df3b2749ef1524bbf6a959e431b909ecfee4983", 0x3e, 0xb3}], 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'gretap0\x00'}}, 0xffffffffffffff33) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:12 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x3, 0x4a2, [0x0, 0x20000580, 0x200005b0, 0x200006ae], 0x0, &(0x7f0000000200), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xa, 0xa2, 0x1, 'vcan0\x00', 'veth0_to_bridge\x00', 'ip6tnl0\x00', 'batadv0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0x1fe], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x80, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x20, 0x22f0, 'team_slave_0\x00', 'syz_tun\x00', 'lapb0\x00', 'team0\x00', @dev={[], 0x15}, [0xff, 0x0, 0x0, 0x1fe, 0x7f, 0x80], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x1fe, 0x0, 0x0, 0xff], 0xe6, 0x186, 0x1fe, [@ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffffff, 0x8, 0xff, 0x10, 0x8, 0x4e21, 0x4e24, 0x4e21, 0x4e23}}}, @cpu={'cpu\x00', 0x8, {{0x1, 0x1}}}], [@common=@log={'log\x00', 0x28, {{0x2, "cf755ba1f3ae90c6b5a50b3e183d3e20f2bcb765ffb4937973e9a7f33bb1", 0x7}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0xfa}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x40, 0x2, 0xffffffff, 0x1, 0x0, "e1914e2e28e012076a399da6021960f6789b996c73c423d48f667c3ff123b0bd830ec4538ab10384f7beea4d0deb412b534cb50227aea958ad9a3fbd3fbce636"}}}}, {0x5, 0x5b2a4f3e0a78868f, 0xcb, 'team_slave_1\x00', 'nr0\x00', 'gretap0\x00', 'team0\x00', @dev={[], 0x14}, [0x0, 0x101, 0x0, 0x313b535a91801104], @dev={[], 0x29}, [0x181, 0xb4ea9fe8fea5969e, 0x0, 0x0, 0x0, 0x6c7a54d3ec8d4bf1], 0x6e, 0x9e, 0x116, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@nflog={'nflog\x00', 0x50, {{0x10000, 0x4, 0x4db, 0x0, 0x0, "d9a9620723e1eb888e24a6c330da9a44d3854312e9b0e5272e9566391efd9d2c44d844b7428bc5faff823efbe3de9afa623a5d81c73916b4fe896dd9c3cabeb1"}}}}]}, {0x0, '\x00', 0x3, 0x8000000000000004}]}, 0x51a) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0c9b1c76733f6450d686090f1c9b320c0152256e14e9c30bdd50e21a61f79bd8abc89dba74ee18c72bece0196c27d02ff1285ebba6d5ffa12ea6c0bb2be52a0013f160e0a01934ab2e59b47e52a09f49e39a39d0d73ef500563dc2e1b936490b9947ab388270537ab9eb63c8410cf4812dea3d596879f93a0e4842974154e6e7fed5e9cb336191a268fe4b69a752cad4e72dbd1db1937bf2879c4065347f858e76911cb286ddf91ab9cd4b72064371fa09521eedf62d615e620439105146bd0a3ac160f66719324a206ee5d2c8aba1e26043087239e16c943ed9", 0xda}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000a40)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000240)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:12 executing program 0 (fault-call:6 fault-nth:53): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:12 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000100)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x40800, &(0x7f0000000480)={[{@xino_off='xino=off'}, {@nfs_export_off='nfs_export=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@index_on='index=on'}], [{@uid_lt={'uid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cec#\x00'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}]}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 334.064524] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=886b2ace) 11:10:12 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) syz_read_part_table(0x27, 0xa, &(0x7f0000000780)=[{&(0x7f0000000100)="576fe787179793ab7b92a1023a697c2ec78cfe9ff399d729847f5691089eac1bdb4c24b65d64", 0x26, 0x1000}, {&(0x7f0000000280)="d86bf595b278c6c03607248274aaf81d2d1d526eb4912b638e99da831305d5b65af2248342a54517ee222b098ba637ef0a16e6a3ce3ba39d9bdbe20267ca0c5a2844f32d1ac5c8f9f181a55b863be0c9e18825da61135ece6b5d86ee544460ffa177dda1b1bfd5885a7320e2c9532453184ffd9d1398d23912659b21be1674eba0628b72efff", 0x86, 0x3}, {&(0x7f0000000340)="481121202b8161ea7deedccab6fd17c106b3964bbe0287cbfcf24e", 0x1b, 0x1e5ea234}, {&(0x7f0000000480)="adb46afaf440b36f9bb450087bc45a495637089b3498f324c92f79f7c0f6a9ff99afcccfd6ba934c516b42cbfe6540d4c79e09f43ba5bd036d4dfa4b9ef60906ead9a587fc89e367e7ee1720f33478db117cfb8ace65c07e89bf2758cdd60900be42872c5f47ba696e751d662a9a66e696518dcf99d6bfcf96cf7edd91534f4f4334d414de4b1d74852729d669e381278f71e431b667d5dad35c5c7ff98e1aee2c7ceae844ed8f87b627bdbc19bb2aac329e2b40df621dc6fb8a80ec71", 0xbd, 0x1}, {&(0x7f0000000380)="42457920142ebbcb4f6ed3f1dd7d458909f63276722086646e", 0x19}, {&(0x7f00000003c0)="ce6f0eee1a6ec1729a0700f064dace7380cb038734debcd4305d6d", 0x1b, 0x7fffffff}, {&(0x7f0000000540)="d71f06be67c00d8fd39b2052f525f48b90c54660f5a667f4adfb60ba3bcaa7f614a825687f79325c7c61e4e83de8ceb0f60925c67a088a4e85ff9a84b36f9d98e867ce9ab306da59c0855d957d92b6e322c4fb99b8601e6a0d43424083836571af6c18e36911be6a53000e5a6747d2a4f254b88d82094e6eade9217b146960d2d038fb0b58df4eee36ceab3e63cb73058dc5d6f1452fa6deecd60b", 0x9b, 0x401}, {&(0x7f0000000600)="6583b0a1a443ab1e4b1212fb601fdae9360d9861c4ca8ecf793da1da005f374764c9384295d0a807647183acba66abd6665477c01820e324e4d834de3c2de08cb3df63d05d114b5a9d73ca952afa37a2fbbfe16203c2a83a", 0x58, 0xfffffffffffffffa}, {&(0x7f0000000680)="4b0efe1f457ea08a96711996eefc731f0e645e2028a5d432b89146b2a205b1e6c3811957f31143bf4fcb91c33e26c9469301db1dda6b3eae9f3bff90b7a9a071857d90564b784d1d84c78cdab6f74c0b5670b38fc4ba799d48ed2e6a342a", 0x5e, 0x1}, {&(0x7f0000000700)="db34a84d94eaa62d0f8c69aa6d3622d6c9eeb4993ee6bd521dce56d1ec78a224c63917d6adcc1cd6f1155eca2794bdca3421cab2621daeb90b6a204122da76a471b53f374f6d008cb9626542f229d0a2f3d9b5808719c74a74501da4eaef9363648e49d47058ddf08a96b30c6c16aaaef325d8f6aad691d0", 0x78, 0x4000000000000000}]) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x1, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0xfffffffffffffffd, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x1000, 0xdc6e, 0x0, 0x101, 0x0, 0x8, 0x520, 0x5]}, &(0x7f0000000080)=0x14) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ubi_ctrl\x00', 0x1000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000008c0)={0x400, {{0xa, 0x4e22, 0x8001, @empty, 0x9}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x5, @local, 0x20}}]}, 0x110) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 334.189618] FAULT_INJECTION: forcing a failure. [ 334.189618] name failslab, interval 1, probability 0, space 0, times 0 [ 334.243428] CPU: 1 PID: 14686 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 334.250581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.259939] Call Trace: [ 334.262539] dump_stack+0x138/0x197 [ 334.266181] should_fail.cold+0x10f/0x159 [ 334.270339] should_failslab+0xdb/0x130 [ 334.274347] kmem_cache_alloc+0x47/0x780 [ 334.278413] ? __lock_is_held+0xb6/0x140 [ 334.282477] ? check_preemption_disabled+0x3c/0x250 [ 334.287499] anon_vma_clone+0xde/0x470 [ 334.291400] anon_vma_fork+0x87/0x4d0 [ 334.295206] copy_process.part.0+0x45e2/0x6a00 [ 334.299805] ? __cleanup_sighand+0x50/0x50 [ 334.304040] ? lock_downgrade+0x6e0/0x6e0 [ 334.308196] _do_fork+0x19e/0xce0 [ 334.311655] ? fork_idle+0x280/0x280 [ 334.315374] ? fput+0xd4/0x150 [ 334.318658] ? SyS_write+0x15e/0x230 [ 334.322379] SyS_clone+0x37/0x50 [ 334.325743] ? sys_vfork+0x30/0x30 [ 334.329287] do_syscall_64+0x1e8/0x640 [ 334.333173] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.338024] entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:10:12 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devpmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) gettid() [ 334.343236] RIP: 0033:0x459879 [ 334.346591] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 334.354298] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 334.361579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.368848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.376462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 334.383730] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:13 executing program 0 (fault-call:6 fault-nth:54): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 334.578170] FAULT_INJECTION: forcing a failure. [ 334.578170] name failslab, interval 1, probability 0, space 0, times 0 [ 334.626192] CPU: 0 PID: 14708 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 334.633351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.642717] Call Trace: [ 334.645321] dump_stack+0x138/0x197 [ 334.648967] should_fail.cold+0x10f/0x159 [ 334.653136] should_failslab+0xdb/0x130 [ 334.657132] kmem_cache_alloc+0x2d7/0x780 [ 334.661288] ? anon_vma_clone+0x310/0x470 [ 334.665444] anon_vma_fork+0xe9/0x4d0 [ 334.669256] copy_process.part.0+0x45e2/0x6a00 [ 334.673865] ? __cleanup_sighand+0x50/0x50 [ 334.678363] ? lock_downgrade+0x6e0/0x6e0 [ 334.682515] _do_fork+0x19e/0xce0 [ 334.685973] ? fork_idle+0x280/0x280 [ 334.689690] ? fput+0xd4/0x150 [ 334.692885] ? SyS_write+0x15e/0x230 [ 334.696607] SyS_clone+0x37/0x50 [ 334.699986] ? sys_vfork+0x30/0x30 [ 334.703533] do_syscall_64+0x1e8/0x640 [ 334.707430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.712284] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.717474] RIP: 0033:0x459879 [ 334.720670] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 334.728383] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 334.735656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.742934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.750209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 334.757480] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:13 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) [ 334.875174] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=886b2ace) 11:10:13 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x006\xd8\x9a\xe7\xb2;N\xd5vO\x8d\x82\xdf\xe5@\xd7\xaf\xd7\x86R\xda\x17E\xd0\xc0\x02S\x18w\xf1$\xa5\xa8\xadE\xad%@0n\\4\x1c\xae\xda\xcc\xf04\xfda\xaa\xc2\xb5\xc7c\x9a\xb4\xe2[Z\x16b8\xf3\xcc_\xd3\x99\xa9\xb6y\xce\f\xe4#\xeedl\xd4a\xdc\x1c\x86\xbc~M\x16\xd9\"%i\xc5\xf0\xe2\x87j>\'1\x8e\xaa&Etq\xca\xfd\xe7O\x012@6\xf9\xe6\x1b%\xbf\x8f\x9d\x8f\xcd\xa0u\x8b\xcf\xcc!\x01\xe2*\xa4\xe8\t\xb9\xe0\xfb\xf3l\x90^\xdf\x8b9q\x80!', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="08006e12e15a72f09bce236572a2bb323be31ce34b6702f37a3ea9fbdf6d3cc8bdde3cc3d391b4988ddb1964233df36d97dfaebbb8405c542140cb48fd3deac9369608661d47cf862e20094be5eabcba03e77ea8e6581d72d5407028f2a713c408d42ce4b194cd2a24745459342aa7ead4d3dfd9e56166c975b9971fd5a3df1fe3719eb6407e309d2115f400"/156], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:13 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getcwd(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0xc0506107, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:13 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000480)="540c6de87554c318efbab331d9b84bc627c9b809bbad5dd3a8c76710e6344d601058a9c4b8f70e0116058db0335d08834d1e39ed924fd39e388e61544d63d9d3b181df5cdaa7c0d89ce03ddadfd141bb6192b56e2f817136c060477f9390129e6a9c2f885a56e756f4d9b39bc11cbb100055a0cffa3ee982bfcd5dcc28a7cc8e03647c629e95d6b670f0424e42e21b3dec4cbc0f2f600573faba4356c20fd8bc9e0b409ce31b0977b6f7f91c997c8715a3c48267702314ef1064a540", 0xbc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x800000000001}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:13 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/163) 11:10:13 executing program 0 (fault-call:6 fault-nth:55): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:13 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x81}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000000c0)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x80832, r1, 0x0) clone(0x4146200, 0x0, 0x0, 0x0, 0x0) 11:10:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x40000) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 335.406949] FAULT_INJECTION: forcing a failure. [ 335.406949] name failslab, interval 1, probability 0, space 0, times 0 [ 335.473956] CPU: 1 PID: 14758 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 335.481123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.490488] Call Trace: [ 335.493093] dump_stack+0x138/0x197 [ 335.496744] should_fail.cold+0x10f/0x159 [ 335.500908] should_failslab+0xdb/0x130 [ 335.504894] kmem_cache_alloc+0x2d7/0x780 [ 335.509055] ? anon_vma_clone+0x310/0x470 [ 335.513218] anon_vma_fork+0x1ce/0x4d0 [ 335.517120] copy_process.part.0+0x45e2/0x6a00 [ 335.521729] ? __cleanup_sighand+0x50/0x50 [ 335.525970] ? lock_downgrade+0x6e0/0x6e0 [ 335.530122] _do_fork+0x19e/0xce0 [ 335.533579] ? fork_idle+0x280/0x280 [ 335.537299] ? fput+0xd4/0x150 [ 335.540499] ? SyS_write+0x15e/0x230 [ 335.544222] SyS_clone+0x37/0x50 [ 335.547621] ? sys_vfork+0x30/0x30 [ 335.551278] do_syscall_64+0x1e8/0x640 [ 335.555177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.560032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.565220] RIP: 0033:0x459879 [ 335.568405] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 335.576110] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 335.583381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.590660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.598086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 335.605358] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:14 executing program 0 (fault-call:6 fault-nth:56): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 335.801615] FAULT_INJECTION: forcing a failure. [ 335.801615] name failslab, interval 1, probability 0, space 0, times 0 [ 335.830146] CPU: 0 PID: 14773 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 335.837297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.846656] Call Trace: [ 335.849244] dump_stack+0x138/0x197 [ 335.852889] should_fail.cold+0x10f/0x159 [ 335.857733] should_failslab+0xdb/0x130 [ 335.861697] kmem_cache_alloc+0x2d7/0x780 [ 335.865828] ? anon_vma_clone+0x310/0x470 [ 335.869975] anon_vma_fork+0xe9/0x4d0 [ 335.873763] copy_process.part.0+0x45e2/0x6a00 [ 335.878429] ? __cleanup_sighand+0x50/0x50 [ 335.882650] ? lock_downgrade+0x6e0/0x6e0 [ 335.886785] _do_fork+0x19e/0xce0 [ 335.890227] ? fork_idle+0x280/0x280 [ 335.893929] ? fput+0xd4/0x150 [ 335.897107] ? SyS_write+0x15e/0x230 [ 335.900807] SyS_clone+0x37/0x50 [ 335.904154] ? sys_vfork+0x30/0x30 [ 335.907677] do_syscall_64+0x1e8/0x640 [ 335.911553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.916406] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.921575] RIP: 0033:0x459879 [ 335.924745] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 335.932436] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 335.939684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.946951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.954204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 335.961460] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:14 executing program 0 (fault-call:6 fault-nth:57): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:14 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000280)="80027265aacb963b2bd01513719eea68fd110d141acea80c067500c12d461ce8d64849aa278f4b11c0fc304e5bc736453f1c2fcad24b14e34e6eb551750cc51a0c7b37eb71bc0c193d1511bb4ae457d28401e887252fc2096dd27f30f3bd3884037a72b1", 0x64}, {&(0x7f0000000300)="62c597a1c85d66a2f6d4f7569c50680e73178f0f60e6044d2080a77f3799ada0dc82df", 0x23}, {&(0x7f0000000340)="1eded8a7c176f906c0aa3fa47c05688e7e6a5f79b30b812abd7b915f19dc56da1759491cc00441b82339ea80b95e23f8ca033f5f1e1bad00da0c639e626b863909d92d4cd8d15b2f4a41452350c076a84ce7ffb391e651f8f154f6c3ca8e561651986a651a96b94f7b6a10337cb707858409d72e3786a0ec1c04afde1bc89512ce521c1eece9d601929a2e2fca74f686ca3f8281af372dbaf20541d6d06720", 0x9f}], 0x3, 0xb21aa05e928491bf) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000000080)=0x14) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000100)={r7, 0x400, 0xffffffff, 0xfffffffffffffff7, 0x8001, 0x800, 0xfffffffffffffff7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3c67) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x80}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:14 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@local, @in6=@rand_addr="5509546387cf9359f3a6adb35c7d66d4", 0x4e22, 0x6, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x3c, 0x0, r6}, {0x4, 0x0, 0x6, 0x7, 0x0, 0x7ff, 0x2, 0x9}, {0x2, 0x20, 0x1, 0x2}, 0x401, 0x6e6bb8, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0x3c}, 0x2, @in6=@rand_addr="48249738e9d5779fe8b6fc2dfd5f650f", 0x0, 0x2, 0x2, 0x800, 0x2b1, 0x6, 0x2}}, 0xe8) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x803, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 336.222815] FAULT_INJECTION: forcing a failure. [ 336.222815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.250327] CPU: 0 PID: 14787 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 336.257507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.266872] Call Trace: [ 336.269481] dump_stack+0x138/0x197 11:10:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 336.273130] should_fail.cold+0x10f/0x159 [ 336.277286] ? __might_sleep+0x93/0xb0 [ 336.281796] __alloc_pages_nodemask+0x1d6/0x7a0 [ 336.286468] ? save_stack+0x45/0xd0 [ 336.290097] ? kasan_kmalloc+0xce/0xf0 [ 336.293981] ? kasan_slab_alloc+0xf/0x20 [ 336.298044] ? __alloc_pages_slowpath+0x2930/0x2930 [ 336.303074] alloc_pages_current+0xec/0x1e0 [ 336.307402] pte_alloc_one+0x1a/0x100 [ 336.311202] __pte_alloc+0x2a/0x2d0 [ 336.314827] copy_page_range+0x11ba/0x1bd0 [ 336.319068] ? anon_vma_fork+0x358/0x4d0 [ 336.323147] ? vma_compute_subtree_gap+0x190/0x1f0 [ 336.328087] ? __pmd_alloc+0x410/0x410 [ 336.331990] copy_process.part.0+0x4764/0x6a00 [ 336.336595] ? __cleanup_sighand+0x50/0x50 [ 336.340843] ? lock_downgrade+0x6e0/0x6e0 [ 336.345009] _do_fork+0x19e/0xce0 [ 336.348471] ? fork_idle+0x280/0x280 [ 336.352195] ? fput+0xd4/0x150 [ 336.355389] ? SyS_write+0x15e/0x230 [ 336.359108] SyS_clone+0x37/0x50 [ 336.362474] ? sys_vfork+0x30/0x30 [ 336.366020] do_syscall_64+0x1e8/0x640 [ 336.369951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.374808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.380002] RIP: 0033:0x459879 [ 336.383189] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 336.390897] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 336.398166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.405453] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.412726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 336.419998] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:15 executing program 0 (fault-call:6 fault-nth:58): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 336.689286] FAULT_INJECTION: forcing a failure. [ 336.689286] name failslab, interval 1, probability 0, space 0, times 0 [ 336.752386] CPU: 1 PID: 14813 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 336.759549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.768920] Call Trace: [ 336.771532] dump_stack+0x138/0x197 [ 336.775179] should_fail.cold+0x10f/0x159 [ 336.779346] should_failslab+0xdb/0x130 [ 336.783340] kmem_cache_alloc+0x2d7/0x780 [ 336.787504] copy_process.part.0+0x444f/0x6a00 [ 336.792115] ? __cleanup_sighand+0x50/0x50 [ 336.796357] ? lock_downgrade+0x6e0/0x6e0 [ 336.800515] _do_fork+0x19e/0xce0 [ 336.803969] ? fork_idle+0x280/0x280 [ 336.807685] ? fput+0xd4/0x150 [ 336.810880] ? SyS_write+0x15e/0x230 [ 336.814605] SyS_clone+0x37/0x50 [ 336.817973] ? sys_vfork+0x30/0x30 [ 336.821527] do_syscall_64+0x1e8/0x640 [ 336.825415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.830264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.835453] RIP: 0033:0x459879 [ 336.838761] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 11:10:15 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000006, 0x100010, r0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762f6c6f20f13000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x2000c, &(0x7f0000000140)='nodev:systemvmnet0([)*/\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @broadcast}], 0x20) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:15 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000100)=0x7f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x400, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x0, 0xf8e, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r3, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/9, 0x9, r3}}, 0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 336.846472] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 336.853747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.861019] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.868292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 336.875577] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:15 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0xb8) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x202880) ioctl(r0, 0x1c, &(0x7f0000000040)="11dca50daa31cfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x101, 0xe6f6, 0x400, 0x6, 0x7, 0x1000, 0x9}, 0x1c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:15 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) fchdir(r3) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:15 executing program 2: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x9) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:15 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x40fd, 0x5f9b, 0x6, 0x5}, {0x400, 0x9, 0x3, 0x7}, {0x0, 0x400, 0x7fffffff, 0x40000000000}, {0x400, 0x1, 0x1ff, 0x1}, {0x4a, 0x1, 0x48, 0x4000000080}]}, 0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:15 executing program 0 (fault-call:6 fault-nth:59): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:16 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='\x140E`mp\xb1\xaa\xed', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xa2, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/215) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r2, 0x5) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 337.468479] FAULT_INJECTION: forcing a failure. [ 337.468479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.531220] CPU: 1 PID: 14854 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 337.538376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.547741] Call Trace: [ 337.550355] dump_stack+0x138/0x197 [ 337.554014] should_fail.cold+0x10f/0x159 [ 337.558173] ? __might_sleep+0x93/0xb0 [ 337.562077] __alloc_pages_nodemask+0x1d6/0x7a0 [ 337.566755] ? save_stack+0x45/0xd0 [ 337.570384] ? kasan_kmalloc+0xce/0xf0 [ 337.574270] ? kasan_slab_alloc+0xf/0x20 [ 337.578347] ? __alloc_pages_slowpath+0x2930/0x2930 [ 337.583376] alloc_pages_current+0xec/0x1e0 [ 337.587704] pte_alloc_one+0x1a/0x100 [ 337.591508] __pte_alloc+0x2a/0x2d0 [ 337.595138] copy_page_range+0x11ba/0x1bd0 [ 337.599424] ? anon_vma_fork+0x358/0x4d0 [ 337.603501] ? vma_compute_subtree_gap+0x190/0x1f0 [ 337.608439] ? __pmd_alloc+0x410/0x410 [ 337.612362] copy_process.part.0+0x4764/0x6a00 [ 337.616978] ? __cleanup_sighand+0x50/0x50 [ 337.621217] ? lock_downgrade+0x6e0/0x6e0 [ 337.625368] _do_fork+0x19e/0xce0 [ 337.628824] ? fork_idle+0x280/0x280 [ 337.632538] ? fput+0xd4/0x150 [ 337.635732] ? SyS_write+0x15e/0x230 [ 337.639451] SyS_clone+0x37/0x50 [ 337.642815] ? sys_vfork+0x30/0x30 [ 337.646363] do_syscall_64+0x1e8/0x640 [ 337.650253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.655279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.660468] RIP: 0033:0x459879 [ 337.663652] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 337.671359] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 11:10:16 executing program 0 (fault-call:6 fault-nth:60): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 337.678626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.685894] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.693165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 337.700430] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:16 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x25) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r3) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000140)={0x4, 0x1, 0x2, {0x77359400}, 0x98, 0x4}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'irlan0\x00', @ifru_addrs=@isdn={0x22, 0x100000000005, 0x7fffffff, 0xffffffffffffffff, 0x5}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000100)) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:16 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 337.928735] FAULT_INJECTION: forcing a failure. [ 337.928735] name failslab, interval 1, probability 0, space 0, times 0 [ 337.990467] CPU: 0 PID: 14868 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 337.997633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.000141] protocol 88fb is buggy, dev hsr_slave_0 [ 338.006993] Call Trace: [ 338.007018] dump_stack+0x138/0x197 [ 338.007040] should_fail.cold+0x10f/0x159 [ 338.012123] protocol 88fb is buggy, dev hsr_slave_1 [ 338.014632] should_failslab+0xdb/0x130 [ 338.031322] kmem_cache_alloc+0x2d7/0x780 [ 338.035459] ptlock_alloc+0x20/0x70 [ 338.039072] pte_alloc_one+0x60/0x100 [ 338.042857] __pte_alloc+0x2a/0x2d0 [ 338.046469] copy_page_range+0x11ba/0x1bd0 [ 338.050688] ? anon_vma_fork+0x358/0x4d0 [ 338.054736] ? vma_compute_subtree_gap+0x190/0x1f0 [ 338.059654] ? __pmd_alloc+0x410/0x410 [ 338.063532] copy_process.part.0+0x4764/0x6a00 [ 338.068130] ? __cleanup_sighand+0x50/0x50 [ 338.072358] ? lock_downgrade+0x6e0/0x6e0 [ 338.076490] _do_fork+0x19e/0xce0 [ 338.079927] ? fork_idle+0x280/0x280 [ 338.083627] ? fput+0xd4/0x150 [ 338.086804] ? SyS_write+0x15e/0x230 [ 338.090518] SyS_clone+0x37/0x50 [ 338.093864] ? sys_vfork+0x30/0x30 [ 338.097390] do_syscall_64+0x1e8/0x640 [ 338.101260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.106092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 338.111268] RIP: 0033:0x459879 [ 338.114439] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 338.122132] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 338.129384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.136781] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 338.144043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 338.151305] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:16 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="bfe98e17617131bbaa0ffd7e904976ae1f995a5876c8740f1cdea6306a3f9739032b032b53b19a881c0369623964dc31927b68198d7bf93c28825a6f6c33acdd752aa9ec88da38e2a7af079933db83fd6f850b01a0856aa8e77e4666e0df07ddaf21820d2eb7c15528b6ec0f1e6dc0782ace517ca55e61491caafab14b4eaf0ddb3ec73e844f75aca2ba", 0x8a, 0xffffffffffff5431}, {&(0x7f0000000200)="32f0fb95fb040dbad5e09065b5a2bda6f9bdc531bcc93b2fb05d06b4f8e445155104b3d60e2393fbdc5707e4bdcd924158c151d0d831277febacd80fb1cabc8781a56f960ca698c0805fc0b387ff8421bfa679", 0x53, 0x3ff}], 0x18000, &(0x7f0000000580)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_remount='errors=remount-ro'}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0xfffffffffffffff7}}, {@errors_recover='errors=recover'}, {@utf8='utf8'}, {@show_sys_files_no='show_sys_files=no'}, {@gid={'gid', 0x3d, r1}}, {@errors_continue='errors=continue'}], [{@smackfsroot={'smackfsroot', 0x3d, 'devtmpfs\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@fowner_gt={'fowner>', r5}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'devtmpfs\x00'}}]}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 11:10:16 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:16 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000080)) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:16 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x800085, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = accept$packet(r3, 0x0, &(0x7f0000000080)) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 338.630129] protocol 88fb is buggy, dev hsr_slave_0 [ 338.635284] protocol 88fb is buggy, dev hsr_slave_1 [ 338.640428] protocol 88fb is buggy, dev hsr_slave_0 [ 338.645486] protocol 88fb is buggy, dev hsr_slave_1 [ 338.650643] protocol 88fb is buggy, dev hsr_slave_0 [ 338.655714] protocol 88fb is buggy, dev hsr_slave_1 11:10:17 executing program 0 (fault-call:6 fault-nth:61): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:17 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x36800) [ 338.863621] FAULT_INJECTION: forcing a failure. [ 338.863621] name failslab, interval 1, probability 0, space 0, times 0 [ 338.874996] protocol 88fb is buggy, dev hsr_slave_0 [ 338.875047] protocol 88fb is buggy, dev hsr_slave_1 [ 338.914326] CPU: 0 PID: 14907 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 338.921466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.930819] Call Trace: [ 338.933417] dump_stack+0x138/0x197 [ 338.937055] should_fail.cold+0x10f/0x159 [ 338.941208] should_failslab+0xdb/0x130 [ 338.945189] kmem_cache_alloc_trace+0x2e9/0x790 [ 338.949858] ? pat_pagerange_is_ram+0x90/0xf0 [ 338.954351] ? __init_cache_modes+0x240/0x240 [ 338.958855] reserve_memtype+0x164/0x640 [ 338.962922] ? lock_downgrade+0x6e0/0x6e0 [ 338.967070] ? pat_init+0x420/0x420 [ 338.970692] ? __init_cache_modes+0x240/0x240 [ 338.975187] reserve_pfn_range+0x11c/0x390 [ 338.979408] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 338.984413] ? copy_process.part.0+0x444f/0x6a00 [ 338.989151] ? SyS_clone+0x37/0x50 [ 338.996667] ? do_syscall_64+0x1e8/0x640 [ 339.000712] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.006059] track_pfn_copy+0x14a/0x190 [ 339.010017] ? reserve_pfn_range+0x390/0x390 [ 339.014412] ? trace_hardirqs_on+0x10/0x10 [ 339.018634] copy_page_range+0x1255/0x1bd0 [ 339.022853] ? save_trace+0x290/0x290 [ 339.026638] ? copy_process.part.0+0x41de/0x6a00 [ 339.031398] ? vma_compute_subtree_gap+0x190/0x1f0 [ 339.036317] ? vma_gap_callbacks_rotate+0x62/0x80 [ 339.041140] ? __rb_insert_augmented+0x22f/0xdf0 [ 339.045876] ? __pmd_alloc+0x410/0x410 [ 339.049744] ? __vma_link_rb+0x247/0x340 [ 339.053787] copy_process.part.0+0x4764/0x6a00 [ 339.058363] ? __cleanup_sighand+0x50/0x50 [ 339.062578] ? lock_downgrade+0x6e0/0x6e0 [ 339.066709] _do_fork+0x19e/0xce0 [ 339.070147] ? fork_idle+0x280/0x280 [ 339.073847] ? fput+0xd4/0x150 [ 339.077019] ? SyS_write+0x15e/0x230 [ 339.080714] SyS_clone+0x37/0x50 [ 339.084058] ? sys_vfork+0x30/0x30 [ 339.087926] do_syscall_64+0x1e8/0x640 [ 339.091806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.096632] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.101805] RIP: 0033:0x459879 [ 339.104975] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 339.112665] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 339.119915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.127165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 339.134415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 339.141663] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 11:10:17 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x403400) chdir(&(0x7f0000000040)='./file0\x00') seccomp(0x3d39334fd27827b4, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x7, 0x0, 0x8001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000140)={0xffffffff, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000180)={r7, 0x3}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) close(r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r13 = fcntl$dupfd(r11, 0x0, r12) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r11}}) ioctl$DRM_IOCTL_AGP_ALLOC(r13, 0xc0206434, &(0x7f00000001c0)={0x5, r7, 0xfdad3f84dc16e676, 0xffffffffffffff89}) ioctl$DRM_IOCTL_SG_ALLOC(r10, 0xc0106438, &(0x7f0000000200)={0x6, r14}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:10:17 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x480) write$binfmt_aout(r2, &(0x7f0000000580)={{0x108, 0x650d, 0x7f, 0x5a, 0x240, 0x3ff, 0x3b8, 0x3}, "3be681e61d613a1770b894f17ba932041865b672dc390366a412c6c8236174999b401ce206f9688945", [[], [], [], [], []]}, 0x549) 11:10:17 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0506107, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 339.329248] ------------[ cut here ]------------ [ 339.334051] WARNING: CPU: 0 PID: 14907 at arch/x86/mm/pat.c:1020 untrack_pfn+0x1dc/0x220 [ 339.342276] Kernel panic - not syncing: panic_on_warn set ... [ 339.342276] [ 339.349641] CPU: 0 PID: 14907 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 339.356731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.366254] Call Trace: [ 339.368847] dump_stack+0x138/0x197 [ 339.372480] panic+0x1f2/0x426 [ 339.375675] ? add_taint.cold+0x16/0x16 [ 339.379655] ? untrack_pfn+0x1dc/0x220 [ 339.383538] ? __warn.cold+0x14/0x36 [ 339.387252] ? untrack_pfn+0x1dc/0x220 [ 339.391132] __warn.cold+0x2f/0x36 [ 339.394671] ? ist_end_non_atomic+0x10/0x10 [ 339.398991] ? untrack_pfn+0x1dc/0x220 [ 339.402876] report_bug+0x216/0x254 [ 339.406505] do_error_trap+0x1bb/0x310 [ 339.410390] ? math_error+0x360/0x360 [ 339.414191] ? lock_downgrade+0x6e0/0x6e0 [ 339.418351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.423193] do_invalid_op+0x1b/0x20 [ 339.426903] invalid_op+0x1b/0x40 [ 339.430355] RIP: 0010:untrack_pfn+0x1dc/0x220 [ 339.435019] RSP: 0018:ffff88821281f948 EFLAGS: 00010246 [ 339.440385] RAX: 0000000000040000 RBX: ffff8880a553b948 RCX: ffffc90009852000 [ 339.447651] RDX: 0000000000040000 RSI: ffffffff812a659c RDI: 0000000000000001 [ 339.454917] RBP: ffff88821281f9d8 R08: ffff88803c7c4140 R09: 0000000000000000 [ 339.462187] R10: 0000000000000000 R11: ffff88803c7c4140 R12: 1ffff11042503f2a [ 339.469453] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88821281f9b0 [ 339.476751] ? untrack_pfn+0x1dc/0x220 [ 339.480645] ? untrack_pfn+0x1dc/0x220 [ 339.484536] ? track_pfn_insert+0x150/0x150 [ 339.488857] ? vm_normal_page_pmd+0x360/0x360 [ 339.493358] ? uprobe_munmap+0x94/0x210 [ 339.497334] unmap_single_vma+0x182/0x2c0 [ 339.501482] unmap_vmas+0xac/0x170 [ 339.505021] exit_mmap+0x285/0x4e0 [ 339.508562] ? SyS_munmap+0x30/0x30 [ 339.512206] ? kmem_cache_free+0x244/0x2b0 [ 339.516443] ? __khugepaged_exit+0xcf/0x3d0 [ 339.520769] ? lock_downgrade+0x6e0/0x6e0 [ 339.524921] mmput+0x114/0x440 11:10:18 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000037c0)={0x1, [0x0]}, &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003a40)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0x1ff}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0xc0506107, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r8 = socket$inet_udplite(0x2, 0x2, 0x88) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}}) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x10000, 0x7, 0x2000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 339.528120] copy_process.part.0+0x4743/0x6a00 [ 339.532721] ? __cleanup_sighand+0x50/0x50 [ 339.536962] ? lock_downgrade+0x6e0/0x6e0 [ 339.541117] _do_fork+0x19e/0xce0 [ 339.544575] ? fork_idle+0x280/0x280 [ 339.548295] ? fput+0xd4/0x150 [ 339.551489] ? SyS_write+0x15e/0x230 [ 339.555204] SyS_clone+0x37/0x50 [ 339.558575] ? sys_vfork+0x30/0x30 [ 339.562122] do_syscall_64+0x1e8/0x640 [ 339.566009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.570868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.576058] RIP: 0033:0x459879 [ 339.579246] RSP: 002b:00007f6597b60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 339.586955] RAX: ffffffffffffffda RBX: 00007f6597b60c90 RCX: 0000000000459879 [ 339.594225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.601496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 339.608765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6597b616d4 [ 339.616031] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 339.625222] Kernel Offset: disabled [ 339.629055] Rebooting in 86400 seconds..