tl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:43 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:43 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:43 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:43 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:43 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:43 executing program 0: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:46 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:46 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:46 executing program 1 (fault-call:12 fault-nth:0): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:46 executing program 3 (fault-call:11 fault-nth:0): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:46 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 10:56:46 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() tkill(r1, 0x401004000000016) sched_setattr(r1, &(0x7f00000001c0)={0x38, 0x5, 0x44, 0xffffffff, 0x5, 0x9, 0x0, 0xfef8, 0x7fffffff, 0xfffffff9}, 0x0) sched_setscheduler(r0, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}, 0x2, 0x7, 0x5, 0x8, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc1028, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x8, 0x20, 0xff, 0x0, 0x0, 0x9, 0x40000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80ce, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x108ba, 0x8000, 0x7, 0x8, 0x1, 0x6, 0x6}, r0, 0x7, r2, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 10:56:46 executing program 0 (fault-call:11 fault-nth:0): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 734.667441] FAULT_INJECTION: forcing a failure. [ 734.667441] name failslab, interval 1, probability 0, space 0, times 0 [ 734.683615] CPU: 1 PID: 6046 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 734.691418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.700769] Call Trace: [ 734.703364] dump_stack+0x1b2/0x281 [ 734.706996] should_fail.cold+0x10a/0x149 [ 734.711170] should_failslab+0xd6/0x130 [ 734.715149] kmem_cache_alloc+0x28e/0x3c0 [ 734.719302] mmu_topup_memory_caches+0x83/0x300 [ 734.724153] kvm_mmu_load+0x1e/0xd00 [ 734.727871] ? kvm_apic_accept_events+0x16f/0x3f0 [ 734.732717] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 734.737481] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 734.742532] ? _parse_integer+0xe4/0x130 [ 734.746596] ? vcpu_load+0x18/0x90 [ 734.750138] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 734.755603] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 734.760444] ? lock_acquire+0x170/0x3f0 [ 734.764567] ? lock_downgrade+0x740/0x740 [ 734.768732] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 734.772887] kvm_vcpu_ioctl+0x3de/0xc50 [ 734.777230] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 734.783151] ? proc_fail_nth_write+0x7b/0x180 [ 734.787648] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 734.792605] ? trace_hardirqs_on+0x10/0x10 [ 734.796854] ? fsnotify+0x974/0x11b0 [ 734.800570] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 734.805508] ? SyS_write+0x1b7/0x210 [ 734.809225] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 734.815112] do_vfs_ioctl+0x75a/0xff0 [ 734.819004] ? ioctl_preallocate+0x1a0/0x1a0 [ 734.823415] ? lock_downgrade+0x740/0x740 [ 734.827665] ? __fget+0x225/0x360 [ 734.831123] ? do_vfs_ioctl+0xff0/0xff0 [ 734.835101] ? security_file_ioctl+0x83/0xb0 [ 734.839595] SyS_ioctl+0x7f/0xb0 [ 734.842961] ? do_vfs_ioctl+0xff0/0xff0 [ 734.846936] do_syscall_64+0x1d5/0x640 [ 734.850834] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 734.856033] RIP: 0033:0x466459 [ 734.859219] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.866927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 734.874291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 734.881564] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.889095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.896495] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 [ 734.918427] FAULT_INJECTION: forcing a failure. [ 734.918427] name failslab, interval 1, probability 0, space 0, times 0 [ 734.934728] CPU: 1 PID: 6070 Comm: syz-executor.0 Not tainted 4.14.226-syzkaller #0 [ 734.942731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.952080] Call Trace: [ 734.954679] dump_stack+0x1b2/0x281 [ 734.958691] should_fail.cold+0x10a/0x149 [ 734.962847] should_failslab+0xd6/0x130 [ 734.966828] kmem_cache_alloc+0x28e/0x3c0 [ 734.970994] mmu_topup_memory_caches+0x83/0x300 [ 734.975758] kvm_mmu_load+0x1e/0xd00 [ 734.979478] ? kvm_apic_accept_events+0x16f/0x3f0 [ 734.984323] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 734.989086] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 734.994022] ? _parse_integer+0xe4/0x130 [ 734.998093] ? vcpu_load+0x18/0x90 [ 735.001639] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 735.007098] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 735.011942] ? lock_acquire+0x170/0x3f0 [ 735.015917] ? lock_downgrade+0x740/0x740 [ 735.020078] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 735.024226] kvm_vcpu_ioctl+0x3de/0xc50 [ 735.028288] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 735.034175] ? proc_fail_nth_write+0x7b/0x180 [ 735.038671] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 735.043606] ? trace_hardirqs_on+0x10/0x10 [ 735.047842] ? fsnotify+0x974/0x11b0 [ 735.051561] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 735.056492] ? SyS_write+0x1b7/0x210 [ 735.060209] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 735.066096] do_vfs_ioctl+0x75a/0xff0 [ 735.069895] ? ioctl_preallocate+0x1a0/0x1a0 [ 735.074295] ? lock_downgrade+0x740/0x740 [ 735.078439] ? __fget+0x225/0x360 [ 735.081891] ? do_vfs_ioctl+0xff0/0xff0 [ 735.085862] ? security_file_ioctl+0x83/0xb0 [ 735.090357] SyS_ioctl+0x7f/0xb0 [ 735.093715] ? do_vfs_ioctl+0xff0/0xff0 [ 735.097680] do_syscall_64+0x1d5/0x640 [ 735.101565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 735.106743] RIP: 0033:0x466459 [ 735.109927] RSP: 002b:00007f4b9458b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.117623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 735.125768] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 735.133721] RBP: 00007f4b9458b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.140978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.148239] R13: 00007ffd280edf0f R14: 00007f4b9458b300 R15: 0000000000022000 10:56:47 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:47 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 10:56:47 executing program 0 (fault-call:11 fault-nth:1): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:47 executing program 1 (fault-call:12 fault-nth:1): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) [ 735.779025] FAULT_INJECTION: forcing a failure. [ 735.779025] name failslab, interval 1, probability 0, space 0, times 0 [ 735.792121] CPU: 0 PID: 6102 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 735.799933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.809295] Call Trace: [ 735.811900] dump_stack+0x1b2/0x281 [ 735.815538] should_fail.cold+0x10a/0x149 [ 735.819694] should_failslab+0xd6/0x130 [ 735.823675] kmem_cache_alloc+0x28e/0x3c0 [ 735.827830] mmu_topup_memory_caches+0x83/0x300 [ 735.832531] ? retint_kernel+0x2d/0x2d [ 735.836453] kvm_mmu_load+0x1e/0xd00 [ 735.840171] ? kvm_arch_vcpu_ioctl_run+0x23a0/0x5ae0 [ 735.845279] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 735.850224] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 735.855066] ? lock_acquire+0x170/0x3f0 [ 735.859048] ? lock_downgrade+0x740/0x740 [ 735.863203] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 735.867386] kvm_vcpu_ioctl+0x3de/0xc50 [ 735.871386] ? retint_kernel+0x2d/0x2d [ 735.875278] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 735.881168] ? trace_hardirqs_on+0x10/0x10 [ 735.885425] ? fsnotify+0x76/0x11b0 [ 735.889072] ? fsnotify+0x974/0x11b0 [ 735.892879] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 735.897816] ? SyS_write+0x1b7/0x210 [ 735.901543] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 735.907520] do_vfs_ioctl+0x75a/0xff0 [ 735.911337] ? ioctl_preallocate+0x1a0/0x1a0 [ 735.915786] ? lock_downgrade+0x740/0x740 [ 735.919942] ? __fget+0x225/0x360 [ 735.923744] ? do_vfs_ioctl+0xff0/0xff0 [ 735.927728] ? security_file_ioctl+0x83/0xb0 [ 735.932148] SyS_ioctl+0x7f/0xb0 [ 735.935519] ? do_vfs_ioctl+0xff0/0xff0 [ 735.939508] do_syscall_64+0x1d5/0x640 [ 735.943409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 735.948596] RIP: 0033:0x466459 [ 735.951787] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.959597] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 735.966871] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 735.974508] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.981779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.989049] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 [ 736.012565] FAULT_INJECTION: forcing a failure. [ 736.012565] name failslab, interval 1, probability 0, space 0, times 0 [ 736.024181] CPU: 0 PID: 6100 Comm: syz-executor.0 Not tainted 4.14.226-syzkaller #0 [ 736.032329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.041687] Call Trace: [ 736.044280] dump_stack+0x1b2/0x281 [ 736.047913] should_fail.cold+0x10a/0x149 [ 736.052071] should_failslab+0xd6/0x130 [ 736.056061] kmem_cache_alloc+0x28e/0x3c0 [ 736.060319] mmu_topup_memory_caches+0x83/0x300 [ 736.065624] kvm_mmu_load+0x1e/0xd00 [ 736.069344] ? kvm_apic_accept_events+0x16f/0x3f0 [ 736.074189] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 736.078947] ? kvm_arch_vcpu_ioctl_run+0xb6e/0x5ae0 [ 736.083976] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 736.088913] ? retint_kernel+0x2d/0x2d [ 736.092804] ? retint_kernel+0x2d/0x2d [ 736.096701] ? vcpu_load+0x18/0x90 [ 736.100340] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 736.105364] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 736.110822] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 736.115703] ? lock_acquire+0x170/0x3f0 [ 736.119676] ? lock_downgrade+0x740/0x740 [ 736.123824] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 736.128325] kvm_vcpu_ioctl+0x3de/0xc50 [ 736.132305] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 736.138191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 736.142952] ? check_preemption_disabled+0x35/0x240 [ 736.147969] ? retint_kernel+0x2d/0x2d [ 736.151870] ? do_vfs_ioctl+0xc8c/0xff0 [ 736.155846] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 736.161740] do_vfs_ioctl+0x75a/0xff0 [ 736.165555] ? ioctl_preallocate+0x1a0/0x1a0 [ 736.169976] ? lock_downgrade+0x740/0x740 [ 736.174125] ? __fget+0x203/0x360 [ 736.177583] ? __fget+0x225/0x360 [ 736.181041] ? do_vfs_ioctl+0xff0/0xff0 [ 736.185024] ? security_file_ioctl+0x83/0xb0 [ 736.189451] SyS_ioctl+0x7f/0xb0 [ 736.192819] ? do_vfs_ioctl+0xff0/0xff0 [ 736.196821] do_syscall_64+0x1d5/0x640 [ 736.200737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 736.205935] RIP: 0033:0x466459 [ 736.209210] RSP: 002b:00007f4b9458b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.216921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 736.224200] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 736.231476] RBP: 00007f4b9458b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.238776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.246051] R13: 00007ffd280edf0f R14: 00007f4b9458b300 R15: 0000000000022000 10:56:49 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:49 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 10:56:49 executing program 1 (fault-call:12 fault-nth:2): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:49 executing program 0 (fault-call:11 fault-nth:2): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x7d, 0x2, 0x2, 0x0, 0x0, 0x10001, 0x10, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x751, 0x0, @perf_config_ext={0x9, 0x1}, 0x40000, 0x8000, 0x3, 0x6, 0x80000001, 0x96, 0x8001}, r5, 0xe, r4, 0x0) 10:56:49 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r4 = gettid() tkill(r4, 0x401004000000016) ioprio_get$pid(0x2, r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:56:50 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 738.568574] FAULT_INJECTION: forcing a failure. [ 738.568574] name failslab, interval 1, probability 0, space 0, times 0 [ 738.604969] CPU: 1 PID: 6141 Comm: syz-executor.0 Not tainted 4.14.226-syzkaller #0 [ 738.612786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.622150] Call Trace: [ 738.624756] dump_stack+0x1b2/0x281 [ 738.628418] should_fail.cold+0x10a/0x149 [ 738.632575] should_failslab+0xd6/0x130 [ 738.636570] kmem_cache_alloc+0x28e/0x3c0 [ 738.640725] mmu_topup_memory_caches+0x83/0x300 [ 738.645424] kvm_mmu_load+0x1e/0xd00 [ 738.651486] ? kvm_apic_accept_events+0x16f/0x3f0 [ 738.656330] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 738.661110] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 738.666043] ? _parse_integer+0xe4/0x130 [ 738.670125] ? vcpu_load+0x18/0x90 [ 738.673757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 738.679217] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 738.684064] ? lock_acquire+0x170/0x3f0 [ 738.688042] ? lock_downgrade+0x740/0x740 [ 738.692203] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 738.696524] kvm_vcpu_ioctl+0x3de/0xc50 [ 738.700504] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 738.706399] ? proc_fail_nth_write+0x7b/0x180 [ 738.710905] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 738.715846] ? trace_hardirqs_on+0x10/0x10 [ 738.720094] ? fsnotify+0x974/0x11b0 [ 738.724162] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 738.729104] ? SyS_write+0x1b7/0x210 [ 738.732836] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 738.738727] do_vfs_ioctl+0x75a/0xff0 [ 738.742667] ? ioctl_preallocate+0x1a0/0x1a0 [ 738.747088] ? lock_downgrade+0x740/0x740 [ 738.751248] ? __fget+0x225/0x360 [ 738.754704] ? do_vfs_ioctl+0xff0/0xff0 [ 738.759024] ? security_file_ioctl+0x83/0xb0 [ 738.763436] SyS_ioctl+0x7f/0xb0 [ 738.766804] ? do_vfs_ioctl+0xff0/0xff0 [ 738.770786] do_syscall_64+0x1d5/0x640 [ 738.774685] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 738.779881] RIP: 0033:0x466459 [ 738.783072] RSP: 002b:00007f4b9458b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.790775] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 738.798040] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 738.805315] RBP: 00007f4b9458b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.812717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.819989] R13: 00007ffd280edf0f R14: 00007f4b9458b300 R15: 0000000000022000 [ 739.384703] FAULT_INJECTION: forcing a failure. [ 739.384703] name failslab, interval 1, probability 0, space 0, times 0 [ 739.405470] CPU: 1 PID: 6138 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 739.413293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.422662] Call Trace: [ 739.425281] dump_stack+0x1b2/0x281 [ 739.428921] should_fail.cold+0x10a/0x149 [ 739.433077] should_failslab+0xd6/0x130 [ 739.437077] kmem_cache_alloc+0x28e/0x3c0 [ 739.441240] mmu_topup_memory_caches+0x83/0x300 [ 739.445916] kvm_mmu_load+0x1e/0xd00 [ 739.449634] ? kvm_apic_accept_events+0x16f/0x3f0 [ 739.454493] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 739.459254] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 739.464189] ? _parse_integer+0xe4/0x130 [ 739.468256] ? vcpu_load+0x18/0x90 [ 739.471804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 739.477310] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 739.482244] ? lock_acquire+0x170/0x3f0 [ 739.486243] ? lock_downgrade+0x740/0x740 [ 739.490497] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 739.494641] kvm_vcpu_ioctl+0x3de/0xc50 [ 739.498614] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 739.504761] ? proc_fail_nth_write+0x7b/0x180 [ 739.509259] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 739.514191] ? trace_hardirqs_on+0x10/0x10 [ 739.518428] ? fsnotify+0x974/0x11b0 [ 739.522153] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 739.527109] ? SyS_write+0x1b7/0x210 [ 739.530827] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 739.536711] do_vfs_ioctl+0x75a/0xff0 [ 739.540707] ? ioctl_preallocate+0x1a0/0x1a0 [ 739.545134] ? lock_downgrade+0x740/0x740 [ 739.549304] ? __fget+0x225/0x360 [ 739.552760] ? do_vfs_ioctl+0xff0/0xff0 [ 739.557518] ? security_file_ioctl+0x83/0xb0 [ 739.561936] SyS_ioctl+0x7f/0xb0 [ 739.565304] ? do_vfs_ioctl+0xff0/0xff0 [ 739.569282] do_syscall_64+0x1d5/0x640 [ 739.573193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.578471] RIP: 0033:0x466459 [ 739.581677] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.589398] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 739.596674] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 739.604074] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.612167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.619910] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:56:51 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:51 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:52 executing program 1 (fault-call:12 fault-nth:3): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:52 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0xab, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000100)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 740.729074] FAULT_INJECTION: forcing a failure. [ 740.729074] name failslab, interval 1, probability 0, space 0, times 0 [ 740.746355] CPU: 1 PID: 6208 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 740.754181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.763561] Call Trace: [ 740.766704] dump_stack+0x1b2/0x281 [ 740.770338] should_fail.cold+0x10a/0x149 [ 740.774496] should_failslab+0xd6/0x130 [ 740.778480] kmem_cache_alloc+0x28e/0x3c0 [ 740.782641] mmu_topup_memory_caches+0x83/0x300 [ 740.787322] kvm_mmu_load+0x1e/0xd00 [ 740.791041] ? kvm_apic_accept_events+0x16f/0x3f0 [ 740.795891] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 740.800737] ? kvm_get_time_scale+0x132/0x190 [ 740.805265] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 740.810204] ? trace_event_raw_event_kvm_mmio+0x270/0x270 [ 740.815756] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 740.820613] ? lock_acquire+0x170/0x3f0 [ 740.824588] ? lock_downgrade+0x740/0x740 [ 740.828771] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 740.832916] kvm_vcpu_ioctl+0x3de/0xc50 [ 740.836901] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 740.842796] ? proc_fail_nth_write+0x7b/0x180 [ 740.847296] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 740.852234] ? trace_hardirqs_on+0x10/0x10 [ 740.856483] ? fsnotify+0x974/0x11b0 [ 740.860213] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 740.865176] ? SyS_write+0x1b7/0x210 [ 740.868906] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 740.874803] do_vfs_ioctl+0x75a/0xff0 [ 740.878662] ? ioctl_preallocate+0x1a0/0x1a0 [ 740.883082] ? lock_downgrade+0x740/0x740 [ 740.887250] ? __fget+0x225/0x360 [ 740.890738] ? do_vfs_ioctl+0xff0/0xff0 [ 740.894811] ? security_file_ioctl+0x83/0xb0 [ 740.899408] SyS_ioctl+0x7f/0xb0 [ 740.902815] ? do_vfs_ioctl+0xff0/0xff0 [ 740.906900] do_syscall_64+0x1d5/0x640 [ 740.910808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.916008] RIP: 0033:0x466459 [ 740.919211] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.926919] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 740.934199] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 740.941647] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 740.948938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.956230] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:56:54 executing program 4: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:54 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0xffffffffffffffff, 0xffffffffffffffff, 0xf, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000480)={0x0, 0x0, 0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:56:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:55 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000271000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f21f666b8070000000f23d00f21f866353000000a0f23f8baf80c66b826838b8566efbafc0cedba4100ec0fc75905ea00001b01660fc775000f8fa8000fc7b700200f0b", 0x44}], 0x1, 0x78, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:56:55 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:55 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x11120, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x7}, {0x3, 0x8}], 0xee01}, 0x18, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:56:55 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:55 executing program 4 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 743.819004] FAULT_INJECTION: forcing a failure. [ 743.819004] name failslab, interval 1, probability 0, space 0, times 0 [ 743.832137] CPU: 1 PID: 6310 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 743.839949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.849307] Call Trace: [ 743.851907] dump_stack+0x1b2/0x281 [ 743.855541] should_fail.cold+0x10a/0x149 [ 743.859690] should_failslab+0xd6/0x130 [ 743.863671] kmem_cache_alloc+0x28e/0x3c0 [ 743.867928] mmu_topup_memory_caches+0x83/0x300 [ 743.872699] kvm_mmu_load+0x1e/0xd00 [ 743.876419] ? kvm_apic_accept_events+0x16f/0x3f0 [ 743.881267] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 743.886033] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 743.891130] ? _parse_integer+0xe4/0x130 [ 743.895202] ? vcpu_load+0x18/0x90 [ 743.898750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 743.905279] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 743.910246] ? lock_acquire+0x170/0x3f0 [ 743.914263] ? lock_downgrade+0x740/0x740 [ 743.918527] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 743.922681] kvm_vcpu_ioctl+0x3de/0xc50 [ 743.926661] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 743.932572] ? proc_fail_nth_write+0x7b/0x180 [ 743.937073] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 743.942005] ? trace_hardirqs_on+0x10/0x10 [ 743.946244] ? fsnotify+0x974/0x11b0 [ 743.949956] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 743.954916] ? SyS_write+0x1b7/0x210 [ 743.958636] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 743.964527] do_vfs_ioctl+0x75a/0xff0 [ 743.968335] ? ioctl_preallocate+0x1a0/0x1a0 [ 743.972752] ? lock_downgrade+0x740/0x740 [ 743.976907] ? __fget+0x225/0x360 [ 743.980363] ? do_vfs_ioctl+0xff0/0xff0 [ 743.984776] ? security_file_ioctl+0x83/0xb0 [ 743.989368] SyS_ioctl+0x7f/0xb0 [ 743.993203] ? do_vfs_ioctl+0xff0/0xff0 [ 743.997193] do_syscall_64+0x1d5/0x640 [ 744.001106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 744.006310] RIP: 0033:0x466459 [ 744.014200] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.021921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 744.029204] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 744.036494] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.043774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.051422] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:56:56 executing program 2 (fault-call:8 fault-nth:0): r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:56 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x18108}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:56:56 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x37, 0x2, {0x2, 0x1a, 0x1, r0, 0x9, '/dev/kvm\x00'}}, 0x27) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:56 executing program 4 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:56 executing program 1 (fault-call:12 fault-nth:4): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) [ 744.284074] FAULT_INJECTION: forcing a failure. [ 744.284074] name failslab, interval 1, probability 0, space 0, times 0 [ 744.324749] CPU: 0 PID: 6335 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 744.332580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.341950] Call Trace: [ 744.344544] dump_stack+0x1b2/0x281 [ 744.348207] should_fail.cold+0x10a/0x149 [ 744.352375] should_failslab+0xd6/0x130 [ 744.356354] kmem_cache_alloc+0x28e/0x3c0 [ 744.360510] mmu_topup_memory_caches+0x83/0x300 [ 744.365197] kvm_mmu_load+0x1e/0xd00 [ 744.368927] ? kvm_apic_accept_events+0x16f/0x3f0 [ 744.374470] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 744.379241] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 744.384267] ? _parse_integer+0xe4/0x130 [ 744.388335] ? vcpu_load+0x18/0x90 [ 744.391886] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 744.397348] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 744.402215] ? lock_acquire+0x170/0x3f0 [ 744.406220] ? lock_downgrade+0x740/0x740 [ 744.410380] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 744.414531] kvm_vcpu_ioctl+0x3de/0xc50 [ 744.418535] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 744.424525] ? proc_fail_nth_write+0x7b/0x180 [ 744.429026] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 744.433960] ? trace_hardirqs_on+0x10/0x10 [ 744.438222] ? fsnotify+0x974/0x11b0 [ 744.441944] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 744.446877] ? SyS_write+0x1b7/0x210 [ 744.450604] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 744.456502] do_vfs_ioctl+0x75a/0xff0 [ 744.460338] ? ioctl_preallocate+0x1a0/0x1a0 [ 744.464749] ? lock_downgrade+0x740/0x740 [ 744.468922] ? __fget+0x225/0x360 [ 744.472378] ? do_vfs_ioctl+0xff0/0xff0 [ 744.476356] ? security_file_ioctl+0x83/0xb0 [ 744.480851] SyS_ioctl+0x7f/0xb0 [ 744.484242] ? do_vfs_ioctl+0xff0/0xff0 [ 744.488221] do_syscall_64+0x1d5/0x640 [ 744.493082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 744.498276] RIP: 0033:0x466459 [ 744.501475] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.509182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 744.516453] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:56:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000000c0)='./file3\x00', 0x84000, 0x100) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x40, 0x5, 0x1}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 744.523721] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.530988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.538258] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:56:56 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:56 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x3, 0x3f, 0x6, 0x3, 0x0, 0x6, 0x20, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x0, 0x1000}, 0x41012, 0x0, 0x8000, 0x9, 0x1ff, 0x6, 0x80}, 0x0, 0x1, r4, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 10:56:56 executing program 4 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 744.745535] FAULT_INJECTION: forcing a failure. [ 744.745535] name failslab, interval 1, probability 0, space 0, times 0 [ 744.784439] CPU: 0 PID: 6367 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 744.792276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.801633] Call Trace: [ 744.804234] dump_stack+0x1b2/0x281 [ 744.807887] should_fail.cold+0x10a/0x149 [ 744.812043] should_failslab+0xd6/0x130 [ 744.816026] kmem_cache_alloc+0x28e/0x3c0 [ 744.820184] mmu_topup_memory_caches+0x83/0x300 [ 744.824864] kvm_mmu_load+0x1e/0xd00 [ 744.828622] ? kvm_apic_accept_events+0x16f/0x3f0 [ 744.833555] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 744.838333] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 744.843278] ? _parse_integer+0xe4/0x130 [ 744.847352] ? vcpu_load+0x18/0x90 [ 744.850903] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 744.856374] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 744.861319] ? lock_acquire+0x170/0x3f0 [ 744.865348] ? lock_downgrade+0x740/0x740 [ 744.869528] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 744.873706] kvm_vcpu_ioctl+0x3de/0xc50 [ 744.877694] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 744.883584] ? proc_fail_nth_write+0x7b/0x180 [ 744.888085] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 744.893036] ? trace_hardirqs_on+0x10/0x10 [ 744.897391] ? fsnotify+0x974/0x11b0 [ 744.901136] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 744.906081] ? SyS_write+0x1b7/0x210 [ 744.909805] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 744.915703] do_vfs_ioctl+0x75a/0xff0 [ 744.919520] ? ioctl_preallocate+0x1a0/0x1a0 [ 744.924019] ? lock_downgrade+0x740/0x740 [ 744.928177] ? __fget+0x225/0x360 [ 744.931638] ? do_vfs_ioctl+0xff0/0xff0 [ 744.935626] ? security_file_ioctl+0x83/0xb0 [ 744.940042] SyS_ioctl+0x7f/0xb0 [ 744.943464] ? do_vfs_ioctl+0xff0/0xff0 [ 744.947443] do_syscall_64+0x1d5/0x640 [ 744.951372] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 744.956682] RIP: 0033:0x466459 [ 744.959983] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.967697] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 744.974976] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 744.982278] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.989553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:56:57 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000800)=[{&(0x7f0000000300)="808bb296e3a5165531742dfb1471db343e2b7a208aa13606faf5286100e0ed924756519c0652937949f37066f505", 0x2e, 0x800}, {&(0x7f0000000340)="c4eab9ceefe83d7c4f621e315b0d81c730bee38cc060a397595079448ca4df30bc16948ee09dc699cbd1069174197ea17965e8de4ece32cd2f3c8a054f", 0x3d, 0x2}, {&(0x7f0000000480)="cfacdab2554a9f7d625e1012caef3f377d004589d58834a4181a152dbdd3e185847c88541e5564f732d8d0ca6a0429049d4e54db279e923e7af51b2f592e8c72426efe07fcedc87282cc0c4c80abb29853e2f472b85838dec2594d1ec7930cfa427b52e0a6531083af9dcc0a846596e8d147a9ea81583bd97d94fa35ec10fd077ce2b69cd6b59f74009c667f34fd43ddeaecb82b56a2e903682a2d48c4f363813f8d6377947e751121787d922b45824e9a913353018bb6ea1e6583c11cf6fecae8e3ead2c0b0be2a6a21f5b315a4e9b3deba1a8fb26d17c7bdc96bdbc10c3ce3460e690342290e94bf5838feb81e4263c7c8aa4a", 0xf4, 0xfffffffffffffc00}, {&(0x7f0000000580)="590c98b9215e6fd1abdafe6d0ca2b3e4563fa583fb7b2fec072c8f0bb31d47f38d2b1ab7bdaefdcb80a344688a7c3dbab41d2c4fd9f5bcf0889c7f3c5a237488c2a6acb4", 0x44, 0xc}, {&(0x7f0000000600)="d2ccad80a1dde5f8837d1865857e87fd319943890abf564d602c19383e103b5307ca8da18b5b352cdc1f2d8338b6a974b209597ba63c533fd2d92d956c1f7498d76e30398bbdf42a5b5669c8faa4407546b2a3219cc95de3880410033ae3df8004d777d802e08b13e236f83ef69aadf4a0e65f7a1ac437e2c7803f539dde3313f716ff8ef28f2da2b667560d2694add103980c533941e94649103e1faeaa62dfc10d353937f7b8ea9d416da42e1f608e3ff9ae46a363a7b63d92076f251b7952b790c8b5c0019eb84ad464264d0759abd08d6db34527e3ff4b", 0xd9, 0x3}, {&(0x7f0000000700)="e3db2a7f4e8cbe4f16ff76100d4724984793d14994baf2e9a4c7c281fcb6feddd3895d671175de81deb7f5013683031ffeb81aa14f4eb8984dcd1c95c8e48f9ac820d87a070a05e023e860bd5058256911daab132508e3894b328324b6118774dfb6325d18f5912e66706c6c0f623aa3f206faa27bf9bbfc26491edc4ac6b18cf6f1653c757ebecf9be13deec59331fd4898e4721a7d326cba36477cee9366b879067d474b626e226320bb18d131d968ff0814060ad446ca786c06cb0ec3fa2c0501dbe93d26f9149decfa4288d8d7aba4b4", 0xd2, 0x8e7}], 0x2020000, &(0x7f00000008c0)={[{@check_strict='check=strict'}, {@nojoliet='nojoliet'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_gt={'uid>'}}, {@subj_user={'subj_user', 0x3d, '@'}}]}) dup2(r3, r5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x7, 0x1, 0x4d, 0x0, 0x0, 0x7f, 0x30a48, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x57400, 0x8, 0x80000000, 0x4, 0x7, 0x5, 0x1}, r0, 0x4, r1, 0x7aefdd15543c676f) [ 744.996836] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:56:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x60140, 0x4) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x2, 0x3f, 0x29f4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="eb3c90656b66732e66617400028001000240000004f801d9f9d2ac39499e75a98ebe7792f330b5e1a17910118b19ad56559c4c688f51cd69ce250fa368b6a4d7ab8e03a69494087ebb5d4b17e535cb976e42c644bba4f33917a9b2dcde5613992baf82e503da4eb5b0e8dc241d6e81440868c646d7a77b245f224c72f9f6d6164aa212d7742702a74931483c122c4cfb6165fba495e83fa526ca637c6e209f64a49cb87ce3773063ccbbf05d8fdae83ce4ea57113b0575d8caaabbaaccb22e24a8f31f55e44e90d74873c551a55135b60c9f67a34ba204a22654076c4ad6c1795462571cd765e8798735d1f105d95ff9ad1207905ac5ef30a17c4a51c7ff2c433e98f728f0f8", 0x106}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:57 executing program 4 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 745.507291] FAT-fs (loop2): count of clusters too big (14221566) [ 745.526478] FAT-fs (loop2): Can't find a valid FAT filesystem [ 745.592357] FAULT_INJECTION: forcing a failure. [ 745.592357] name failslab, interval 1, probability 0, space 0, times 0 [ 745.624057] CPU: 0 PID: 6427 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 745.631888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.641264] Call Trace: [ 745.643861] dump_stack+0x1b2/0x281 [ 745.647493] should_fail.cold+0x10a/0x149 [ 745.651650] should_failslab+0xd6/0x130 [ 745.655632] kmem_cache_alloc+0x28e/0x3c0 [ 745.659786] mmu_topup_memory_caches+0x83/0x300 [ 745.664459] kvm_mmu_load+0x1e/0xd00 [ 745.668170] ? kvm_apic_accept_events+0x16f/0x3f0 [ 745.673013] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 745.677777] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 745.682713] ? _parse_integer+0xe4/0x130 [ 745.686778] ? vcpu_load+0x18/0x90 [ 745.690345] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 745.695805] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 745.700732] ? lock_acquire+0x170/0x3f0 [ 745.704705] ? lock_downgrade+0x740/0x740 [ 745.708882] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 745.713046] kvm_vcpu_ioctl+0x3de/0xc50 [ 745.717031] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 745.723067] ? proc_fail_nth_write+0x7b/0x180 [ 745.727593] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 745.732531] ? trace_hardirqs_on+0x10/0x10 [ 745.736782] ? fsnotify+0x974/0x11b0 [ 745.740505] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 745.745477] ? SyS_write+0x1b7/0x210 [ 745.749207] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 745.755103] do_vfs_ioctl+0x75a/0xff0 [ 745.758916] ? ioctl_preallocate+0x1a0/0x1a0 [ 745.763340] ? lock_downgrade+0x740/0x740 [ 745.767499] ? __fget+0x225/0x360 [ 745.770967] ? do_vfs_ioctl+0xff0/0xff0 [ 745.774949] ? security_file_ioctl+0x83/0xb0 [ 745.779367] SyS_ioctl+0x7f/0xb0 [ 745.782745] ? do_vfs_ioctl+0xff0/0xff0 [ 745.786723] do_syscall_64+0x1d5/0x640 [ 745.790627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.795827] RIP: 0033:0x466459 [ 745.799015] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.806835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 745.814108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 745.821732] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.829005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.836388] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 745.958615] FAULT_INJECTION: forcing a failure. [ 745.958615] name failslab, interval 1, probability 0, space 0, times 0 [ 745.988482] CPU: 0 PID: 6334 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 745.996420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.006685] Call Trace: [ 746.009305] dump_stack+0x1b2/0x281 [ 746.012939] should_fail.cold+0x10a/0x149 [ 746.017096] should_failslab+0xd6/0x130 [ 746.021073] kmem_cache_alloc+0x28e/0x3c0 [ 746.025256] mmu_topup_memory_caches+0x83/0x300 [ 746.029951] kvm_mmu_load+0x1e/0xd00 [ 746.033669] ? kvm_apic_accept_events+0x16f/0x3f0 [ 746.038515] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 746.043288] ? kvm_arch_vcpu_ioctl_run+0x3b86/0x5ae0 [ 746.048415] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 746.053353] ? _parse_integer+0xe4/0x130 [ 746.057417] ? vcpu_load+0x18/0x90 [ 746.060963] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 746.066436] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 746.071274] ? lock_acquire+0x170/0x3f0 [ 746.075261] ? lock_downgrade+0x740/0x740 [ 746.079426] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 746.083578] kvm_vcpu_ioctl+0x3de/0xc50 [ 746.087554] ? retint_kernel+0x2d/0x2d [ 746.091445] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 746.097335] ? trace_hardirqs_on+0x10/0x10 [ 746.101660] ? fsnotify+0x67/0x11b0 [ 746.105293] ? fsnotify+0x974/0x11b0 [ 746.109012] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 746.113944] ? SyS_write+0x1b7/0x210 [ 746.117678] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 746.123999] do_vfs_ioctl+0x75a/0xff0 [ 746.127826] ? ioctl_preallocate+0x1a0/0x1a0 [ 746.132670] ? lock_downgrade+0x740/0x740 [ 746.136826] ? __fget+0x225/0x360 [ 746.140279] ? do_vfs_ioctl+0xff0/0xff0 [ 746.144647] ? security_file_ioctl+0x83/0xb0 [ 746.149074] SyS_ioctl+0x7f/0xb0 [ 746.152440] ? do_vfs_ioctl+0xff0/0xff0 [ 746.156422] do_syscall_64+0x1d5/0x640 [ 746.160929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.166463] RIP: 0033:0x466459 [ 746.169651] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.177800] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 746.185073] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 746.192345] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.199617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.206890] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:56:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x505400, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = gettid() fcntl$setown(r1, 0x8, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:58 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = gettid() tkill(r2, 0x401004000000016) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x4001, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x1, 0xc21, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40006, 0x8000, 0x94, 0x6, 0x0, 0x4, 0x7}, r2, 0x8, r3, 0x4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00002c5000/0x4000)=nil, 0x4000, 0x3000002, 0x4010, r6, 0x7772000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 10:56:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:58 executing program 4 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:58 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:56:58 executing program 1 (fault-call:12 fault-nth:5): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:56:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 746.379715] FAULT_INJECTION: forcing a failure. [ 746.379715] name failslab, interval 1, probability 0, space 0, times 0 [ 746.406498] CPU: 0 PID: 6468 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 746.414448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.423819] Call Trace: [ 746.426444] dump_stack+0x1b2/0x281 [ 746.431734] should_fail.cold+0x10a/0x149 [ 746.435909] should_failslab+0xd6/0x130 [ 746.439900] kmem_cache_alloc+0x28e/0x3c0 [ 746.444094] mmu_topup_memory_caches+0x83/0x300 [ 746.448776] kvm_mmu_load+0x1e/0xd00 [ 746.452508] ? kvm_apic_accept_events+0x16f/0x3f0 [ 746.457475] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 746.462233] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 746.467159] ? _parse_integer+0xe4/0x130 [ 746.471654] ? vcpu_load+0x18/0x90 [ 746.475190] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 746.480639] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 746.485473] ? lock_acquire+0x170/0x3f0 [ 746.489460] ? lock_downgrade+0x740/0x740 [ 746.493601] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 746.497751] kvm_vcpu_ioctl+0x3de/0xc50 [ 746.501722] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 746.507610] ? proc_fail_nth_write+0x7b/0x180 [ 746.512103] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 746.517066] ? trace_hardirqs_on+0x10/0x10 [ 746.521296] ? fsnotify+0x974/0x11b0 [ 746.525005] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 746.529923] ? SyS_write+0x1b7/0x210 [ 746.533634] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 746.539772] do_vfs_ioctl+0x75a/0xff0 [ 746.543567] ? ioctl_preallocate+0x1a0/0x1a0 [ 746.547986] ? lock_downgrade+0x740/0x740 [ 746.552160] ? __fget+0x225/0x360 [ 746.555639] ? do_vfs_ioctl+0xff0/0xff0 [ 746.559603] ? security_file_ioctl+0x83/0xb0 [ 746.564005] SyS_ioctl+0x7f/0xb0 [ 746.567380] ? do_vfs_ioctl+0xff0/0xff0 [ 746.571347] do_syscall_64+0x1d5/0x640 [ 746.575231] entry_SYSCALL_64_after_hwframe+0x46/0xbb 10:56:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 746.580420] RIP: 0033:0x466459 [ 746.583593] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.591289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 746.598561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 746.605843] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.613101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.620360] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:56:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x7b0, 0x590, 0x590, 0xffffffff, 0x0, 0x0, 0x6e0, 0x6e0, 0xffffffff, 0x6e0, 0x6e0, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x3d5def05, [0x7, 0x2], 0x2, 0x4, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @private=0xa010101}, @loopback, @dev={0xfe, 0x80, [], 0x27}, @mcast1, @ipv4={[], [], @local}, @private0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0x18}, @loopback, @private1={0xfc, 0x1, [], 0x1}, @empty, @private1], 0x8}}, @common=@srh1={{0x90, 'srh\x00'}, {0x2b, 0x9, 0x2, 0x9, 0x200, @private1={0xfc, 0x1, [], 0x1}, @local, @dev={0xfe, 0x80, [], 0x31}, [0x0, 0xffffff00, 0xff000000, 0xff], [0xff, 0xff0000ff, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xe2515ea0ba637834], 0x2, 0x10}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e21, @port=0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {'L5', 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@private1={0xfc, 0x1, [], 0x1}, @ipv4=@empty, @gre_key=0xfffd, @port=0x4e22}}}, {{@ipv6={@mcast2, @mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xffffffff, 0xff, 0x3b39ce34d45d53b6], 'veth1\x00', 'veth1_to_batadv\x00', {}, {}, 0xc, 0x49, 0x3}, 0x0, 0x150, 0x198, 0x0, {}, [@common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev={0xfe, 0x80, [], 0x31}, 0x12}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}, {[0x0, 0xff, 0xffffff, 0xffffff00], 0x11, 0x2, {0x53}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e23}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x4, 0xff, 0xd9, 0x2, 0xff7f, 0x50, 0x810}}, @common=@srh={{0x30, 'srh\x00'}, {0x34, 0x0, 0x3c, 0x20, 0x18, 0x2000}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@multicast2, @ipv6=@local, @port=0x4e24, @port=0x4e20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x810) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:58 executing program 4 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:56:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x604900, 0x25) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mmap$dsp(&(0x7f0000684000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:56:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 746.883929] FAULT_INJECTION: forcing a failure. [ 746.883929] name failslab, interval 1, probability 0, space 0, times 0 [ 746.907824] CPU: 0 PID: 6464 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 746.915657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.925018] Call Trace: [ 746.927615] dump_stack+0x1b2/0x281 [ 746.931250] should_fail.cold+0x10a/0x149 [ 746.935409] should_failslab+0xd6/0x130 [ 746.939418] kmem_cache_alloc+0x28e/0x3c0 [ 746.943579] mmu_topup_memory_caches+0x83/0x300 [ 746.948257] kvm_mmu_load+0x1e/0xd00 [ 746.952000] ? kvm_apic_accept_events+0x16f/0x3f0 [ 746.956851] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 746.961719] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 746.966654] ? retint_kernel+0x2d/0x2d [ 746.970555] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 746.975529] ? lock_acquire+0x170/0x3f0 [ 746.979509] ? lock_downgrade+0x740/0x740 [ 746.983669] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 746.987818] kvm_vcpu_ioctl+0x3de/0xc50 [ 746.991805] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 746.997698] ? proc_fail_nth_write+0x7b/0x180 [ 747.002203] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 747.007147] ? trace_hardirqs_on+0x10/0x10 [ 747.011395] ? retint_kernel+0x2d/0x2d [ 747.015290] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 747.020315] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 747.025073] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 747.030988] do_vfs_ioctl+0x75a/0xff0 [ 747.034800] ? ioctl_preallocate+0x1a0/0x1a0 [ 747.039216] ? lock_downgrade+0x740/0x740 [ 747.043373] ? __fget+0x225/0x360 [ 747.046827] ? do_vfs_ioctl+0xff0/0xff0 [ 747.050808] ? security_file_ioctl+0x83/0xb0 [ 747.055231] SyS_ioctl+0x7f/0xb0 [ 747.058596] ? do_vfs_ioctl+0xff0/0xff0 [ 747.062658] do_syscall_64+0x1d5/0x640 [ 747.064851] FAULT_INJECTION: forcing a failure. [ 747.064851] name failslab, interval 1, probability 0, space 0, times 0 [ 747.066552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 747.066561] RIP: 0033:0x466459 [ 747.066566] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.066577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 747.066582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 747.066587] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.066600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.124012] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 [ 747.144566] CPU: 1 PID: 6515 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 747.152394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.161758] Call Trace: [ 747.164351] dump_stack+0x1b2/0x281 [ 747.168022] should_fail.cold+0x10a/0x149 [ 747.172288] should_failslab+0xd6/0x130 [ 747.176294] kmem_cache_alloc+0x28e/0x3c0 [ 747.180457] mmu_topup_memory_caches+0x83/0x300 [ 747.185153] kvm_mmu_load+0x1e/0xd00 [ 747.188871] ? kvm_apic_accept_events+0x16f/0x3f0 [ 747.193719] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 747.198527] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 747.203462] ? _parse_integer+0xe4/0x130 [ 747.207528] ? vcpu_load+0x18/0x90 [ 747.211078] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 747.216537] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 747.221407] ? lock_acquire+0x170/0x3f0 [ 747.225385] ? lock_downgrade+0x740/0x740 [ 747.229540] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 747.233688] kvm_vcpu_ioctl+0x3de/0xc50 [ 747.237668] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 747.243571] ? proc_fail_nth_write+0x7b/0x180 [ 747.248059] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 747.253144] ? trace_hardirqs_on+0x10/0x10 [ 747.257364] ? fsnotify+0x974/0x11b0 [ 747.261079] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 747.266006] ? SyS_write+0x1b7/0x210 [ 747.269702] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 747.275581] do_vfs_ioctl+0x75a/0xff0 [ 747.279377] ? ioctl_preallocate+0x1a0/0x1a0 [ 747.283797] ? lock_downgrade+0x740/0x740 [ 747.287962] ? __fget+0x225/0x360 [ 747.291410] ? do_vfs_ioctl+0xff0/0xff0 [ 747.295416] ? security_file_ioctl+0x83/0xb0 [ 747.299826] SyS_ioctl+0x7f/0xb0 [ 747.303172] ? do_vfs_ioctl+0xff0/0xff0 [ 747.307147] do_syscall_64+0x1d5/0x640 [ 747.311020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 747.316200] RIP: 0033:0x466459 [ 747.319406] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.327094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 747.334362] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 747.341624] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.348885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.356135] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0x81204101, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r3, 0x0, 0xffffffffffffffff, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) 10:57:01 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:01 executing program 0: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x10004, 0x0, 0x4, 0x1000, &(0x7f0000012000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000940)={0x0, 0x0, [0x6, 0x3, 0xd0, 0x6]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000100)="f4947de7a939d27430872436eededc4d6ca086344e6207f752d85b1361420b86dce659120821b3383c8dc74238698c4c76d38ec17fd24e2feb8a11eefa82d94c907161fdf40c20a3e0131a1a4bc8ab4eb2cabf3eac3bb6bd9710225e5b4a5dc5e0b3725cf0dd175b491353ace4de040a991d5bbba05c333578fb02e0ad2c4942c6206924f152be7d", 0x88}, {&(0x7f00000002c0)="1a1a09492ffabd1dbb55f3dfc94c57b12c503e1bf048c8a45586279ebe5501797ffea40f2912b2a957dfbd3fc0ae65dfe390dfb653e76550095cb4334f041ec6283a8bfcccf6f2e2c84d055b3e38dfdec8c27c712ea2d8539fc1591234ec1a55c98a88b79a404a9b015d2ed91f71fcd1eb7e7f1483923250575b283ef7f8febfe7d4eee0784c3a5e8055de4711f63cf50e6fecc0e68623705da58a80698dbae639c6325de6cbe07e563d7bbf0076a6dc0dec56bb347e4aa540e4511a23a17d", 0xbf}, {&(0x7f0000000480)="5d0a8c11e327163cbbfc11f8420285f1805f10d5e3e4f1dbe7808c27afa3e92cf7e0f3bb5adcf9503a737c69a70ccc205ddc2d5a4b49173bddf1c789f4781a4f2ee8ebf187523fb92da6283c13a2ebb2b7b03dcfb5c830c00526c8f625e84e6486020fbe8fa0a40a13aa269cc1c3a17759e04f335ebb2ab8be778a3e4beba008d4843d8aa3c37c843ffbae5419c61e3fa350bc7a8ba5fdd0681fd50e9d05b3a8985f1de1833c5692ab72", 0xaa}, {&(0x7f0000000540)="a907716dc57a12b735746ee1801611d166a2182b3a6a5167ce8b836a9260a140146de6b3bbceb9570378825e2e477eaa6527b1a595c6019a9aa03875fcf43a1d7d4580e471af372b0c9a7a", 0x4b}, {&(0x7f00000005c0)="5ea1b58e6e0c564b1a35ca4ea0f7e446a20aa769", 0x14}, {&(0x7f0000000600)="fe218fcbd1500f2f2c991d79f164cdcdccb15c183354e2ded26583c2042b377ebcd9156de41a0473af0931ea4436ada95200e80dc8e9890ddd529be3729d297b795d5285474cdad0873b562eedb45d0663088ff4756c76c3bdd818834499c14be2c330eb9181216ff43aef6da7807b647a6d8f1a5c86ebf4f085412c99cc51174b5df3c7b4ce43bd05a61333e02888d24a7a9847faf0af326b2cc0c956f1c389a8e685d8c37e306ac8de3bcba7ac8196d72cbb0f1531ada12e7bf1b5f682cf7e22d0a2712a3fb6b9967e67684ff9e280b1c09b1f517edd9c67275d7328a323d4379e54395b", 0xe5}, {&(0x7f0000000700)="e80e90e708ce377eb2f9d32d6ac9541353112f8c340d838fe87e6b8c2576deefdd4462f17b5750fd31397f0f20b0982025698e2be9dd25b454ef22b9bdbdd44b6c8d4bbc8937891d499c586cab60da04e956e53ed69af1e1279ca628f11904acaf5aeed08ecfa7b58c5c8569c10348ecc9c93edc1f6d146edc46ed81cf5cec03ea6c7c02af3b79b5073d9f293bcbf49ed89b46bc8e055ca8bec6b6a6553a78b37ee4fd5c7bc8b43c08d2", 0xaa}, {&(0x7f00000007c0)="e1756bf91849ffe598d9c6a20043c9070016782890150e2dddf4d347378729e3d728570689a2dd42018cd0ca36e8e5c7d3a837e0796791becb070c08c5931ef56a3a650eaf4486a7f3499efa3d6698efb99db2ab052c101bc10240b5bbdaaacc076d286b33b897587593b2916a2f479b4b496a252578d2a45f48eee0504cf60f", 0x80}, {&(0x7f0000000840)="901d59cfd72f131eb6883cf8927edfdf9fd0cfb6dd8e73ebb5ee8ac2f133b9c886890b913c6da9385574a9f2e69f42ef628a0b74ade2f13dfc5d67f4c8e9fd", 0x3f}], 0x9) 10:57:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "33128e7975cbdac6af7439c552685bb6686b944b25140e474e23c8f800e56e70a2f7c92771abfe85a280d8459d65c93edb9609e99b5d61efe8639882f6a26e34c84d37ea495699c205bd139883c517557ed80ce059b0cd353d9f8eda568739359565cf496f69ba8f5e0917735d95"}, 0x72) 10:57:01 executing program 1 (fault-call:12 fault-nth:6): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:01 executing program 4 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:01 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 749.396587] FAULT_INJECTION: forcing a failure. [ 749.396587] name failslab, interval 1, probability 0, space 0, times 0 [ 749.480142] CPU: 0 PID: 6561 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 749.487983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.497345] Call Trace: [ 749.499940] dump_stack+0x1b2/0x281 [ 749.503571] should_fail.cold+0x10a/0x149 [ 749.506348] FAULT_INJECTION: forcing a failure. [ 749.506348] name failslab, interval 1, probability 0, space 0, times 0 [ 749.507726] should_failslab+0xd6/0x130 [ 749.507741] kmem_cache_alloc+0x28e/0x3c0 [ 749.507755] mmu_topup_memory_caches+0x83/0x300 [ 749.507769] kvm_mmu_load+0x1e/0xd00 [ 749.507787] ? kvm_apic_accept_events+0x16f/0x3f0 [ 749.540275] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 749.545030] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 749.549954] ? _parse_integer+0xe4/0x130 [ 749.554008] ? vcpu_load+0x18/0x90 [ 749.557542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 749.563015] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 749.567859] ? lock_acquire+0x170/0x3f0 [ 749.571834] ? lock_downgrade+0x740/0x740 [ 749.575982] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 749.580117] kvm_vcpu_ioctl+0x3de/0xc50 [ 749.584173] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 749.590720] ? proc_fail_nth_write+0x7b/0x180 [ 749.595770] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 749.600701] ? trace_hardirqs_on+0x10/0x10 [ 749.605280] ? fsnotify+0x974/0x11b0 [ 749.609003] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 749.614035] ? SyS_write+0x1b7/0x210 [ 749.617751] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 749.623638] do_vfs_ioctl+0x75a/0xff0 [ 749.627433] ? ioctl_preallocate+0x1a0/0x1a0 [ 749.631919] ? lock_downgrade+0x740/0x740 [ 749.636057] ? __fget+0x225/0x360 [ 749.639501] ? do_vfs_ioctl+0xff0/0xff0 [ 749.643464] ? security_file_ioctl+0x83/0xb0 [ 749.647881] SyS_ioctl+0x7f/0xb0 [ 749.651254] ? do_vfs_ioctl+0xff0/0xff0 [ 749.655225] do_syscall_64+0x1d5/0x640 [ 749.659109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 749.664290] RIP: 0033:0x466459 [ 749.667504] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.675210] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 749.682468] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 749.689736] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.697170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.704518] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 749.711885] CPU: 1 PID: 6554 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 749.722967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.732323] Call Trace: [ 749.734912] dump_stack+0x1b2/0x281 [ 749.738538] should_fail.cold+0x10a/0x149 [ 749.742692] should_failslab+0xd6/0x130 [ 749.746686] kmem_cache_alloc+0x28e/0x3c0 [ 749.750842] mmu_topup_memory_caches+0x83/0x300 [ 749.755511] kvm_mmu_load+0x1e/0xd00 [ 749.759237] ? kvm_apic_accept_events+0x16f/0x3f0 [ 749.764809] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 749.769579] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 749.774560] ? _parse_integer+0xe4/0x130 [ 749.778623] ? vcpu_load+0x18/0x90 [ 749.782259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 749.787713] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 749.792574] ? lock_acquire+0x170/0x3f0 [ 749.796545] ? lock_downgrade+0x740/0x740 [ 749.800693] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 749.804841] kvm_vcpu_ioctl+0x3de/0xc50 [ 749.808814] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 749.814715] ? proc_fail_nth_write+0x7b/0x180 [ 749.819232] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 749.824158] ? trace_hardirqs_on+0x10/0x10 10:57:01 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 749.828392] ? fsnotify+0x974/0x11b0 [ 749.832107] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 749.837044] ? SyS_write+0x1b7/0x210 [ 749.840761] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 749.846643] do_vfs_ioctl+0x75a/0xff0 [ 749.850446] ? ioctl_preallocate+0x1a0/0x1a0 [ 749.854885] ? lock_downgrade+0x740/0x740 [ 749.859063] ? __fget+0x225/0x360 [ 749.862520] ? do_vfs_ioctl+0xff0/0xff0 [ 749.866500] ? security_file_ioctl+0x83/0xb0 [ 749.870911] SyS_ioctl+0x7f/0xb0 [ 749.874276] ? do_vfs_ioctl+0xff0/0xff0 [ 749.878396] do_syscall_64+0x1d5/0x640 [ 749.882305] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 749.887594] RIP: 0033:0x466459 [ 749.890781] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.899498] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 749.906776] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 749.914045] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.921324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.928768] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:57:01 executing program 4 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 750.048368] FAULT_INJECTION: forcing a failure. [ 750.048368] name failslab, interval 1, probability 0, space 0, times 0 [ 750.053339] FAT-fs (loop2): Unrecognized mount option "ÿÿJ" or missing value [ 750.080673] CPU: 1 PID: 6603 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 750.088501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.097961] Call Trace: [ 750.100581] dump_stack+0x1b2/0x281 [ 750.104216] should_fail.cold+0x10a/0x149 [ 750.108378] should_failslab+0xd6/0x130 [ 750.112364] kmem_cache_alloc+0x28e/0x3c0 [ 750.116605] mmu_topup_memory_caches+0x83/0x300 [ 750.121310] kvm_mmu_load+0x1e/0xd00 [ 750.125024] ? kvm_apic_accept_events+0x16f/0x3f0 [ 750.129874] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 750.134638] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 750.139572] ? _parse_integer+0xe4/0x130 [ 750.143638] ? vcpu_load+0x18/0x90 [ 750.147202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 750.152676] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 750.157538] ? lock_acquire+0x170/0x3f0 [ 750.161528] ? lock_downgrade+0x740/0x740 [ 750.165706] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 750.169850] kvm_vcpu_ioctl+0x3de/0xc50 [ 750.173826] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 750.179714] ? proc_fail_nth_write+0x7b/0x180 [ 750.184239] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 750.189180] ? trace_hardirqs_on+0x10/0x10 [ 750.193441] ? fsnotify+0x974/0x11b0 [ 750.197259] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 750.202294] ? SyS_write+0x1b7/0x210 [ 750.206018] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 750.211911] do_vfs_ioctl+0x75a/0xff0 [ 750.215715] ? ioctl_preallocate+0x1a0/0x1a0 [ 750.220129] ? lock_downgrade+0x740/0x740 [ 750.224290] ? __fget+0x225/0x360 [ 750.227743] ? do_vfs_ioctl+0xff0/0xff0 [ 750.231735] ? security_file_ioctl+0x83/0xb0 [ 750.236704] SyS_ioctl+0x7f/0xb0 [ 750.240071] ? do_vfs_ioctl+0xff0/0xff0 [ 750.244048] do_syscall_64+0x1d5/0x640 [ 750.248031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.253235] RIP: 0033:0x466459 [ 750.256421] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.264231] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 750.271504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 750.278809] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.286084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:57:02 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 750.293354] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:02 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000480)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:02 executing program 4 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x7c}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r5) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') socket$inet6(0xa, 0x2, 0x7f4) [ 750.427113] FAULT_INJECTION: forcing a failure. [ 750.427113] name failslab, interval 1, probability 0, space 0, times 0 [ 750.462979] CPU: 1 PID: 6628 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 750.470891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.480250] Call Trace: [ 750.482934] dump_stack+0x1b2/0x281 [ 750.486561] should_fail.cold+0x10a/0x149 [ 750.490714] should_failslab+0xd6/0x130 [ 750.494690] kmem_cache_alloc+0x28e/0x3c0 [ 750.498849] mmu_topup_memory_caches+0x83/0x300 [ 750.503666] kvm_mmu_load+0x1e/0xd00 [ 750.507415] ? kvm_apic_accept_events+0x16f/0x3f0 [ 750.512282] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 750.517051] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 750.521987] ? _parse_integer+0xe4/0x130 [ 750.526051] ? vcpu_load+0x18/0x90 [ 750.529600] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 750.535152] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 750.540020] ? lock_acquire+0x170/0x3f0 [ 750.544007] ? lock_downgrade+0x740/0x740 [ 750.548171] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 750.552419] kvm_vcpu_ioctl+0x3de/0xc50 [ 750.557141] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 750.565203] ? proc_fail_nth_write+0x7b/0x180 [ 750.569707] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 750.574670] ? trace_hardirqs_on+0x10/0x10 [ 750.578903] ? fsnotify+0x974/0x11b0 [ 750.582616] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 750.587545] ? SyS_write+0x1b7/0x210 [ 750.591263] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 750.597160] do_vfs_ioctl+0x75a/0xff0 [ 750.600961] ? ioctl_preallocate+0x1a0/0x1a0 [ 750.605366] ? lock_downgrade+0x740/0x740 [ 750.609954] ? __fget+0x225/0x360 [ 750.613506] ? do_vfs_ioctl+0xff0/0xff0 [ 750.617597] ? security_file_ioctl+0x83/0xb0 [ 750.621997] SyS_ioctl+0x7f/0xb0 [ 750.625352] ? do_vfs_ioctl+0xff0/0xff0 [ 750.629321] do_syscall_64+0x1d5/0x640 [ 750.633234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 750.638501] RIP: 0033:0x466459 [ 750.641683] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.649397] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 750.656761] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 750.664044] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.671303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.678576] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:02 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat$incfs(r4, &(0x7f0000000100)='.pending_reads\x00', 0x40042, 0xc) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 10:57:02 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:02 executing program 1 (fault-call:12 fault-nth:7): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:02 executing program 4 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:02 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x840, 0xffffffffffffff80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x90000) ftruncate(r4, 0x81) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7ff, 0x8220) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x4000000000ff, 0x0, 0x0, 0x0, 0x10001], 0x5000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000780), 0x800) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x400, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f8000000bfc93a68d80efb2ccaac28b153e3af8b229fe763b9311e219c0c45f68b1b97ab0c0419a54c5c19bed935edd9caa6820129805e521b1b1311b702babe15b3bf5a219b5df84a419aeff251f5c145465e", @ANYRES16=0x0, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800002, 0x12, r3, 0x59ded000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) preadv(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000680)=""/70, 0x46}], 0x7, 0x7fffffff, 0xffff8000) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:02 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 750.948276] FAULT_INJECTION: forcing a failure. [ 750.948276] name failslab, interval 1, probability 0, space 0, times 0 [ 750.987069] CPU: 1 PID: 6676 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 10:57:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') close(r0) [ 750.994898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.004257] Call Trace: [ 751.006905] dump_stack+0x1b2/0x281 [ 751.010548] should_fail.cold+0x10a/0x149 [ 751.014709] should_failslab+0xd6/0x130 [ 751.018699] kmem_cache_alloc+0x28e/0x3c0 [ 751.022867] mmu_topup_memory_caches+0x83/0x300 [ 751.027545] kvm_mmu_load+0x1e/0xd00 [ 751.031294] ? kvm_apic_accept_events+0x16f/0x3f0 [ 751.036141] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 751.040905] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 751.045847] ? _parse_integer+0xe4/0x130 [ 751.049915] ? vcpu_load+0x18/0x90 [ 751.053462] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 751.058938] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 751.063787] ? lock_acquire+0x170/0x3f0 [ 751.067853] ? lock_downgrade+0x740/0x740 [ 751.072181] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 751.076331] kvm_vcpu_ioctl+0x3de/0xc50 [ 751.080312] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.086259] ? proc_fail_nth_write+0x7b/0x180 [ 751.090768] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 751.095884] ? trace_hardirqs_on+0x10/0x10 [ 751.100131] ? fsnotify+0x974/0x11b0 [ 751.103847] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 751.108811] ? SyS_write+0x1b7/0x210 [ 751.112531] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.118422] do_vfs_ioctl+0x75a/0xff0 [ 751.122312] ? ioctl_preallocate+0x1a0/0x1a0 [ 751.126716] ? lock_downgrade+0x740/0x740 [ 751.130872] ? __fget+0x225/0x360 [ 751.134325] ? do_vfs_ioctl+0xff0/0xff0 [ 751.138295] ? security_file_ioctl+0x83/0xb0 [ 751.142719] SyS_ioctl+0x7f/0xb0 [ 751.146087] ? do_vfs_ioctl+0xff0/0xff0 [ 751.150080] do_syscall_64+0x1d5/0x640 [ 751.153976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.159163] RIP: 0033:0x466459 [ 751.162350] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.170056] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 751.177331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 751.184604] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.192052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:57:03 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:03 executing program 4 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 751.199330] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:03 executing program 3: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r3 = perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x40, 0x5, 0x6, 0x1, 0x0, 0x9, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000100)}, 0x8000, 0x5, 0x40, 0x4, 0x1, 0x2969, 0x5}, r2, 0xf, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500)={0x27, 0x0, 0x1, 0xbfb5dfe62b0de731, 0x0, 0x40, "7d1840476042b7cbc9ab2a23c991932f745f66b7a015fdda903fc6fe7e8af7333a2dc3878518f656a877b1e15a766d3ce48ff06729ac6a0aa58f88abf55360", 0x38}, 0x60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r8 = fork() perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x3, 0x5, 0x1, 0x7, 0x0, 0x0, 0x60020, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff3661, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x1, 0x3d, 0x7fff, 0x7, 0xb1, 0x6, 0x20}, r8, 0x8, r3, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 10:57:03 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 751.355700] FAULT_INJECTION: forcing a failure. [ 751.355700] name failslab, interval 1, probability 0, space 0, times 0 [ 751.398998] CPU: 0 PID: 6721 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 751.407385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.416952] Call Trace: [ 751.419550] dump_stack+0x1b2/0x281 [ 751.423182] should_fail.cold+0x10a/0x149 [ 751.427336] should_failslab+0xd6/0x130 [ 751.431914] kmem_cache_alloc+0x28e/0x3c0 [ 751.436053] mmu_topup_memory_caches+0x83/0x300 [ 751.440727] kvm_mmu_load+0x1e/0xd00 [ 751.444432] ? kvm_apic_accept_events+0x16f/0x3f0 [ 751.449283] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 751.454031] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 751.458956] ? _parse_integer+0xe4/0x130 [ 751.463009] ? vcpu_load+0x18/0x90 [ 751.466552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 751.472012] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 751.476845] ? lock_acquire+0x170/0x3f0 [ 751.480820] ? lock_downgrade+0x740/0x740 [ 751.484960] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 751.489104] kvm_vcpu_ioctl+0x3de/0xc50 [ 751.493071] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.498946] ? proc_fail_nth_write+0x7b/0x180 [ 751.503606] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 751.509045] ? trace_hardirqs_on+0x10/0x10 [ 751.513272] ? fsnotify+0x974/0x11b0 [ 751.516973] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 751.521892] ? SyS_write+0x1b7/0x210 [ 751.525610] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.531486] do_vfs_ioctl+0x75a/0xff0 [ 751.535278] ? ioctl_preallocate+0x1a0/0x1a0 [ 751.539676] ? lock_downgrade+0x740/0x740 [ 751.543829] ? __fget+0x225/0x360 [ 751.547277] ? do_vfs_ioctl+0xff0/0xff0 [ 751.551762] ? security_file_ioctl+0x83/0xb0 [ 751.556159] SyS_ioctl+0x7f/0xb0 [ 751.559510] ? do_vfs_ioctl+0xff0/0xff0 [ 751.563485] do_syscall_64+0x1d5/0x640 [ 751.567368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.572545] RIP: 0033:0x466459 [ 751.575725] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.583512] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 751.590853] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:03 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x10000, 0x80000) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x1, 0x2, 0x0, 0x0, 0x3, 0xb0cd3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x10001, 0x2}, 0x13020, 0x0, 0x0, 0xe, 0x0, 0x2ad, 0x800}, 0xffffffffffffffff, 0x4, r5, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 751.598215] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.605480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.612735] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000540)={"672a135aee105dfaabbf8a8780776898935318e964e731d1ff61234ce89b"}) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='./file3\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) mkdirat(r2, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r2, &(0x7f0000000100)='./file3\x00', r2, &(0x7f0000000200)='./file0\x00') [ 751.753054] FAULT_INJECTION: forcing a failure. [ 751.753054] name failslab, interval 1, probability 0, space 0, times 0 [ 751.771462] CPU: 0 PID: 6674 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 751.779290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.788679] Call Trace: [ 751.791626] dump_stack+0x1b2/0x281 [ 751.795258] should_fail.cold+0x10a/0x149 [ 751.799450] should_failslab+0xd6/0x130 [ 751.803449] kmem_cache_alloc+0x28e/0x3c0 [ 751.807605] mmu_topup_memory_caches+0x83/0x300 [ 751.812300] kvm_mmu_load+0x1e/0xd00 [ 751.816038] ? kvm_apic_accept_events+0x16f/0x3f0 [ 751.820889] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 751.825650] ? __srcu_read_lock+0x6e/0x90 [ 751.829806] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 751.834746] ? _parse_integer+0xe4/0x130 [ 751.838816] ? vcpu_load+0x18/0x90 [ 751.842362] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 751.847820] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 751.852666] ? lock_acquire+0x170/0x3f0 [ 751.856643] ? lock_downgrade+0x740/0x740 [ 751.860802] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 751.864974] kvm_vcpu_ioctl+0x3de/0xc50 [ 751.868958] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.874966] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 751.879733] ? check_preemption_disabled+0x35/0x240 [ 751.884768] ? retint_kernel+0x2d/0x2d [ 751.888671] ? do_vfs_ioctl+0xc8c/0xff0 [ 751.892773] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 751.898698] do_vfs_ioctl+0x75a/0xff0 [ 751.902509] ? ioctl_preallocate+0x1a0/0x1a0 [ 751.906921] ? lock_downgrade+0x740/0x740 [ 751.911100] ? __fget+0x225/0x360 [ 751.914560] ? do_vfs_ioctl+0xff0/0xff0 [ 751.918542] ? security_file_ioctl+0x83/0xb0 [ 751.922981] SyS_ioctl+0x7f/0xb0 [ 751.926351] ? do_vfs_ioctl+0xff0/0xff0 [ 751.930333] do_syscall_64+0x1d5/0x640 [ 751.934567] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 751.939762] RIP: 0033:0x466459 [ 751.942951] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.950668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 751.958047] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 751.965325] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.972600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.979902] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:57:04 executing program 1 (fault-call:12 fault-nth:8): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:04 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x10042, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:04 executing program 4 (fault-call:8 fault-nth:11): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/24, 0x18}], 0x6, &(0x7f0000000780)=""/210, 0xd2}, 0x5}, {{&(0x7f0000000880)=@ieee802154, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/46, 0x2e}, {&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f0000000ac0)=""/153, 0x99}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000b80)=""/20, 0x14}], 0x5}, 0x2}, {{&(0x7f0000000c40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/57, 0x39}, {&(0x7f0000000d00)=""/233, 0xe9}, {&(0x7f0000000e00)=""/2, 0x2}, {&(0x7f0000000e40)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/162, 0xa2}], 0x5, &(0x7f0000001000)=""/117, 0x75}, 0x4}], 0x3, 0x100, &(0x7f0000001140)={0x0, 0x989680}) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0xc0, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@loose='loose'}, {@common=@version_u='version=9p2000.u'}, {@rq={'rq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x6}}, {@common=@version_u='version=9p2000.u'}, {@rq={'rq', 0x3d, 0x1}}], [{@fowner_gt={'fowner>', r3}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:04 executing program 0: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x10000, 0x4, 0x2, 0x80000001, 0x0, 0x3f, 0xa22}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0xa}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) move_pages(r4, 0x6, &(0x7f0000000100)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008000/0xb000)=nil, &(0x7f0000017000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000140)=[0x5, 0x0, 0x80000001, 0x32e0e663, 0x8, 0x7fffffff], &(0x7f0000000180)=[0x0, 0x0], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:04 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 752.159288] FAULT_INJECTION: forcing a failure. [ 752.159288] name failslab, interval 1, probability 0, space 0, times 0 10:57:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x7fff, 0x5, 0x100000000, 0x6e4}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 752.251580] CPU: 1 PID: 6792 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 752.259433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.268794] Call Trace: [ 752.271393] dump_stack+0x1b2/0x281 [ 752.275056] should_fail.cold+0x10a/0x149 [ 752.279215] should_failslab+0xd6/0x130 [ 752.283215] kmem_cache_alloc+0x28e/0x3c0 [ 752.287376] mmu_topup_memory_caches+0x83/0x300 [ 752.292103] kvm_mmu_load+0x1e/0xd00 [ 752.295912] ? kvm_apic_accept_events+0x16f/0x3f0 [ 752.300758] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 752.305519] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 752.310474] ? _parse_integer+0xe4/0x130 [ 752.314554] ? vcpu_load+0x18/0x90 [ 752.318097] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 752.323554] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 752.328415] ? lock_acquire+0x170/0x3f0 [ 752.332415] ? lock_downgrade+0x740/0x740 [ 752.336567] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 752.340741] kvm_vcpu_ioctl+0x3de/0xc50 [ 752.344723] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.350697] ? proc_fail_nth_write+0x7b/0x180 [ 752.353108] FAULT_INJECTION: forcing a failure. [ 752.353108] name failslab, interval 1, probability 0, space 0, times 0 [ 752.355194] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 752.355223] ? trace_hardirqs_on+0x10/0x10 [ 752.375567] ? fsnotify+0x974/0x11b0 [ 752.379290] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 752.384221] ? SyS_write+0x1b7/0x210 [ 752.387963] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.393851] do_vfs_ioctl+0x75a/0xff0 [ 752.397685] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.402245] ? lock_downgrade+0x740/0x740 [ 752.406397] ? __fget+0x225/0x360 [ 752.409848] ? do_vfs_ioctl+0xff0/0xff0 [ 752.413822] ? security_file_ioctl+0x83/0xb0 [ 752.418230] SyS_ioctl+0x7f/0xb0 [ 752.421623] ? do_vfs_ioctl+0xff0/0xff0 [ 752.425606] do_syscall_64+0x1d5/0x640 [ 752.429498] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.434860] RIP: 0033:0x466459 [ 752.438044] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 752.445752] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.454151] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 752.461945] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.469219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.476494] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 752.493928] CPU: 0 PID: 6798 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 752.501741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.511099] Call Trace: [ 752.513697] dump_stack+0x1b2/0x281 [ 752.517334] should_fail.cold+0x10a/0x149 [ 752.521495] should_failslab+0xd6/0x130 [ 752.525478] kmem_cache_alloc+0x28e/0x3c0 [ 752.529688] mmu_topup_memory_caches+0x83/0x300 [ 752.534389] kvm_mmu_load+0x1e/0xd00 [ 752.538106] ? kvm_arch_vcpu_ioctl_run+0x1a1/0x5ae0 [ 752.543128] ? kvm_arch_vcpu_ioctl_run+0x24a6/0x5ae0 [ 752.548249] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 752.553182] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 752.558213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 752.562986] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 752.567834] ? lock_downgrade+0x740/0x740 [ 752.572012] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 752.576170] kvm_vcpu_ioctl+0x3de/0xc50 [ 752.580146] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.586034] ? proc_fail_nth_write+0x7b/0x180 [ 752.590529] ? trace_hardirqs_on+0x10/0x10 [ 752.594804] ? mark_held_locks+0xa6/0xf0 [ 752.598870] ? retint_kernel+0x2d/0x2d 10:57:04 executing program 4 (fault-call:8 fault-nth:12): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 752.602758] ? fsnotify+0x974/0x11b0 [ 752.606478] ? SyS_write+0x1b7/0x210 [ 752.610324] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.616223] do_vfs_ioctl+0x75a/0xff0 [ 752.620030] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.624449] ? lock_downgrade+0x740/0x740 [ 752.628890] ? __fget+0x225/0x360 [ 752.632348] ? do_vfs_ioctl+0xff0/0xff0 [ 752.636332] ? security_file_ioctl+0x83/0xb0 [ 752.640748] SyS_ioctl+0x7f/0xb0 [ 752.644122] ? do_vfs_ioctl+0xff0/0xff0 [ 752.648106] do_syscall_64+0x1d5/0x640 [ 752.649198] FAULT_INJECTION: forcing a failure. [ 752.649198] name failslab, interval 1, probability 0, space 0, times 0 [ 752.652031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.652040] RIP: 0033:0x466459 [ 752.652045] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.652055] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.652060] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 752.652064] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 10:57:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file1\x00', 0x407fffffff, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(r0, &(0x7f0000001940)='./file1\x00', 0x301802, 0x24) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0x1, 0x6, 0x4}) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='coda\x00', 0x800000, &(0x7f0000000180)='\xc5\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1d, 0x401, 0x9, 0x10001, 0x200, r1, 0x4, [], 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x40) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) r5 = syz_open_pts(r2, 0x4000) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000002c0)) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 752.652069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.652074] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 [ 752.725613] CPU: 1 PID: 6835 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 752.733434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.742793] Call Trace: [ 752.745402] dump_stack+0x1b2/0x281 [ 752.749056] should_fail.cold+0x10a/0x149 [ 752.753211] should_failslab+0xd6/0x130 [ 752.757792] kmem_cache_alloc+0x28e/0x3c0 [ 752.762375] mmu_topup_memory_caches+0x83/0x300 [ 752.767047] kvm_mmu_load+0x1e/0xd00 [ 752.770854] ? kvm_apic_accept_events+0x16f/0x3f0 [ 752.775702] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 752.780456] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 752.785468] ? _parse_integer+0xe4/0x130 [ 752.789539] ? vcpu_load+0x18/0x90 [ 752.793114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 752.798580] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 752.803416] ? lock_acquire+0x170/0x3f0 [ 752.807389] ? lock_downgrade+0x740/0x740 [ 752.811574] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 752.815710] kvm_vcpu_ioctl+0x3de/0xc50 [ 752.819688] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.825762] ? proc_fail_nth_write+0x7b/0x180 [ 752.830258] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 752.835190] ? trace_hardirqs_on+0x10/0x10 [ 752.839425] ? fsnotify+0x974/0x11b0 [ 752.843147] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 752.848258] ? SyS_write+0x1b7/0x210 [ 752.851991] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 752.857883] do_vfs_ioctl+0x75a/0xff0 [ 752.861689] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.866096] ? lock_downgrade+0x740/0x740 [ 752.870248] ? __fget+0x225/0x360 [ 752.873788] ? do_vfs_ioctl+0xff0/0xff0 [ 752.877773] ? security_file_ioctl+0x83/0xb0 [ 752.882180] SyS_ioctl+0x7f/0xb0 [ 752.885557] ? do_vfs_ioctl+0xff0/0xff0 [ 752.889534] do_syscall_64+0x1d5/0x640 [ 752.893455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.898650] RIP: 0033:0x466459 10:57:04 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 752.901863] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.909583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.916845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 752.924113] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.933109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.940385] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 753.005903] FAT-fs (loop2): bogus number of reserved sectors [ 753.022208] FAT-fs (loop2): Can't find a valid FAT filesystem 10:57:05 executing program 1 (fault-call:12 fault-nth:9): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:05 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:05 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x4, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x4, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:05 executing program 4 (fault-call:8 fault-nth:13): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:05 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 753.124325] FAT-fs (loop2): bogus number of reserved sectors [ 753.134460] FAT-fs (loop2): Can't find a valid FAT filesystem [ 753.234949] FAULT_INJECTION: forcing a failure. [ 753.234949] name failslab, interval 1, probability 0, space 0, times 0 [ 753.275269] CPU: 1 PID: 6878 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 753.283106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.292460] Call Trace: [ 753.295052] dump_stack+0x1b2/0x281 [ 753.298683] should_fail.cold+0x10a/0x149 [ 753.302837] should_failslab+0xd6/0x130 [ 753.306818] kmem_cache_alloc+0x28e/0x3c0 [ 753.310983] mmu_topup_memory_caches+0x83/0x300 [ 753.315670] kvm_mmu_load+0x1e/0xd00 [ 753.319400] ? kvm_apic_accept_events+0x16f/0x3f0 [ 753.324249] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 753.329049] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 753.333989] ? _parse_integer+0xe4/0x130 [ 753.338058] ? vcpu_load+0x18/0x90 [ 753.341612] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 753.347075] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 753.351921] ? lock_acquire+0x170/0x3f0 [ 753.355906] ? lock_downgrade+0x740/0x740 [ 753.360065] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 753.364214] kvm_vcpu_ioctl+0x3de/0xc50 [ 753.368191] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 753.374079] ? proc_fail_nth_write+0x7b/0x180 [ 753.378582] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 753.383515] ? trace_hardirqs_on+0x10/0x10 [ 753.387753] ? fsnotify+0x974/0x11b0 [ 753.391472] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 753.396407] ? SyS_write+0x1b7/0x210 [ 753.400125] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 753.406012] do_vfs_ioctl+0x75a/0xff0 [ 753.409842] ? ioctl_preallocate+0x1a0/0x1a0 [ 753.414293] ? lock_downgrade+0x740/0x740 [ 753.418444] ? __fget+0x225/0x360 [ 753.421899] ? do_vfs_ioctl+0xff0/0xff0 [ 753.425876] ? security_file_ioctl+0x83/0xb0 [ 753.430288] SyS_ioctl+0x7f/0xb0 [ 753.433662] ? do_vfs_ioctl+0xff0/0xff0 [ 753.437639] do_syscall_64+0x1d5/0x640 [ 753.441562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.446769] RIP: 0033:0x466459 [ 753.450001] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.457709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 753.465065] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 753.472338] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.480393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.482501] FAULT_INJECTION: forcing a failure. [ 753.482501] name failslab, interval 1, probability 0, space 0, times 0 [ 753.487710] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 753.537406] CPU: 0 PID: 6870 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 753.545341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.554780] Call Trace: [ 753.557376] dump_stack+0x1b2/0x281 [ 753.561006] should_fail.cold+0x10a/0x149 [ 753.565174] should_failslab+0xd6/0x130 [ 753.569157] kmem_cache_alloc+0x28e/0x3c0 [ 753.573312] mmu_topup_memory_caches+0x83/0x300 [ 753.577985] kvm_mmu_load+0x1e/0xd00 [ 753.581700] ? kvm_arch_vcpu_ioctl_run+0x3b9e/0x5ae0 [ 753.586807] ? kvm_cpu_has_injectable_intr+0x3/0x2c0 [ 753.592104] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 753.597031] ? mark_held_locks+0xa6/0xf0 [ 753.601093] ? retint_kernel+0x2d/0x2d [ 753.604959] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 753.609955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 753.614706] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 753.619539] ? lock_acquire+0x170/0x3f0 [ 753.623510] ? lock_downgrade+0x740/0x740 [ 753.628006] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 753.632132] kvm_vcpu_ioctl+0x3de/0xc50 [ 753.636189] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 753.642058] ? proc_fail_nth_write+0x7b/0x180 [ 753.646551] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 753.651479] ? trace_hardirqs_on+0x10/0x10 [ 753.655708] ? fsnotify+0x974/0x11b0 [ 753.659398] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 753.664323] ? SyS_write+0x1b7/0x210 [ 753.668020] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 753.673888] do_vfs_ioctl+0x75a/0xff0 [ 753.677676] ? ioctl_preallocate+0x1a0/0x1a0 [ 753.682063] ? lock_downgrade+0x740/0x740 [ 753.686191] ? __fget+0x225/0x360 [ 753.689636] ? do_vfs_ioctl+0xff0/0xff0 [ 753.693594] ? security_file_ioctl+0x83/0xb0 [ 753.697984] SyS_ioctl+0x7f/0xb0 [ 753.701329] ? do_vfs_ioctl+0xff0/0xff0 [ 753.705294] do_syscall_64+0x1d5/0x640 [ 753.709169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.714598] RIP: 0033:0x466459 [ 753.717781] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.725852] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 753.733164] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 753.740433] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.747859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.755308] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:57:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000501000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="2ef40f01d1440f20c066350d000000440f22c066b99702000066b80000010066ba000000000f30660f3881033e0fc71b2639a48c9066369066b9330300000f323ef30fc77399", 0x46}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}, @dstype0={0x6, 0xb}], 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000000c0)={0x0, 0x8000, 0x9}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:07 executing program 4 (fault-call:8 fault-nth:14): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:07 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:07 executing program 1 (fault-call:12 fault-nth:10): perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:07 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x82, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x5, 0xf4, 0x2, 0x0, 0x2, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x173, 0x7fffffff}, 0x900, 0x7f, 0x8000, 0x1, 0x800003, 0x2, 0x9}, r0, 0x0, r3, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000002c0)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:57:07 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xa000000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17, 0x5}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x12) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)) close(r2) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/56, 0x38}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000001200)=""/101, 0x65}, {&(0x7f0000000840)=""/101, 0x65}], 0x5, 0x6, 0x5) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='./file3\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) syz_mount_image$affs(&(0x7f00000001c0)='affs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000340)="8aa9886b37e01293c8ad070acdf2908316d9d2797e2d93a9f8addb4245dc396b7612b55297943705d5c12d1fa54ef7a92f0ee0be80b1c9f1bfc5480845729a2744eb9a82e208ea83206ada25540e981a2959e022db57720fda08d26de12ea1966ec6ba2344ac14c13fdc1b8ca9f7b2d4c640e820bcdac330b8ab4a19649e877ce6734c0f1dbaa1a3f0197b360e327d1c6386149b483a273329e603146f4fdbf323fa5d1c62d9f572ce8488b59f10e08a03fdf42d344571574b130d7144d05d9fecae107b84a23372cc74", 0xca, 0x800}, {&(0x7f0000001980)="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", 0x1000, 0x800}, {&(0x7f0000000440)="5a7d533cc43efcc4a26b524a6797ce5efa547c3f2a45397af119c12b6077c2b7e03a1f7d4c6a7fd641505e751fe2e91305833ff5cee2b4ad62e81415c99e5114d22124c01f3d", 0x46}, {&(0x7f00000004c0)="a97c7a20894311dbc52023a3b8b07b50a60af4bfc485d2592f98d1000495cc03cd7cbb67c80e9dffac7a6b69b4df529e25f0998ef7d48160f90dbcf1b38e6d5075870307122f63037abef956ba21b0ab9016e3244725249699226b425355684214ec558ac02b363cb1128ce4be845d33ae0c78ca1f120b7a50ad60ca7cf82affd304f3705392d035dcb0d85ad1332dc1da03e92cfcd4b4b2aae1fe312cd30774c5a3c922f7e7f4590c5d2f3b30c49438e1cb7fc4b7a368e6b4b6d7de62dcbadf8c4f47ba63ca6cede7051883f63b0f6da81d98507d4272e7daad60", 0xdb}, {&(0x7f0000002980)="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", 0x1000, 0x10000}], 0x20000e2, &(0x7f0000000740)=ANY=[]) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1a8) [ 755.154204] FAULT_INJECTION: forcing a failure. [ 755.154204] name failslab, interval 1, probability 0, space 0, times 0 [ 755.169571] CPU: 0 PID: 6925 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 755.177421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.186786] Call Trace: [ 755.189380] dump_stack+0x1b2/0x281 [ 755.193016] should_fail.cold+0x10a/0x149 [ 755.197181] should_failslab+0xd6/0x130 [ 755.199068] FAULT_INJECTION: forcing a failure. [ 755.199068] name failslab, interval 1, probability 0, space 0, times 0 [ 755.201177] kmem_cache_alloc+0x28e/0x3c0 [ 755.201191] mmu_topup_memory_caches+0x83/0x300 [ 755.201215] kvm_mmu_load+0x1e/0xd00 [ 755.201226] ? kvm_apic_accept_events+0x16f/0x3f0 [ 755.201243] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 755.234974] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 755.239920] ? _parse_integer+0xe4/0x130 [ 755.243981] ? vcpu_load+0x18/0x90 [ 755.247728] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 755.253179] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 755.258017] ? lock_acquire+0x170/0x3f0 [ 755.261987] ? lock_downgrade+0x740/0x740 [ 755.266150] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 755.270292] kvm_vcpu_ioctl+0x3de/0xc50 [ 755.275134] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.281015] ? proc_fail_nth_write+0x7b/0x180 [ 755.285506] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.290713] ? trace_hardirqs_on+0x10/0x10 [ 755.294941] ? fsnotify+0x974/0x11b0 [ 755.298644] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.303572] ? SyS_write+0x1b7/0x210 [ 755.307303] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.313276] do_vfs_ioctl+0x75a/0xff0 [ 755.317086] ? ioctl_preallocate+0x1a0/0x1a0 [ 755.321486] ? lock_downgrade+0x740/0x740 [ 755.325645] ? __fget+0x225/0x360 [ 755.329109] ? do_vfs_ioctl+0xff0/0xff0 [ 755.333120] ? security_file_ioctl+0x83/0xb0 [ 755.337523] SyS_ioctl+0x7f/0xb0 [ 755.340882] ? do_vfs_ioctl+0xff0/0xff0 [ 755.344850] do_syscall_64+0x1d5/0x640 [ 755.348748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.353935] RIP: 0033:0x466459 [ 755.357120] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.364914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 755.372380] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 755.379650] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.386927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.394201] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 755.401930] CPU: 1 PID: 6922 Comm: syz-executor.1 Not tainted 4.14.226-syzkaller #0 [ 755.409751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.419101] Call Trace: [ 755.421777] dump_stack+0x1b2/0x281 [ 755.425497] should_fail.cold+0x10a/0x149 [ 755.429645] should_failslab+0xd6/0x130 [ 755.433618] kmem_cache_alloc+0x28e/0x3c0 [ 755.437767] mmu_topup_memory_caches+0x83/0x300 [ 755.442437] kvm_mmu_load+0x1e/0xd00 [ 755.446152] ? kvm_apic_accept_events+0x16f/0x3f0 [ 755.451004] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 755.455948] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 755.460904] ? _parse_integer+0xe4/0x130 [ 755.464978] ? vcpu_load+0x18/0x90 [ 755.468621] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 755.474089] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 755.478947] ? lock_acquire+0x170/0x3f0 [ 755.482927] ? lock_downgrade+0x740/0x740 [ 755.487135] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 755.491284] kvm_vcpu_ioctl+0x3de/0xc50 [ 755.495277] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.501161] ? proc_fail_nth_write+0x7b/0x180 10:57:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x14, 0x101, 0x80, 0x1, 0x1000, 0x4, 0xa9e4, 0x40}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:07 executing program 4 (fault-call:8 fault-nth:15): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 755.505658] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.510590] ? trace_hardirqs_on+0x10/0x10 [ 755.514834] ? fsnotify+0x974/0x11b0 [ 755.518548] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.523484] ? SyS_write+0x1b7/0x210 [ 755.527207] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.533092] do_vfs_ioctl+0x75a/0xff0 [ 755.536894] ? ioctl_preallocate+0x1a0/0x1a0 [ 755.541304] ? lock_downgrade+0x740/0x740 [ 755.545464] ? __fget+0x225/0x360 [ 755.548918] ? do_vfs_ioctl+0xff0/0xff0 [ 755.552901] ? security_file_ioctl+0x83/0xb0 [ 755.557317] SyS_ioctl+0x7f/0xb0 [ 755.560695] ? do_vfs_ioctl+0xff0/0xff0 [ 755.564757] do_syscall_64+0x1d5/0x640 [ 755.568655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.573844] RIP: 0033:0x466459 [ 755.577024] RSP: 002b:00007fdad9813188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.585359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 755.592657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 755.600015] RBP: 00007fdad98131d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.607280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.614554] R13: 00007ffd7e3a96bf R14: 00007fdad9813300 R15: 0000000000022000 10:57:07 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 755.674212] FAULT_INJECTION: forcing a failure. [ 755.674212] name failslab, interval 1, probability 0, space 0, times 0 [ 755.709247] FAT-fs (loop2): bogus number of FAT structure [ 755.732393] CPU: 1 PID: 6955 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 755.740226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.749590] Call Trace: [ 755.752191] dump_stack+0x1b2/0x281 [ 755.754960] FAT-fs (loop2): Can't find a valid FAT filesystem [ 755.755818] should_fail.cold+0x10a/0x149 [ 755.766367] should_failslab+0xd6/0x130 [ 755.770354] kmem_cache_alloc+0x28e/0x3c0 [ 755.774511] mmu_topup_memory_caches+0x83/0x300 [ 755.779193] kvm_mmu_load+0x1e/0xd00 [ 755.782912] ? kvm_apic_accept_events+0x16f/0x3f0 [ 755.787763] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 755.792820] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 755.797754] ? _parse_integer+0xe4/0x130 [ 755.801821] ? vcpu_load+0x18/0x90 [ 755.805375] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 755.810837] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 755.815683] ? lock_acquire+0x170/0x3f0 [ 755.819673] ? lock_downgrade+0x740/0x740 [ 755.823834] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 755.827978] kvm_vcpu_ioctl+0x3de/0xc50 [ 755.831951] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.837839] ? proc_fail_nth_write+0x7b/0x180 [ 755.842475] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.847407] ? trace_hardirqs_on+0x10/0x10 [ 755.851651] ? fsnotify+0x974/0x11b0 [ 755.855378] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 755.860313] ? SyS_write+0x1b7/0x210 [ 755.864031] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 755.869930] do_vfs_ioctl+0x75a/0xff0 [ 755.873748] ? ioctl_preallocate+0x1a0/0x1a0 [ 755.878163] ? lock_downgrade+0x740/0x740 [ 755.882321] ? __fget+0x225/0x360 [ 755.885782] ? do_vfs_ioctl+0xff0/0xff0 [ 755.889809] ? security_file_ioctl+0x83/0xb0 [ 755.894224] SyS_ioctl+0x7f/0xb0 [ 755.897621] ? do_vfs_ioctl+0xff0/0xff0 [ 755.901693] do_syscall_64+0x1d5/0x640 [ 755.905842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.911032] RIP: 0033:0x466459 [ 755.914218] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.921957] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 10:57:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:08 executing program 4 (fault-call:8 fault-nth:16): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 755.929237] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 755.936510] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.943814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.951111] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:08 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x246200, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x70, 0x6, 0x81, 0x9, 0x4, 0x0, 0x400, 0x140, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff01, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x4, 0x81, 0x3, 0x2, 0x3, 0xfffffffd, 0x8}, 0xffffffffffffffff, 0x2, r2, 0x4) sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x4fba3e8d32c3e94a, 0x70, 0x1f, 0x1, 0x2, 0x7, 0x0, 0x3, 0x20400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffbff, 0x0, @perf_config_ext={0x1ff, 0x1}, 0x4000, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1}, r1, 0xe, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200080, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0xe17, 0xbef, 0x5, 0x6, 0x3, 0x8c, 0x7, 0xb5, 0x8000, 0x4, 0x4, 0x7, 0x1, 0x4, 0x4, 0xd3f1], 0x3000, 0x40}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 756.083182] FAULT_INJECTION: forcing a failure. [ 756.083182] name failslab, interval 1, probability 0, space 0, times 0 [ 756.099029] FAT-fs (loop2): bogus number of FAT structure [ 756.105280] FAT-fs (loop2): Can't find a valid FAT filesystem [ 756.138299] CPU: 1 PID: 6988 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 756.146130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.155507] Call Trace: [ 756.158104] dump_stack+0x1b2/0x281 [ 756.161742] should_fail.cold+0x10a/0x149 [ 756.165891] should_failslab+0xd6/0x130 [ 756.170316] kmem_cache_alloc+0x28e/0x3c0 [ 756.174556] mmu_topup_memory_caches+0x83/0x300 [ 756.179230] kvm_mmu_load+0x1e/0xd00 [ 756.182943] ? kvm_apic_accept_events+0x16f/0x3f0 [ 756.187783] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 756.192540] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 756.197478] ? _parse_integer+0xe4/0x130 [ 756.201535] ? vcpu_load+0x18/0x90 [ 756.205079] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 756.210620] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 756.215461] ? lock_acquire+0x170/0x3f0 [ 756.219441] ? lock_downgrade+0x740/0x740 [ 756.223610] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 756.227747] kvm_vcpu_ioctl+0x3de/0xc50 [ 756.231815] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 756.237699] ? proc_fail_nth_write+0x7b/0x180 [ 756.242209] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 756.247156] ? trace_hardirqs_on+0x10/0x10 [ 756.251387] ? fsnotify+0x974/0x11b0 [ 756.255182] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 756.260105] ? SyS_write+0x1b7/0x210 [ 756.263816] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 756.270479] do_vfs_ioctl+0x75a/0xff0 [ 756.274281] ? ioctl_preallocate+0x1a0/0x1a0 [ 756.278682] ? lock_downgrade+0x740/0x740 [ 756.282831] ? __fget+0x225/0x360 [ 756.286370] ? do_vfs_ioctl+0xff0/0xff0 [ 756.290517] ? security_file_ioctl+0x83/0xb0 [ 756.295464] SyS_ioctl+0x7f/0xb0 [ 756.298832] ? do_vfs_ioctl+0xff0/0xff0 [ 756.302816] do_syscall_64+0x1d5/0x640 [ 756.306813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.311997] RIP: 0033:0x466459 [ 756.315174] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.322876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 756.330137] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 756.337409] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.344675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.351941] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:08 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000100)={0x2, 0xf000, 0x80, 0x82, 0x2}) 10:57:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:08 executing program 4 (fault-call:8 fault-nth:17): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:08 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stack\x00') exit(0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/170, 0xaa}], 0x1, 0xd84, 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 756.644525] FAULT_INJECTION: forcing a failure. [ 756.644525] name failslab, interval 1, probability 0, space 0, times 0 [ 756.685993] CPU: 0 PID: 7033 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 756.693829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.703185] Call Trace: [ 756.706037] dump_stack+0x1b2/0x281 [ 756.709672] should_fail.cold+0x10a/0x149 [ 756.713819] should_failslab+0xd6/0x130 [ 756.717803] kmem_cache_alloc+0x28e/0x3c0 [ 756.721953] mmu_topup_memory_caches+0x83/0x300 [ 756.726623] kvm_mmu_load+0x1e/0xd00 [ 756.730337] ? kvm_apic_accept_events+0x16f/0x3f0 [ 756.735181] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 756.740035] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 756.744993] ? _parse_integer+0xe4/0x130 [ 756.749159] ? vcpu_load+0x18/0x90 [ 756.752798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 756.758283] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 756.763235] ? lock_acquire+0x170/0x3f0 [ 756.767226] ? lock_downgrade+0x740/0x740 [ 756.771383] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 756.775526] kvm_vcpu_ioctl+0x3de/0xc50 [ 756.779499] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 756.785380] ? proc_fail_nth_write+0x7b/0x180 [ 756.789880] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 756.794987] ? trace_hardirqs_on+0x10/0x10 [ 756.799218] ? fsnotify+0x974/0x11b0 [ 756.802926] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 756.807850] ? SyS_write+0x1b7/0x210 [ 756.811561] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 756.817456] do_vfs_ioctl+0x75a/0xff0 [ 756.821253] ? ioctl_preallocate+0x1a0/0x1a0 [ 756.825651] ? lock_downgrade+0x740/0x740 [ 756.829794] ? __fget+0x225/0x360 10:57:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 756.833246] ? do_vfs_ioctl+0xff0/0xff0 [ 756.837223] ? security_file_ioctl+0x83/0xb0 [ 756.841623] SyS_ioctl+0x7f/0xb0 [ 756.844978] ? do_vfs_ioctl+0xff0/0xff0 [ 756.848960] do_syscall_64+0x1d5/0x640 [ 756.852851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.858180] RIP: 0033:0x466459 [ 756.861362] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.869077] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 756.876442] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:08 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xca, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x14000000, 0x1}, 0x12, 0x7, 0x5, 0x7, 0x0, 0xffff}, r1, 0x0, r0, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x17}}, r5, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0xffffe000) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000000100)={0xffff8000, 0x65ec000, 0x3, 0x4, 0x10001}) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 756.883713] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.890997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.898459] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:09 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="abaaaaaaaaaaaaaaaeaaaeaacfa55808004c0000db0000000000069078ac1314bbac071c1902e000000100000000e00000010900000000000000cc44c200028c82b4a6e3324b3af4b1122b4ada8d6f5f64331fdb30ef429888000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xe0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x48010, 0xffff, 0x20, 0x6, 0x4, 0x400, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:09 executing program 4 (fault-call:8 fault-nth:18): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:09 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 757.118314] FAULT_INJECTION: forcing a failure. [ 757.118314] name failslab, interval 1, probability 0, space 0, times 0 [ 757.156204] CPU: 1 PID: 7080 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 757.164154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.173515] Call Trace: [ 757.176231] dump_stack+0x1b2/0x281 [ 757.179868] should_fail.cold+0x10a/0x149 [ 757.184027] should_failslab+0xd6/0x130 [ 757.188009] kmem_cache_alloc+0x28e/0x3c0 [ 757.192173] mmu_topup_memory_caches+0x83/0x300 [ 757.196851] kvm_mmu_load+0x1e/0xd00 [ 757.200925] ? kvm_apic_accept_events+0x16f/0x3f0 [ 757.205782] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 757.210553] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 757.215484] ? _parse_integer+0xe4/0x130 [ 757.219576] ? vcpu_load+0x18/0x90 [ 757.223153] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 757.228652] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 757.233592] ? lock_acquire+0x170/0x3f0 [ 757.237569] ? lock_downgrade+0x740/0x740 [ 757.241731] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 757.245896] kvm_vcpu_ioctl+0x3de/0xc50 [ 757.249968] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 757.255918] ? proc_fail_nth_write+0x7b/0x180 [ 757.260417] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 757.265374] ? trace_hardirqs_on+0x10/0x10 [ 757.269631] ? fsnotify+0x974/0x11b0 [ 757.273523] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 757.278465] ? SyS_write+0x1b7/0x210 [ 757.282191] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 757.288090] do_vfs_ioctl+0x75a/0xff0 [ 757.292080] ? ioctl_preallocate+0x1a0/0x1a0 [ 757.296497] ? lock_downgrade+0x740/0x740 [ 757.300683] ? __fget+0x225/0x360 [ 757.304146] ? do_vfs_ioctl+0xff0/0xff0 [ 757.308133] ? security_file_ioctl+0x83/0xb0 [ 757.312729] SyS_ioctl+0x7f/0xb0 [ 757.316101] ? do_vfs_ioctl+0xff0/0xff0 [ 757.320085] do_syscall_64+0x1d5/0x640 [ 757.323990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.329183] RIP: 0033:0x466459 [ 757.332377] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.340085] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 757.347356] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 757.354632] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.361912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.369187] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:11 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x70, 0x5, 0x7f, 0x2, 0x4, 0x0, 0x7, 0x25a00, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x6bb}, 0x81d, 0x7, 0xcd5, 0x5, 0x6, 0x100, 0x81b}, 0xffffffffffffffff, 0x4, r0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10800, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) mq_notify(r5, &(0x7f0000000300)={0x0, 0xa, 0x4, @tid=r6}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:11 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:11 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x6ffad7f78b472146, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0x10003}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:11 executing program 4 (fault-call:8 fault-nth:19): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000001400)=""/84) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000001480)=""/117) r9 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000001480)=""/117) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b80)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="a277cd7ac4d3f2935bee41f92b218f00fed954c6f2eac6fddd45f669f7fc5e972bb576d280541b5f569651e0fd98c21c794608241d490aff5bcc7218a36e6420e6519714f6eb04764c9d4c89c43e2820fe9ac03222909957e8767bd82d569fcadacf78d5f2847c20d9fdcc94781953526eb596819d5ca614e3c9998ad925b127fbd1", 0x82}, {&(0x7f0000000140)="449af4d9f3720035a0ebd6802fe841f4d467e5cf22612c1f1256dac6f6224ef40d67eae4e5f315ceb19ba0a9ebea30b59925c9709aa1dce6797100d11ebbee1c22695785d1f7e5d16cce500ef146f9a819f4899df43a35c7de78a76b44b9b0632b810f6662d42bb608ecfc91d9f3339628bdfc5a44247b51b4f453f5fce4074e800cf2e9b1b71a6be33d79e29da2c75d97b4869f9dd662a296ee73d69a73d42bc778c0b65378d6cf4af8ad57", 0xac}, {&(0x7f0000000200)="2f2c77e67194c97f0208e74fbc39553dbef5db79e9a27cb3b96bb8d28e344b696955cc5a8dcec368352f130825f92f38cff4359cb81166f4e60c3dd6416c9c645111916f060e3f317312af47e89682149ab8e0e56ba78e578473ad3763cbab8e4c4e129332ccb0e84a65521a42682f1fae60140686badb3038a0270dd2c5ec0c3cf7967bfd28af68562934ab00037151f93ec7345215279f95789124483df6ada1e62225d8bc", 0xa6}, {0x0}], 0x4, &(0x7f0000000400), 0x0, 0x4000}, {&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000540)="01dd4a9bdf90b8177079cabc2881a97ca26196840eae9f52abfeec9f01c546a08cf5a80ca3f13cdbfc194bbd11d529194be69cb4e716c93876eb1fe8389d9fc69186bb806b258c92614006688d22c3d6691d00adf14c44c900b08ed908aefaa7e1dcd3cc34b5a60a02fe", 0x6a}, {&(0x7f00000005c0)="5135f5cf7b6019c4116ea96ab21f68513795fad4303510476f367d6e37bf658a95e486631bdd7c37d967d41e9e427e99e3ce7a2ea5a861df432fff61dbcf40846c89d0f8ec240ca8f0e288c51f316985773806ad564febe99b57a7665a864aa8e9f1fbd9db5f6f4a3053e27ccfd7f246b185eb63e32e79953a1ea1de2e90789d7dba22c7d5644af745ab532c", 0x8c}, {0x0}, {&(0x7f0000000740)="3e68541bc62e2c4c495bb7c4ca49cf2ca8e79c4ac7f903a0cefd7dc6ef54d23fd3cb25a9a1e6574738e5145c703bd000fc53256b4abe36699740f2b4665a726692f0571507b08b59723c1200a7ba3b16dc2e329d731aa5c0e97cd9c40acda9a9b5c66dcbe2468c764265b7abe94257b4cfc0898ad8047f76e5a0a6e06df421f4e36f", 0x82}, {&(0x7f0000001d00)="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", 0xe4e}, {&(0x7f0000000800)="0c4031c3a410a4be38c89a52232518d232f9ea60b461a77065a43b0a0714f64cc9ec8be24a12e27370f922f6639630e6637375ce3772f23712225069e536000b687294a58092840803668ca70e412786984d46978b64e760d1cb", 0x5a}], 0x6, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20, 0x54}, {&(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30, 0x880}, {&(0x7f0000003040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f00000030c0)="af2ddca5f2f2aa3a3a7ab220c17e040eba2b992ed4be1f32f898f0be1f1da94c169491d2ac11aa92e5abdc5443b819ef98c6881ac4e63c91224ebd883a11d6c69f173f88b45cdf580408d36144baa087c7bdd1f7914159243da3bf24c3ba940a15d50e210de51130eca6ba", 0x6b}, {&(0x7f0000003140)}, {0x0}], 0x3, &(0x7f0000002f00)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000d300a5ce7cc28aafe523f9fa63a33434b8b0cd5e614c28f6c80b7a3d575fa2479c098b1eeaaf064bfe74f29fd41d0c711fa76c7a2f6c744a411ebfb436e9f097de63641058151c3bfc0a1feeaca7497bbbf62bd49a19064997f2f45c5fb685c33fc18bf0"], 0x30, 0x2000080}, {&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003340)="09ec30ebe387d24875080e24346b630ce927c2255c006c11f9f49b403701ebcb", 0x20}], 0x1, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0, 0x8000}, {&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003840)='\b', 0x1}, {&(0x7f0000003880)="c055d1c5231df04dad1867bd4b1d90c2c515cb1fb47bd941361de572f92e6d1c9516fbb4806112eb3dc3d4edb3f780e8bf387c0f0ba2a4a659566ad414e5ce539e698b445a73071ee04d104c3b428da78b9cbcb829e676016bbf5e32e33dc22ba68d0e46be0970cf849c9d217a451537fa2a2ea6e5439244b8fe6e23e050823a4cf9d71c57e9417c4b0888ba2d484c4f88352dff041a209171d40a6d69741ba43b298d945ca344fd209f61ac618778e1783e8d7f748cbc5981f7a3ea6bc459ba7bd11b1ccc08e444dfa9c1329b8b830f6a2880caff0b4f3b2195b635eecc9533eab18e348d", 0xe5}, {&(0x7f0000003980)="209268cebdb16549f099e2d11802d018652bf3940eb280326cb515737020bd", 0x1f}], 0x4, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x90, 0x81}, {0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000048c0)="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", 0xffb}, {&(0x7f00000058c0)="330716fa74e76f0309ab4939fecd1328ef279677696dce9c54d549c72ca21fd8f6ec803755670c67d1b44d5d6263a61517ef901b3041e9d2ced2cf2a91d43b59eb7716328860be8fce14529d21c22a85ab3d6435c15112b168666882718979b6b08d5c091aa8e1a0d8aed072cb01e93aa00cb16ace7df7ac1e", 0x79}], 0x2, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0, 0x40}], 0x7, 0xc000) fchown(r1, r3, r7) 10:57:11 executing program 0: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x9, 0x20, 0x80, 0x3f, 0x0, 0x7ff, 0x60221, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x8290, 0xfffffffffffffffe, 0x5, 0x9, 0x9, 0xd1, 0x4}, 0xffffffffffffffff, 0xd, r0, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:57:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r1, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 759.779412] FAULT_INJECTION: forcing a failure. [ 759.779412] name failslab, interval 1, probability 0, space 0, times 0 [ 759.835538] CPU: 0 PID: 7148 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 759.843394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.852738] Call Trace: [ 759.855324] dump_stack+0x1b2/0x281 [ 759.858942] should_fail.cold+0x10a/0x149 [ 759.863083] should_failslab+0xd6/0x130 [ 759.867065] kmem_cache_alloc+0x28e/0x3c0 [ 759.871208] mmu_topup_memory_caches+0x83/0x300 [ 759.875909] kvm_mmu_load+0x1e/0xd00 [ 759.879614] ? kvm_apic_accept_events+0x16f/0x3f0 [ 759.884462] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 759.889305] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 759.894251] ? _parse_integer+0xe4/0x130 [ 759.898307] ? vcpu_load+0x18/0x90 [ 759.901855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 759.907309] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 759.912147] ? lock_acquire+0x170/0x3f0 [ 759.916128] ? lock_downgrade+0x740/0x740 [ 759.920271] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 759.924420] kvm_vcpu_ioctl+0x3de/0xc50 [ 759.928411] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 759.934488] ? proc_fail_nth_write+0x7b/0x180 [ 759.938980] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 759.943922] ? trace_hardirqs_on+0x10/0x10 [ 759.948183] ? fsnotify+0x974/0x11b0 [ 759.951890] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 759.956815] ? SyS_write+0x1b7/0x210 [ 759.960525] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 759.966409] do_vfs_ioctl+0x75a/0xff0 [ 759.970427] ? ioctl_preallocate+0x1a0/0x1a0 [ 759.974825] ? lock_downgrade+0x740/0x740 [ 759.978980] ? __fget+0x225/0x360 [ 759.982427] ? do_vfs_ioctl+0xff0/0xff0 [ 759.986419] ? security_file_ioctl+0x83/0xb0 [ 759.990938] SyS_ioctl+0x7f/0xb0 [ 759.994318] ? do_vfs_ioctl+0xff0/0xff0 [ 759.998296] do_syscall_64+0x1d5/0x640 [ 760.002802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.008980] RIP: 0033:0x466459 [ 760.012179] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.019882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 760.027146] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:12 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 760.034407] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.041671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.048953] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:12 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x600000000000000, 0x100000, 0x843, 0x2, 0x12}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f00000000c0)={0x7, 0x5, 0x2, 0x5, 0x1a, "5697731b29ac0a6f"}) 10:57:12 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:12 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:14 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = gettid() tkill(r2, 0x401004000000016) perf_event_open(&(0x7f00000002c0)={0x6, 0x70, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100000001, 0x40100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x9, 0x1}, 0x732, 0x200, 0x5, 0x5, 0x0, 0x20, 0x1}, r2, 0x6, r0, 0x1) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xf9f, 0x0) r2 = openat(r1, &(0x7f0000001940)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) lstat(&(0x7f00000000c0)='./file3\x00', &(0x7f0000000140)) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:14 executing program 4 (fault-call:8 fault-nth:20): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:14 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:14 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000f, 0x12, r4, 0xa3721000) [ 762.828414] FAULT_INJECTION: forcing a failure. [ 762.828414] name failslab, interval 1, probability 0, space 0, times 0 10:57:14 executing program 0: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x0, 0x40, {0x77359400}, {0x1, 0x0, 0x7, 0x8, 0x1, 0x1, "ec4e67a3"}, 0x8000, 0x3, @planes=&(0x7f0000000100)={0x4, 0xf41, @mem_offset=0x1, 0x1}, 0x6}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x4000000000ff], 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:14 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 762.878571] CPU: 0 PID: 7258 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 762.886529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.895998] Call Trace: [ 762.898596] dump_stack+0x1b2/0x281 [ 762.902403] should_fail.cold+0x10a/0x149 [ 762.906559] should_failslab+0xd6/0x130 [ 762.910562] kmem_cache_alloc+0x28e/0x3c0 [ 762.914714] mmu_topup_memory_caches+0x83/0x300 [ 762.919383] kvm_mmu_load+0x1e/0xd00 [ 762.923095] ? kvm_apic_accept_events+0x16f/0x3f0 10:57:14 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 762.927939] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 762.932706] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 762.937643] ? _parse_integer+0xe4/0x130 [ 762.941714] ? vcpu_load+0x18/0x90 [ 762.945254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 762.950714] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 762.955556] ? lock_acquire+0x170/0x3f0 [ 762.959533] ? lock_downgrade+0x740/0x740 [ 762.963705] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 762.967873] kvm_vcpu_ioctl+0x3de/0xc50 [ 762.971936] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 10:57:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 762.977823] ? proc_fail_nth_write+0x7b/0x180 [ 762.982758] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 762.987697] ? trace_hardirqs_on+0x10/0x10 [ 762.991965] ? fsnotify+0x974/0x11b0 [ 762.995724] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 763.000659] ? SyS_write+0x1b7/0x210 [ 763.006033] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 763.011922] do_vfs_ioctl+0x75a/0xff0 [ 763.015744] ? ioctl_preallocate+0x1a0/0x1a0 [ 763.020151] ? lock_downgrade+0x740/0x740 [ 763.024312] ? __fget+0x225/0x360 10:57:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 763.028465] ? do_vfs_ioctl+0xff0/0xff0 [ 763.032533] ? security_file_ioctl+0x83/0xb0 [ 763.036943] SyS_ioctl+0x7f/0xb0 [ 763.040322] ? do_vfs_ioctl+0xff0/0xff0 [ 763.044304] do_syscall_64+0x1d5/0x640 [ 763.048215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 763.053398] RIP: 0033:0x466459 [ 763.056579] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.064297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 763.071590] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:15 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/ip6_tables_matches\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x2, 0x8be, 0x6, 0x40, 0x10000, 0x1, 0x8}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 763.078862] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.086132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.093407] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:17 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) close(r1) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0xaaaaaaaaaaaac37, &(0x7f0000000580)=[{&(0x7f0000000000)="eb3c906d6b66732eca092f02360cc73c0240000004f801", 0x17}, {&(0x7f0000001980)="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", 0x1000, 0x9}], 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="c6a7143bb5e02d6e05d1e80aa855084bb83e8c9c9dfd5528fe7cdb9cab9c7304d53de2cc5fa4c944aa70753608aabd9255cd290720a449be5625185fce46792ec50c3c7e6e3fbf837b9ae08ac0fe4aea5060788f154a27cc2131858dd267604cf9eaae3651a0", @ANYRES32=r1, @ANYBLOB="58735aa5000b1bdd71c62b10d4e108c0464e834fedd2731023898b4934af7eee5d4ff7af6b435867a05e9056a68e175d2deb0134f94f321b32f57196f477f4a08594291b0d7f2cf9fafc54ad05861b9dc429931af24db85783e7f3dcda11673590d4399ab4c93399a878f33349bdde2c518a9f77eace82091f0f7bf749c6b31a9a52d07accdab3993d8183cb137e3948b71f95923614392ac7cbf5cd162c729160ce725defb74a28676b6515cfa63500fd54c37a6f903e0a99a1e327274f366f075bece4bbc131ab", @ANYRES64=r0]) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'veth0_to_team\x00'}) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x7ff, 0x8, 0xafa9, 0x14, r3, 0x8, [], 0x0, r3, 0x1, 0x0, 0x5}, 0x40) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000000140)="6f2708bebf699bd688ea9ae35efb2f7a4ea6e81305d9d552d441811391d9ee58272871d8c5abf983a848c9e95c82de03f09f286251d5259bb9f784e95fe8a0970749a081d74f760af17bc4ce7a2297753f0bb0a1550b7448a20e73863df70ffdbd2b56a74b77c13104a16d9c4cbb28aa7499c36ae7e80e7ddf654c9a43c61ee596", 0x81}, {&(0x7f00000002c0)="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", 0xfd}], 0x2, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r6) mkdirat(r2, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r2, &(0x7f0000000100)='./file3\x00', r2, &(0x7f0000000200)='./file0\x00') 10:57:17 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)=0x7f00000) r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x9, 0x38, 0x1, 0x5, 0x0, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x8, 0x10001}, 0x8008, 0x8, 0x20, 0x8, 0x6, 0x7ff, 0x1}, r5, 0xf, r0, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:57:17 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:17 executing program 4 (fault-call:8 fault-nth:21): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 765.876136] FAULT_INJECTION: forcing a failure. [ 765.876136] name failslab, interval 1, probability 0, space 0, times 0 [ 765.925827] CPU: 1 PID: 7335 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 765.933662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.943019] Call Trace: [ 765.945612] dump_stack+0x1b2/0x281 [ 765.949255] should_fail.cold+0x10a/0x149 [ 765.953408] should_failslab+0xd6/0x130 [ 765.957388] kmem_cache_alloc+0x28e/0x3c0 [ 765.961547] mmu_topup_memory_caches+0x83/0x300 [ 765.966224] kvm_mmu_load+0x1e/0xd00 [ 765.969943] ? kvm_apic_accept_events+0x16f/0x3f0 [ 765.974787] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 765.979550] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 765.995974] ? _parse_integer+0xe4/0x130 [ 766.000038] ? vcpu_load+0x18/0x90 [ 766.003586] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 766.009044] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 766.013974] ? lock_acquire+0x170/0x3f0 [ 766.017949] ? lock_downgrade+0x740/0x740 [ 766.022104] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 766.026266] kvm_vcpu_ioctl+0x3de/0xc50 [ 766.030262] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.036366] ? proc_fail_nth_write+0x7b/0x180 [ 766.040863] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.045801] ? trace_hardirqs_on+0x10/0x10 [ 766.051017] ? fsnotify+0x974/0x11b0 [ 766.055003] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.059936] ? SyS_write+0x1b7/0x210 [ 766.063698] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.069586] do_vfs_ioctl+0x75a/0xff0 [ 766.073410] ? ioctl_preallocate+0x1a0/0x1a0 [ 766.077830] ? lock_downgrade+0x740/0x740 [ 766.085695] ? __fget+0x225/0x360 [ 766.089242] ? do_vfs_ioctl+0xff0/0xff0 [ 766.093321] ? security_file_ioctl+0x83/0xb0 [ 766.097827] SyS_ioctl+0x7f/0xb0 [ 766.101228] ? do_vfs_ioctl+0xff0/0xff0 [ 766.105206] do_syscall_64+0x1d5/0x640 [ 766.109110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.114297] RIP: 0033:0x466459 [ 766.117518] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.125851] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 766.133119] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 766.143101] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.150372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.157644] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:18 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00006a2000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="c4c35d0c36b90fc79e13000000f36c83300f26670f01ca2635387e00000f01ca9a0d00000031002e36362e0fad42e8b9800000c00f3235002000000f30", 0x3d}], 0x1, 0x41, &(0x7f0000000180)=[@flags={0x3, 0x2000}, @cstype0], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:18 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:18 executing program 4 (fault-call:8 fault-nth:22): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 766.336699] FAULT_INJECTION: forcing a failure. [ 766.336699] name failslab, interval 1, probability 0, space 0, times 0 [ 766.364246] CPU: 1 PID: 7362 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 766.372094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.381465] Call Trace: [ 766.384065] dump_stack+0x1b2/0x281 [ 766.387700] should_fail.cold+0x10a/0x149 [ 766.391854] should_failslab+0xd6/0x130 [ 766.395853] kmem_cache_alloc+0x28e/0x3c0 [ 766.400032] mmu_topup_memory_caches+0x83/0x300 [ 766.404734] kvm_mmu_load+0x1e/0xd00 [ 766.408452] ? kvm_apic_accept_events+0x16f/0x3f0 [ 766.413757] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 766.418523] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 766.423543] ? _parse_integer+0xe4/0x130 [ 766.427606] ? vcpu_load+0x18/0x90 [ 766.431156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 766.436619] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 766.442492] ? lock_acquire+0x170/0x3f0 [ 766.446474] ? lock_downgrade+0x740/0x740 [ 766.450745] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 766.454897] kvm_vcpu_ioctl+0x3de/0xc50 [ 766.458878] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.464767] ? proc_fail_nth_write+0x7b/0x180 [ 766.469271] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.474207] ? trace_hardirqs_on+0x10/0x10 [ 766.478483] ? fsnotify+0x974/0x11b0 [ 766.482201] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.487147] ? SyS_write+0x1b7/0x210 [ 766.490874] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.496783] do_vfs_ioctl+0x75a/0xff0 [ 766.500590] ? ioctl_preallocate+0x1a0/0x1a0 [ 766.505000] ? lock_downgrade+0x740/0x740 [ 766.509156] ? __fget+0x225/0x360 [ 766.512614] ? do_vfs_ioctl+0xff0/0xff0 [ 766.516589] ? security_file_ioctl+0x83/0xb0 [ 766.521004] SyS_ioctl+0x7f/0xb0 [ 766.524372] ? do_vfs_ioctl+0xff0/0xff0 [ 766.528351] do_syscall_64+0x1d5/0x640 [ 766.532280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.537469] RIP: 0033:0x466459 [ 766.540655] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.548364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 766.555652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 766.562936] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.570233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.577512] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:18 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x2500, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x501300, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000480)={[0x8000, 0x72f, 0x6, 0x5e, 0x31de, 0x7ff, 0x2, 0x29, 0x400, 0x3, 0xb9, 0x3, 0x800, 0x1, 0x4, 0x7f, 0xbd3, 0x5, 0x7, 0x6, 0x3, 0x543, 0x3, 0x81, 0x10001, 0x7f, 0x2, 0x9, 0x80000000, 0xfffffff9, 0x5, 0x5, 0xfff, 0x101, 0x10000, 0x8, 0x9, 0x2, 0x9, 0x8000, 0x4c72, 0x6, 0x400, 0x28000, 0x4, 0xff, 0x1, 0xffff, 0x3f, 0xffffff00, 0x52, 0x66e4, 0x40, 0x7c, 0x6, 0x7fff, 0x4, 0x3fe0000, 0x80000000, 0x7, 0x4, 0x8, 0x8001, 0x4, 0x3f, 0x3ff, 0x3f, 0x9, 0x2, 0x8000, 0xfffffff7, 0xffffffff, 0x40, 0x20, 0x10001, 0x7, 0x7, 0x5, 0xe97, 0x5, 0x0, 0x14e, 0x9, 0x80000001, 0x0, 0x7fffffff, 0x0, 0x1000, 0x1, 0x80000000, 0x200, 0x400000, 0x2, 0x298, 0x80000000, 0x1, 0x10000, 0x80000001, 0x161b, 0x8, 0x0, 0x1, 0x3, 0x8, 0x101, 0x400, 0x9, 0x0, 0x0, 0x1, 0x10001, 0x3ff, 0x2, 0x7, 0x8, 0xffffffff, 0x6a0, 0xffffff68, 0x5, 0x401, 0x4, 0x6, 0x100, 0x400, 0x7, 0x7f, 0x0, 0x0, 0xf1c, 0x101, 0x9, 0x7, 0x101, 0xfffffffd, 0x5696, 0x101, 0x1, 0x101, 0x8, 0xe, 0x8, 0x8, 0x6, 0xdfd7, 0x4, 0x8fe, 0x3, 0x5b97, 0x5, 0x4000400, 0xffffffff, 0x7, 0x2c, 0x0, 0x1f, 0x5, 0x8001, 0xfffffff9, 0x8000, 0x83c, 0x20, 0x0, 0xfffffffd, 0x2, 0x8001, 0x8, 0xdae, 0x3f, 0x3fc00, 0x7, 0x8b, 0x2, 0xffffffff, 0x2, 0x1, 0x9, 0xfff, 0x1ff, 0x9, 0x3, 0x3, 0x3, 0x2, 0x1f, 0xffffffff, 0x6, 0x0, 0xc, 0x3ff, 0x1336459f, 0x74, 0xdf8, 0x4, 0x10000, 0x21f, 0x4, 0x8, 0x400, 0x2, 0x7ff, 0x2, 0x1ff, 0xfff, 0x3, 0x3, 0x1, 0x4, 0x1000, 0x7, 0x80000001, 0x80, 0x3, 0x8, 0x94, 0x40, 0x9e, 0x2, 0x7, 0x2, 0x9, 0x200000, 0x8, 0x5, 0x8, 0x0, 0x8, 0x1, 0x5, 0x8, 0x5, 0x1, 0x5, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x8, 0x8, 0x81, 0x3, 0x8, 0xfff, 0x401, 0x1, 0x62, 0x5, 0x28b, 0x0, 0x1, 0x401, 0xfff, 0xeac7, 0x100, 0x6, 0x5, 0xffff3f93, 0x2, 0xffffff7f, 0x6, 0x7fff, 0xfffffffa, 0x1, 0x4, 0x7ff, 0x2, 0x29b, 0x5, 0xffff, 0xfffffffd, 0x5, 0x7, 0x2, 0x6, 0x6, 0x7, 0x61, 0x5, 0xffff, 0x20, 0xdb92, 0xcd4, 0x8001, 0x4, 0xb6c, 0x1, 0x80000001, 0x2, 0xfffffffc, 0x100, 0x10000, 0xea89, 0x0, 0xffff, 0x80, 0x9, 0x8, 0xfff, 0x2, 0xeb92, 0x6, 0x0, 0x7, 0xfffffff8, 0x5, 0x4, 0x1ff, 0xf9, 0x8, 0x8, 0x2, 0x80, 0x80000000, 0x1, 0x8, 0x3f, 0x80, 0xa69b, 0x10000, 0x1, 0x5, 0x0, 0x3f, 0x8, 0x6, 0x2, 0x154440fd, 0x80, 0x8, 0x7, 0x5, 0x7, 0x7fff, 0x12eb33a7, 0x4, 0x10000, 0x8, 0x7, 0x4006b4c3, 0x0, 0x6, 0x6, 0xa1, 0x1000, 0x9, 0x5, 0x0, 0x8, 0x3, 0x43d, 0x2, 0x9, 0xf09, 0xfffffffc, 0x2, 0xe52, 0x3f, 0x40, 0x1, 0x9, 0x6, 0xb038, 0x2c1, 0x557, 0xfffff2e8, 0xffff, 0x6df, 0x9, 0x8aa, 0x8, 0x9, 0xfffffffe, 0x66b, 0x0, 0x10000, 0x1, 0xfffffff7, 0x7c9, 0x1672710e, 0x1, 0x10000, 0x2, 0xfffffffa, 0x9abd, 0xff, 0x7fffffff, 0x7, 0x7ff, 0x1, 0x8, 0x7, 0x5, 0x8, 0x3, 0x81, 0x7, 0x6, 0x1f, 0x0, 0x43, 0xffffff61, 0x8, 0x7, 0xffff, 0x0, 0x800, 0xdb31, 0x0, 0x80, 0x100, 0x76b6, 0x101, 0x1f, 0x756, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x80, 0x4, 0xfffffffb, 0x7, 0x2, 0xff, 0x80000000, 0x81, 0x7, 0x7, 0x1f, 0x10000, 0x9, 0x2, 0x7, 0x7, 0x7fffffff, 0x649, 0x4, 0x4, 0x9, 0xff, 0x9, 0x3f, 0x0, 0x4, 0xfff, 0x1, 0x4, 0x3, 0x7, 0x9, 0xffffffff, 0x10000, 0x3ff, 0x8000, 0x1, 0x1, 0x8, 0x100, 0xd2, 0x8a, 0x1, 0x4, 0x3, 0x6ae, 0x6, 0xfffffffc, 0x8, 0x1, 0x3816, 0x101, 0x200, 0x7452, 0x0, 0x5, 0x3, 0x2, 0x8, 0x4, 0xfffffffc, 0x1, 0x50, 0x3, 0x8, 0x2, 0x1, 0x7, 0x1f, 0x1ff, 0x1ff, 0x7fff, 0xffffff4c, 0x6, 0x4, 0x9, 0x0, 0x8, 0x9, 0x5, 0x800, 0x7fff, 0x6c3, 0x7fff, 0x3, 0x6, 0xfffffff7, 0x1, 0xcb2c, 0x9, 0x2, 0xef, 0x5, 0x5, 0x0, 0x1, 0x8001, 0x2, 0x81, 0x1000, 0x7, 0x0, 0x1, 0x1ff, 0x1, 0x4d2, 0x7f, 0x10000, 0x6, 0x1000, 0x7ff, 0x1000, 0x7fff, 0xfffffff7, 0x5, 0x7f, 0x6, 0x8, 0xffffffff, 0x5, 0xc0, 0xffff, 0xfff, 0x7, 0xff, 0x8, 0x7, 0x2, 0x7f, 0x9, 0x2, 0x7fff, 0x2, 0x5, 0x2, 0x81, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x5, 0x80000001, 0x10000, 0x8, 0x0, 0x10000, 0xcb, 0x7d, 0x0, 0x8, 0x80, 0x0, 0x5, 0x36, 0x8, 0x6, 0x8e96, 0x7, 0x9, 0xfffffffc, 0x68, 0x0, 0x6, 0x2, 0x2ae, 0x7ff, 0x3, 0x7ff, 0x3, 0x9, 0x80000000, 0xff, 0x800, 0x0, 0x5, 0x8, 0x9, 0x5, 0x7, 0x71, 0x3, 0x9, 0x8, 0x40, 0xffff, 0x3ff, 0xfffffffe, 0x100, 0x6, 0x0, 0x9, 0x5, 0x200, 0xffffff7f, 0x4, 0x0, 0x2, 0x6ce8, 0x400, 0x5, 0x5, 0x1, 0x3f, 0x2c000000, 0x1, 0x81, 0x2, 0x6, 0x5, 0xb5, 0x6ab, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x100, 0x0, 0x0, 0x9, 0x2, 0x100, 0x9, 0x3, 0x3, 0x3, 0x80000000, 0x8, 0x8, 0x0, 0xfffffffe, 0x4, 0x9212, 0x4, 0x67, 0x81, 0x0, 0xfffffffc, 0xd59a, 0xfffffffa, 0x400, 0x4, 0x7, 0x93, 0x9, 0x800, 0x6, 0x80000000, 0x8, 0x4, 0xffff, 0x1, 0x5, 0x40, 0x1, 0x7, 0x0, 0x3, 0x5, 0x400, 0x7, 0xb4, 0x9a, 0x10000, 0xa0000, 0x1, 0x7f, 0x8001, 0x4c, 0x6, 0xff, 0x7, 0x89, 0x7, 0x6f3, 0x7, 0x5, 0xfff, 0x0, 0x4, 0x6, 0x2, 0xfffffff8, 0x7f, 0x4, 0x6, 0x6, 0x0, 0x1f, 0x6, 0xff, 0x3ef, 0x0, 0x5, 0x3, 0x2, 0x7aa6, 0x6, 0x100, 0x2, 0x9, 0x8, 0x7, 0x7, 0x4, 0xfda, 0x6, 0x8000, 0xb8, 0x5, 0x8, 0x8a12, 0x10001, 0x100, 0x200, 0x9, 0x3d5a, 0xffff, 0x401, 0x2, 0x1, 0x42, 0x8000, 0x5, 0xf96, 0x9, 0x3, 0x5, 0x6, 0x6, 0x33f, 0x7fffffff, 0x49262b4d, 0x80000000, 0x81, 0x7f, 0xffff, 0x2, 0xae9, 0x7, 0x100, 0x251a, 0xfffffffa, 0x9, 0x400, 0x8, 0x7, 0x80000001, 0x2, 0xc42b, 0x8001, 0x9, 0x8, 0x0, 0x200, 0x101, 0x96, 0xffff, 0x3, 0xfffffff8, 0x7d0, 0x1, 0x1ff, 0xfffffe01, 0x5, 0x6, 0x1c4, 0x80, 0x4, 0x6, 0x6, 0x20, 0x1000, 0x5, 0x6, 0x200, 0xb00, 0x100, 0xfffffb75, 0x1, 0x10000, 0x3, 0x1, 0xf0a, 0x10000, 0x1, 0x81dc, 0x0, 0x7, 0x1ff, 0x4, 0x4, 0x19d, 0x44f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0x10000, 0x8, 0x200, 0x80000000, 0x6f, 0x6, 0x8, 0x8, 0x2, 0x431a, 0x7, 0x9, 0xfc0, 0x400, 0x7, 0xc36, 0x6, 0x0, 0x5, 0x4, 0x1f, 0x2, 0x80000001, 0xfffffffa, 0x101, 0x9, 0x3, 0x3, 0x55e, 0x6, 0x8, 0xff, 0x0, 0xf1, 0x80000001, 0x1000, 0x1000, 0x1, 0xfffff800, 0x8001, 0x2190, 0x3, 0x0, 0x0, 0x1, 0x2, 0x100, 0xfffff001, 0x2b9, 0x5, 0x10000, 0x78f78ec, 0xe406, 0x9, 0x3, 0x5, 0x4, 0x10000, 0x6, 0x71, 0x6, 0x0, 0x0, 0x200, 0x6, 0x8, 0x6, 0x3f, 0x13f9, 0x0, 0x1, 0x0, 0x100, 0x6, 0xe7, 0x9, 0xab, 0xd2d, 0x96, 0x79, 0x8, 0x0, 0x7f0, 0xd01ac5d, 0xfffffffc, 0x800, 0x7, 0x7ff, 0x7ff, 0x7, 0x8, 0x4, 0xfdd, 0x8001, 0x5, 0x5, 0x400, 0x7366, 0x1000, 0xc36, 0x4, 0x4, 0x7, 0x40, 0x7ff, 0x9, 0x3, 0x4, 0x7ff, 0x20, 0x0, 0xffffffff, 0x1000, 0xfffffffc, 0x3, 0x8000, 0x5, 0xc1a, 0x0, 0x101, 0x1, 0xa456eee, 0x5, 0x7, 0xffff, 0xea2, 0x7372, 0x6, 0x6, 0x8, 0x81, 0xffffffff, 0x6, 0x10001, 0x3, 0xfffffff8, 0x4, 0xffffffff, 0x8, 0x5a47, 0x68b7, 0x2, 0x5, 0x40, 0xa3, 0x1, 0xe29a, 0xfffffe01, 0x0, 0x2, 0x4, 0xfffffffa, 0x8, 0x9, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x0, 0x10001, 0x101, 0xfffffff9, 0x9, 0x80000000, 0x0, 0x7, 0x6, 0x0, 0x3ff, 0x2, 0x39cc, 0x9, 0x135, 0x5, 0x0, 0x8000, 0x2c, 0x0, 0x9, 0x1, 0x8000, 0x4, 0x338, 0x5, 0xe98, 0x3ff, 0x6, 0x3f, 0x7ff, 0x1, 0x0, 0x2, 0x3, 0x6, 0x4, 0xfffffffd, 0xaee, 0x1, 0x8, 0x41757f88]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:18 executing program 4 (fault-call:8 fault-nth:23): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:18 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0xaaaaaaaaaaaab83, &(0x7f0000000000), 0x21, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 766.763000] FAULT_INJECTION: forcing a failure. [ 766.763000] name failslab, interval 1, probability 0, space 0, times 0 [ 766.812187] CPU: 1 PID: 7381 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 766.820011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.829365] Call Trace: [ 766.831963] dump_stack+0x1b2/0x281 [ 766.835600] should_fail.cold+0x10a/0x149 [ 766.839778] should_failslab+0xd6/0x130 [ 766.843762] kmem_cache_alloc+0x28e/0x3c0 [ 766.848337] mmu_topup_memory_caches+0x83/0x300 [ 766.853111] kvm_mmu_load+0x1e/0xd00 [ 766.856834] ? kvm_apic_accept_events+0x16f/0x3f0 [ 766.861729] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 766.866500] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 766.871438] ? _parse_integer+0xe4/0x130 [ 766.875505] ? vcpu_load+0x18/0x90 [ 766.879049] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 766.884523] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 766.889370] ? lock_acquire+0x170/0x3f0 [ 766.893350] ? lock_downgrade+0x740/0x740 [ 766.897513] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 766.901685] kvm_vcpu_ioctl+0x3de/0xc50 [ 766.905666] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.911589] ? proc_fail_nth_write+0x7b/0x180 [ 766.916089] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.921026] ? trace_hardirqs_on+0x10/0x10 [ 766.925264] ? fsnotify+0x974/0x11b0 [ 766.929017] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 766.933973] ? SyS_write+0x1b7/0x210 [ 766.937691] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 766.943591] do_vfs_ioctl+0x75a/0xff0 [ 766.947405] ? ioctl_preallocate+0x1a0/0x1a0 [ 766.951817] ? lock_downgrade+0x740/0x740 [ 766.955969] ? __fget+0x225/0x360 [ 766.959436] ? do_vfs_ioctl+0xff0/0xff0 [ 766.963414] ? security_file_ioctl+0x83/0xb0 [ 766.967822] SyS_ioctl+0x7f/0xb0 [ 766.971197] ? do_vfs_ioctl+0xff0/0xff0 [ 766.975177] do_syscall_64+0x1d5/0x640 [ 766.979079] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 766.984318] RIP: 0033:0x466459 [ 766.987539] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.996032] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 767.003321] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 767.010769] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.018056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.025416] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00'}) close(r2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x9, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:19 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r5 = gettid() tkill(r5, 0x401004000000016) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x6, 0x8, 0x1, 0xff, 0x0, 0xfffffffffffffe01, 0x4001, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x9}, 0x101, 0xcb, 0x20, 0x6, 0x78a, 0xfffffffb, 0x35e3}, r5, 0xa, r6, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:19 executing program 4 (fault-call:8 fault-nth:24): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:19 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x4000, 0x0) r2 = gettid() tkill(r2, 0x401004000000016) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x1f, 0x37, 0x1, {0x1, 0x7, 0xa6, r2, 0x1, ')'}}, 0x1f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:19 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x430, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x5, 0x1}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_pts(r3, 0x2102) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x1, 0x2000, &(0x7f0000012000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10008, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x3, @perf_config_ext={0x0, 0x219e8584}, 0x8080, 0x84, 0x7, 0x2, 0x10001, 0x8, 0x33}, 0x0, 0x10, r0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000540)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000740)=""/2, 0x2}], 0x3, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x9, 0x1, 0x6, 0x4, 0x9, "e131b66bc1cc86d3b08e81a298d0ea9a93c1d1", 0x6, 0x13}) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/138, 0x8a}], 0x5, 0xd9f, 0x3) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @multicast}, 0x30, {0x2, 0x4e23, @loopback}, 'ip6erspan0\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) [ 767.496881] FAULT_INJECTION: forcing a failure. [ 767.496881] name failslab, interval 1, probability 0, space 0, times 0 [ 767.532907] CPU: 0 PID: 7449 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 767.540755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.550751] Call Trace: [ 767.553347] dump_stack+0x1b2/0x281 [ 767.557079] should_fail.cold+0x10a/0x149 [ 767.561246] should_failslab+0xd6/0x130 [ 767.565231] kmem_cache_alloc+0x28e/0x3c0 [ 767.569374] mmu_topup_memory_caches+0x83/0x300 [ 767.574041] kvm_mmu_load+0x1e/0xd00 [ 767.577752] ? kvm_apic_accept_events+0x16f/0x3f0 [ 767.582592] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 767.587360] ? kvm_get_time_scale+0x132/0x190 [ 767.591957] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 767.596893] ? trace_event_raw_event_kvm_mmio+0x270/0x270 [ 767.602442] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 767.607291] ? lock_acquire+0x170/0x3f0 [ 767.611263] ? lock_downgrade+0x740/0x740 [ 767.615408] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 767.620459] kvm_vcpu_ioctl+0x3de/0xc50 [ 767.624444] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 767.630323] ? proc_fail_nth_write+0x7b/0x180 [ 767.634836] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 767.639774] ? trace_hardirqs_on+0x10/0x10 [ 767.644023] ? fsnotify+0x974/0x11b0 [ 767.647737] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 767.652681] ? SyS_write+0x1b7/0x210 [ 767.656848] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 767.662745] do_vfs_ioctl+0x75a/0xff0 [ 767.666544] ? ioctl_preallocate+0x1a0/0x1a0 [ 767.670941] ? lock_downgrade+0x740/0x740 [ 767.675188] ? __fget+0x225/0x360 [ 767.678630] ? do_vfs_ioctl+0xff0/0xff0 [ 767.682597] ? security_file_ioctl+0x83/0xb0 [ 767.686996] SyS_ioctl+0x7f/0xb0 [ 767.690352] ? do_vfs_ioctl+0xff0/0xff0 [ 767.694322] do_syscall_64+0x1d5/0x640 [ 767.698208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 767.703435] RIP: 0033:0x466459 [ 767.706638] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.714375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 767.721638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 767.728929] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.736210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.743491] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:19 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:19 executing program 4 (fault-call:8 fault-nth:25): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:19 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="a7147869bc208b3e36ceb00c2b04a2e8deb5477a2ae6bab63bf7e3d5d537b4319cf2812b276c59a4fc87e7f5e168266241ce6b7f48eddb4079e81675bcb0844810a260ea902228a5950ddea7"]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x5207, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)) close(r2) mmap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0x84d2e000) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x8, &(0x7f0000000d80)=[{&(0x7f00000001c0)="08b0e4c91972a05c8a30b152711ddd3c1ff95eb6dc952b5a349ba5b41c13e9b18e568293c81d1e48e78f187d", 0x2c, 0xef27}, {&(0x7f0000000740)="f2fc16594f191a51be0f4dd4821a7e33a92deb7851a28b8b8c23b41e6b3f8b2f83f9605bbf3f92f56c11ff4359ff4e00fc3789b5c08a4a6ae2c2f945d91fa0f753283b1d1c92fd2a2b4e74fa6bd9f83e9147", 0x52, 0x20}, {&(0x7f00000007c0)="73037fb2dc7d65d47292cd243963761ace2bff9fe69c6226c5a00a26827fa40c4ca1ae5a360ba571304668d4df632dc6874d4714af48fe309a05948cab1228165ec75106d541cc21d8389fdd1f65d0c183204ff00a4163459cdbebc34098c8600f6e8aa8b5c2826988d02f8cbedc45beae435ec1596a9cf7a0569b4f44ce4d7c09509a82b5b00ee451d6821adc6db414d46d2ef264ab6e83837764904d58ba8aee9af2c790595ee7cae5014619e46f6ac4a4e065c8609c274645e92a07adab9b02d47158489c6907a3d9f076ab62240f0098370f050e31afd028", 0xda, 0x1000}, {&(0x7f00000008c0)="4863994bc5245ad0e67bb0472480011aedf538d3bad609ae0185db3abb20b66aeb76188cfa565c0107fe9c2229b10066ea5a62f156cf5cf18ddd8d9f31e076cf2555c7bed314c0b0a522a16e6fd7b30e5c4233aaaa9ad69d47f0b4b7f4281f5c5660381f53d250a11fa85414dc68e868006b9e80c17b8b95febb1eb54cf5e9f5bbab8c3d5508e983003ca955e8eb4da55859c1ee860b70aee5d438062c78657f56a52e40d3acd1f28dd070f6b9d5ae4c226aab91760bb4", 0xb7, 0x3}, {&(0x7f00000009c0)="14e71709da681e08cb8807f038e8dcb2943000a637d8978d5bc76d6685c3daf63c9ab136cc0cb5660ada54560f5e90641b4711b4d3cd1b5a14f6cdb2cb5b83c5dd2e62693aaad764ec3cdb5756032e030e7fd6914b29634368984a26ec2cc17ed3b36ddff24f2d09ef24ffbf94280f3d3b359e95a304044bf9e88d9421504195f08c966e54c34d160eefe6f9ee8ce28ae0c5d0218c5074949e0a1a88e59bb448f65405af6b6fc7c72cd4c7723e28b16002189ae8a8632cbcf6e831989f2e87e0e79b457ed073f25348afcf6232398378f589db580db302f61210067fe0b6a28a9aa8dc64ff321ecc73458e4902ff8e79", 0xf0, 0x5}, {&(0x7f0000000ac0)="d9405d9da0f986548126b5216336cc69afab9137b7551d39c24005f1596c1f05faf38fc9a0b898f74b3d3de6c328a06067bde78549ac43721d54fef31cd2c4ac0b025a1f22a38c68e0ff9efcc1c2b81ff1dd2ed33b67e02ff0f4d0920ed7bd2e4ec87d8a3311e1f2c9f6d60f2fef32f44945aeb12e9656f0655f387cce7c1a9672f3192bad6b302be3af947e3afeaba7de3c6f94efb83151daccff91a4a003947508b4b794a65ed3444229286a6c5275ce648485cbcf091bb563e3493d832545d1752e5aa2acfa4968caed8eb274a2b989befde7cebac8df8847d2", 0xdb, 0x10001}, {&(0x7f0000000bc0)="5c016319fa481adea216e1c8c3a6b833a7ee508e5698f6ea0f0ea9cdf569ba354200f727add616da67bef6312b7a5f06f2b4d5ee3cea2720c0e3f747f444a94d566ca21323b8fbb07e96c228ee7ef3cc73f5a18445f19696a7b1afacd116a3bbbd50d8bbd79daba3225ca5707efd8f2b8f195d61162d2208a85339c3d3092fb430f10ad144d70bd96c76f6c6", 0x8c, 0x3}, {&(0x7f0000000c80)="9487faf67c470887bf4f10b21537f2704d2d00106e48da3281a04c47703b0bfb95472ac04851081905bcd50a225f4a3bf62f082f69cb4f776780b2e40c0e98d462e2c319ba7393cf95de67aeab72f79088ef69d0c33c8cb02f34f574edefcbbb38849d688332b779eeb3714b91091ffc5dd014dd40496bbc3d513e2bcf7ae9e3eefabf183b6bf38a7566cdc1401842a29884aa9da6567ed671faca312d746bb2572ac570fe83cbebb32714acf7a5203bb6d5d72fa5f033d64a90a3130b7f8ff01a08ac9354be3299b93aff8473ad29982c1eedcdfa95d9cf7b1f17a4edbdbcde527c50cc494781377fb0dc9b2f24", 0xee, 0x8001}], 0x20000, &(0x7f0000000e40)=ANY=[@ANYBLOB='quota,resize,resize,iocharset=iso8859-14,integrity,errors=remount-ro,measure,smackfsroot=vfat\x00,obj_user=\x00,smackfstransmute=@-/-}(,euid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="2ce706f6a275d9bd273123e882a8bd6967daea538c10225e57fc68f4da297cc4a7d4f96fb41b21185423000000"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 767.928122] FAULT_INJECTION: forcing a failure. [ 767.928122] name failslab, interval 1, probability 0, space 0, times 0 [ 767.941371] CPU: 0 PID: 7474 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 767.949201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.958554] Call Trace: [ 767.961185] dump_stack+0x1b2/0x281 [ 767.964838] should_fail.cold+0x10a/0x149 [ 767.968996] should_failslab+0xd6/0x130 [ 767.972980] kmem_cache_alloc+0x28e/0x3c0 [ 767.977149] mmu_topup_memory_caches+0x83/0x300 [ 767.981827] kvm_mmu_load+0x1e/0xd00 [ 767.985554] ? kvm_apic_accept_events+0x16f/0x3f0 [ 767.990398] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 767.995165] ? kvm_get_time_scale+0x132/0x190 [ 767.999691] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 768.004620] ? trace_event_raw_event_kvm_mmio+0x270/0x270 [ 768.010167] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 768.015014] ? lock_acquire+0x170/0x3f0 [ 768.018989] ? lock_downgrade+0x740/0x740 [ 768.023139] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 768.027278] kvm_vcpu_ioctl+0x3de/0xc50 [ 768.031248] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 768.037129] ? proc_fail_nth_write+0x7b/0x180 [ 768.041647] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 768.046573] ? trace_hardirqs_on+0x10/0x10 [ 768.050809] ? fsnotify+0x974/0x11b0 [ 768.054518] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 768.059465] ? SyS_write+0x1b7/0x210 [ 768.063190] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 768.069086] do_vfs_ioctl+0x75a/0xff0 [ 768.072892] ? ioctl_preallocate+0x1a0/0x1a0 [ 768.077328] ? lock_downgrade+0x740/0x740 [ 768.081479] ? __fget+0x225/0x360 [ 768.084947] ? do_vfs_ioctl+0xff0/0xff0 [ 768.088923] ? security_file_ioctl+0x83/0xb0 [ 768.093365] SyS_ioctl+0x7f/0xb0 [ 768.096739] ? do_vfs_ioctl+0xff0/0xff0 [ 768.100980] do_syscall_64+0x1d5/0x640 [ 768.105135] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.110321] RIP: 0033:0x466459 [ 768.113590] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.121297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 10:57:20 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400801, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x6, 0x1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:20 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 768.128566] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 768.135922] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.143218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.150505] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:20 executing program 4 (fault-call:8 fault-nth:26): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 768.315438] FAULT_INJECTION: forcing a failure. [ 768.315438] name failslab, interval 1, probability 0, space 0, times 0 [ 768.329958] CPU: 1 PID: 7503 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 768.337779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.347147] Call Trace: [ 768.349741] dump_stack+0x1b2/0x281 [ 768.353398] should_fail.cold+0x10a/0x149 [ 768.357561] should_failslab+0xd6/0x130 [ 768.361542] kmem_cache_alloc+0x28e/0x3c0 [ 768.365698] mmu_topup_memory_caches+0x83/0x300 [ 768.370377] kvm_mmu_load+0x1e/0xd00 [ 768.374285] ? kvm_apic_accept_events+0x16f/0x3f0 [ 768.379156] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 768.383920] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 768.388860] ? _parse_integer+0xe4/0x130 [ 768.392958] ? vcpu_load+0x18/0x90 [ 768.396501] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 768.401985] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 768.406832] ? lock_acquire+0x170/0x3f0 [ 768.410817] ? lock_downgrade+0x740/0x740 [ 768.414969] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 768.419135] kvm_vcpu_ioctl+0x3de/0xc50 [ 768.423111] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 768.429019] ? proc_fail_nth_write+0x7b/0x180 [ 768.433512] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 768.438448] ? trace_hardirqs_on+0x10/0x10 [ 768.442685] ? fsnotify+0x974/0x11b0 [ 768.446408] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 768.451340] ? SyS_write+0x1b7/0x210 [ 768.455053] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 768.460936] do_vfs_ioctl+0x75a/0xff0 [ 768.464754] ? ioctl_preallocate+0x1a0/0x1a0 [ 768.469165] ? lock_downgrade+0x740/0x740 [ 768.473318] ? __fget+0x225/0x360 [ 768.476779] ? do_vfs_ioctl+0xff0/0xff0 [ 768.480866] ? security_file_ioctl+0x83/0xb0 [ 768.485399] SyS_ioctl+0x7f/0xb0 [ 768.488794] ? do_vfs_ioctl+0xff0/0xff0 [ 768.492778] do_syscall_64+0x1d5/0x640 [ 768.496707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 768.501900] RIP: 0033:0x466459 [ 768.505085] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.512798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 768.520087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 768.527386] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.534651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.542843] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 768.607423] FAT-fs (loop2): Unrecognized mount option "§xi¼ ‹>6ΰ +¢èÞµGz*溶;÷ãÕÕ7´1œò+'lY¤ü‡çõáh&bAÎkHíÛ@yèu¼°„H¢`ê"(¥•Þ§" or missing value [ 768.731678] print_req_error: I/O error, dev loop2, sector 0 10:57:22 executing program 4 (fault-call:8 fault-nth:27): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:22 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 770.407330] FAULT_INJECTION: forcing a failure. [ 770.407330] name failslab, interval 1, probability 0, space 0, times 0 [ 770.431946] CPU: 1 PID: 7559 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 770.439945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.449303] Call Trace: [ 770.451902] dump_stack+0x1b2/0x281 [ 770.455533] should_fail.cold+0x10a/0x149 [ 770.459708] should_failslab+0xd6/0x130 [ 770.463682] kmem_cache_alloc+0x28e/0x3c0 [ 770.467844] mmu_topup_memory_caches+0x83/0x300 [ 770.472515] kvm_mmu_load+0x1e/0xd00 [ 770.476291] ? kvm_apic_accept_events+0x16f/0x3f0 [ 770.481131] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 770.485966] ? kvm_get_time_scale+0x132/0x190 [ 770.490455] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 770.495905] ? trace_event_raw_event_kvm_mmio+0x270/0x270 [ 770.501460] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 770.506726] ? lock_acquire+0x170/0x3f0 [ 770.510691] ? lock_downgrade+0x740/0x740 [ 770.514918] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 770.519083] kvm_vcpu_ioctl+0x3de/0xc50 [ 770.523077] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 770.528954] ? proc_fail_nth_write+0x7b/0x180 [ 770.533444] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 770.538365] ? trace_hardirqs_on+0x10/0x10 [ 770.542711] ? fsnotify+0x974/0x11b0 [ 770.546415] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 770.551476] ? SyS_write+0x1b7/0x210 [ 770.555200] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 770.561098] do_vfs_ioctl+0x75a/0xff0 [ 770.564892] ? ioctl_preallocate+0x1a0/0x1a0 [ 770.569306] ? lock_downgrade+0x740/0x740 [ 770.573448] ? __fget+0x225/0x360 [ 770.576893] ? do_vfs_ioctl+0xff0/0xff0 [ 770.580860] ? security_file_ioctl+0x83/0xb0 [ 770.585287] SyS_ioctl+0x7f/0xb0 [ 770.588644] ? do_vfs_ioctl+0xff0/0xff0 [ 770.592613] do_syscall_64+0x1d5/0x640 [ 770.596933] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 770.602132] RIP: 0033:0x466459 10:57:22 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:22 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) ioctl$KVM_NMI(r4, 0xae9a) 10:57:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x220000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}}) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000600)="f5a07e5cca6342059cce5a79ac84181803c792fd07b4934fef4b7ead436dce5b92a58d3ce4ab1f8797c9b3ece13007bb2e26a7bc04d4846762fe7320bbf5afe2ad834ecf6af4b96510b385b13115d02d2a8e864fcc5774f221e29c218300f4edb9121fd46b3109ffb58e9e91fc65f5b81544b82b9f544a245f3fc4652643169b17604266a564") fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='overlay\x00', 0x100020, &(0x7f0000000500)={[{@nfs_export_off='nfs_export=off'}], [{@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_lt={'fowner<', r4}}, {@smackfshat={'smackfshat', 0x3d, 'squashfs\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat'}}, {@fowner_lt={'fowner<', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!\\)\')#G['}}]}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/btrfs-control\x00', 0xc70194c3673ffb27, 0x0) write$binfmt_aout(r5, &(0x7f0000000800)={{0xcc, 0x7, 0xe9, 0x159, 0x1a0, 0x0, 0x2f0, 0x6}, "b478b96ac07fba886c65123d4a81cacbea300c22e773d8a5ed7d79c26cd5", [[]]}, 0x13e) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file0\x00', 0xbfb6, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="624e840df947fc08b46a6fae561366c8de592b675b886a54933a0521f2534d9a363b2a4dcf1689e67d053b1225fb8470288a09b6eecfd544cdfb15129ed9369312be04f7d808b4374f789d006cff340b8411994f361a513165d7298da24fcfb11615f6f8952e7871d8c26f6bbe5c2d54b43ecaa8616dab9be31a2c344465858631a0e0593971d158b480e52b1205574a3ca0eb4ade5b16785347c08995c684a1aa4ec1cc2c3067d9acf89d5b", 0xac, 0x4}], 0x1000, &(0x7f0000000400)=ANY=[@ANYBLOB="297b2ce355a76a11a1be182ce3f62af514602a20334b6f036a11a1be182ce355a76a11a1be182c766661748a0500000000000073655f748e1707c052a00c0e529990aefff2f1da77a50887ae1fb0da81f755dc423f814d554024312642c76bfb3561b77a95c2ef6af4212b033cfef4fd47f862"]) mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f00000007c0)='overlay\x00', 0x98209a, &(0x7f0000000740)={[{@default_permissions='default_permissions'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file3'}}, {@xino_off='xino=off'}]}) 10:57:22 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) rt_sigqueueinfo(r0, 0x19, &(0x7f00000002c0)={0x3a, 0x9, 0x3}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4000000000000}, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) timer_create(0x5, &(0x7f0000000140)={0x0, 0x3b, 0x2, @thr={&(0x7f0000000480)="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", &(0x7f0000000100)="b100bb"}}, &(0x7f0000000180)) 10:57:22 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 770.605310] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.613202] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 770.620793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 770.628072] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.635336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.642595] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:22 executing program 4 (fault-call:8 fault-nth:28): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x6000, 0x0) openat(r4, &(0x7f0000000140)='./file0\x00', 0x200000, 0x1a1) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:22 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 770.807569] FAULT_INJECTION: forcing a failure. [ 770.807569] name failslab, interval 1, probability 0, space 0, times 0 10:57:22 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r1, 0x0, r2}, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, r0, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x70, 0x9, 0x8, 0x1b, 0x9, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x1, 0x1941}, 0x14005, 0x3, 0x2, 0x7, 0x81, 0x65}, r4, 0x4, 0xffffffffffffffff, 0x1) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x40000000, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r7, 0x0, 0x3, &(0x7f0000000100)='!#\x00'}, 0x30) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) [ 770.870682] CPU: 0 PID: 7597 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 770.878521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.887991] Call Trace: [ 770.890588] dump_stack+0x1b2/0x281 [ 770.894541] should_fail.cold+0x10a/0x149 [ 770.898794] should_failslab+0xd6/0x130 [ 770.902767] kmem_cache_alloc+0x28e/0x3c0 [ 770.906921] mmu_topup_memory_caches+0x83/0x300 [ 770.911604] kvm_mmu_load+0x1e/0xd00 [ 770.915315] ? kvm_apic_accept_events+0x16f/0x3f0 [ 770.920163] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 770.924921] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 770.929845] ? _parse_integer+0xe4/0x130 [ 770.933905] ? vcpu_load+0x18/0x90 [ 770.937455] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 770.942914] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 770.947774] ? lock_acquire+0x170/0x3f0 [ 770.951737] ? lock_downgrade+0x740/0x740 [ 770.955877] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 770.960025] kvm_vcpu_ioctl+0x3de/0xc50 [ 770.964001] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 770.969890] ? proc_fail_nth_write+0x7b/0x180 [ 770.974375] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 770.979488] ? trace_hardirqs_on+0x10/0x10 [ 770.983730] ? fsnotify+0x974/0x11b0 [ 770.987449] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 770.992395] ? SyS_write+0x1b7/0x210 [ 770.996106] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 771.001982] do_vfs_ioctl+0x75a/0xff0 [ 771.005781] ? ioctl_preallocate+0x1a0/0x1a0 [ 771.010188] ? lock_downgrade+0x740/0x740 [ 771.014328] ? __fget+0x225/0x360 [ 771.017789] ? do_vfs_ioctl+0xff0/0xff0 [ 771.021754] ? security_file_ioctl+0x83/0xb0 [ 771.026170] SyS_ioctl+0x7f/0xb0 [ 771.029535] ? do_vfs_ioctl+0xff0/0xff0 [ 771.033504] do_syscall_64+0x1d5/0x640 [ 771.037387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 771.042563] RIP: 0033:0x466459 [ 771.046014] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.053719] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 771.060977] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 771.068236] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.075502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.082761] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x4, &(0x7f0000000480)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17, 0x1}, {&(0x7f00000002c0)="4b92fc80913d400692de812f12d24cd612c2dcc6857098197bda55c9f9567f7bbf81d0cafded6bdaa0db4a837947d9f36ac75ec478b0e111e38dba0a4810d73d4af531f9f16121baac5e0f5945ed6ef67c398c4ce3e653eb7d40fd420c0b1055b3e05511c1e22eefb11037afe9dfb8d49f7bab92c3c93d452eba265fe26f4ffa23ac669349e6de92d03426183815b4b6c4f1b62038e436c95542e74f254596b4243aea3a6aa2f5320d115b209bef59565fe329d51458b2f950d3797441b9778fec59a02bb26bd93aaff9a7230f240241c228a1746cde2013614bf5021f4cab5ae5bc4583314d601004", 0xe9, 0x4}, {&(0x7f0000000140)="82c30b48083d8c546eadb5d7e4620f1718bb00f8b48c3c7be3958127ac28d67000e7aa5dc3f8e2a407d638d642001da05fc2a80dc89ac8c06317720d214b2ddcb460f28efc00619b7096014f848c1ed7f4da3163d5795f9ecae97928ed", 0x5d, 0x81}, {&(0x7f00000003c0)="62d3ff7b1ae8fdf49dd0ae3bf09fc56731053644fce32d2e824ccfa6633aa199c8e95726caf4251215417a2109369d99ac1ba57b276164fc1914e2f9ab9d478cbf96da24a499b888913b26705905fa281258e1182caf3185168d75dc3d38e059b6743ae821d302e0223e6e7c0088a6d2fc705168f86c550845ee662ccd58eddf02ca226d46c5d888de6d0242e229e0d1f15d5ee315c1ec4f58ce415894eb70aec7227cd9fd4d328a3ee4f4b34a2616576ed836", 0xb3, 0x1}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') open(&(0x7f00000000c0)='./file1\x00', 0x935b04f234c84181, 0x4) 10:57:23 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:23 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 771.219738] FAT-fs (loop2): bogus logical sector size 15278 [ 771.257827] FAT-fs (loop2): Can't find a valid FAT filesystem 10:57:23 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) ioprio_set$uid(0x0, r3, 0x2000) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:23 executing program 4 (fault-call:8 fault-nth:29): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:23 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x13) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="2e420f01d12e67649d8f68089ee4a30f01c3472a15a300000066ba4100ec470f78d80f00974488000048b80dd40000000000000f23d00f21f835000000050f23f8660f3a0928fd", 0x47}], 0x1, 0x18, &(0x7f00000001c0)=[@dstype0={0x6, 0x3}, @flags={0x3, 0x2000}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r7 = signalfd4(r0, &(0x7f00000002c0)={[0x7f]}, 0x8, 0x80800) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[0x1, 0x2, 0xc244, 0x1, 0x8001, 0x4, 0x9, 0x400, 0x2, 0x0, 0x0, 0xffff, 0x9331, 0x1, 0x5, 0x7], 0x2, 0x2000c0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 10:57:23 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3f, &(0x7f0000001a40)=""/175) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1, 0x100010, r2, 0x6315b000) preadv(r0, &(0x7f0000001980)=[{&(0x7f00000002c0)}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/1, 0x1}, {&(0x7f00000016c0)=""/187, 0xbb}, {&(0x7f0000001780)=""/27, 0x1b}, {&(0x7f00000017c0)=""/195, 0xc3}, {&(0x7f00000018c0)=""/14, 0xe}, {&(0x7f0000001900)=""/113, 0x71}], 0xa, 0x5, 0x1) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000480)="af5132e6f186fd672f487a060d1debf99c479283283d69c5e00e8f27d330d4ffa92a1cefd4edb7263fbe73d69e377d2c9fdf329170c185354c2653d3e17f5288e75bb4b8740995c9da341f8e7e6475574604bb3fbb65f61995856b81f144a1489afdfd20d1013bf1e3be144ad79b5c7d86199cf3c451cd90aea1f7574b2a5abde112e2cb87386a2fb0e3aa3484e24abc61953187489474ca18f2521722f193e9c9eb6508aa9011db8af291064ecd695429caf14b851dee3ef50cf2acb8c9ffbdd3422fc6776a215448359addb2d3091778d624668519480cbaa858ed498ea640a9322f5cc21fa0aa4f570d15c8fb1efb2c02453e897b01", 0xf7}], 0x1, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) preadv(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/104, 0x68}, {&(0x7f0000001bc0)=""/181, 0xb5}, {&(0x7f0000001c80)=""/133, 0x85}, {&(0x7f0000001d40)}], 0x4, 0x0, 0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:23 executing program 0: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r0, 0x9) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x54, 0x7, 0x2, 0x6, 0x7, 0x3c, 0xa955, 0x1f}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f00000002c0)={0x4, 0x8001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x4, 0x2, 0x1000, &(0x7f0000005000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c90004db904", 0x7}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 771.774166] FAULT_INJECTION: forcing a failure. [ 771.774166] name failslab, interval 1, probability 0, space 0, times 0 [ 771.830464] CPU: 1 PID: 7711 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 771.838324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.847689] Call Trace: [ 771.850288] dump_stack+0x1b2/0x281 [ 771.853950] should_fail.cold+0x10a/0x149 [ 771.858134] should_failslab+0xd6/0x130 [ 771.862104] kmem_cache_alloc+0x28e/0x3c0 [ 771.866252] mmu_topup_memory_caches+0x83/0x300 [ 771.870922] kvm_mmu_load+0x1e/0xd00 [ 771.874629] ? kvm_apic_accept_events+0x16f/0x3f0 [ 771.879563] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 771.884332] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 771.889668] ? _parse_integer+0xe4/0x130 [ 771.893829] ? vcpu_load+0x18/0x90 [ 771.897462] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 771.902951] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 771.907885] ? lock_acquire+0x170/0x3f0 [ 771.911871] ? lock_downgrade+0x740/0x740 [ 771.916018] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 771.921158] kvm_vcpu_ioctl+0x3de/0xc50 [ 771.925240] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 771.931127] ? proc_fail_nth_write+0x7b/0x180 [ 771.935617] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 771.940547] ? trace_hardirqs_on+0x10/0x10 [ 771.944800] ? fsnotify+0x974/0x11b0 [ 771.948542] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 771.953482] ? SyS_write+0x1b7/0x210 [ 771.957191] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 771.963073] do_vfs_ioctl+0x75a/0xff0 [ 771.966876] ? ioctl_preallocate+0x1a0/0x1a0 [ 771.971279] ? lock_downgrade+0x740/0x740 [ 771.975422] ? __fget+0x225/0x360 [ 771.978951] ? do_vfs_ioctl+0xff0/0xff0 [ 771.982917] ? security_file_ioctl+0x83/0xb0 [ 771.987315] SyS_ioctl+0x7f/0xb0 [ 771.990683] ? do_vfs_ioctl+0xff0/0xff0 [ 771.994649] do_syscall_64+0x1d5/0x640 [ 771.998983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 772.004176] RIP: 0033:0x466459 [ 772.007355] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.015068] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 772.022330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:24 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 772.029615] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.036893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.044351] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:24 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) writev(r1, &(0x7f0000001800)=[{&(0x7f0000000180)="e441dc7e15032c472c14807c160518daae332c6069895487172767e695b34d739a6fd876a1f01f54a5df7d283a719060551e", 0x32}, {&(0x7f00000002c0)="850c41640b35c08cac2317b2e48a59caac78dd87aefb74b2b75eb793572b93cb5f8ba67ccb3cd475fa820cec7cbf62c69502304dff92d7e22d690021629e24c871f179b6aeb7d8e0ed3afab8550628c86f30b8d00e8a666b344f7b68a3de7dfab0dc1e768005c3670316288a8f5745435787fbe8ae96e0e893fababcb417a64e4d5862075a237e2c247f0b0c83", 0x8d}, {&(0x7f0000000480)="92c59854b290194948b6898d92dd6d3a4f15d79573481900311df287add6d9268b7b671df3945bc609681d896b138b4244c3d8b849875664ac080693b21f9dfea2c7c2e49a0b7a3ddac3fa84ebfdfe9714a0e72446bda8ca058f39f457af37c4251dc64e18994f0d3ca4132cded7e66ef9d27991d1ac90e4d991e9181edc3c42bd660a3a0bff82470fd03d5a152815c309ed073fa72ba46b2bf8e374029be6b02d52c2656645cc4772eb1b299fc3cf6c0f774483a4d877e42c81b8f26caffb464a89be28cb1e5aa544686464d457a03769aea8a04005b5b2e45708af4fe966824a9c", 0xe2}, {&(0x7f00000001c0)="cd27a0d9444b02814da78c336d0732f208841fd7245ccc73305730f5a998fc01b904f853c510a3d30e0af2", 0x2b}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="a1938a46d2bbd57108924a8904b852060fe2c6a937243eaf6b89dfcab8fc24621e9ff27a3dd697648d4216bb51fe6ada7b781a56ae4d77748ccab22da4ef429889ff9d56481ade2bac4bf2999cbd803ffe23206992f72b9d63d6487673778fd426c0307b77f4e8e73622090a59735f83ec3bd59b32e37b546cf85c", 0x7b}, {&(0x7f0000001700)="ba39c69959998a7a792bde0e16038b7332c390c5a5247d2090931a2083bd27417913bc08d5a49c36611b77b1c963295b0b1b6d160d9b9b61d7eadf9e077db72af5cfd4faef03afde52c18af59233fe8a38ced54bab6d0102ec04af59e492e7fed1856653e954fceb965639bc0ca61ed22a32e004f6f8743053b1a20e8deb1a962dedf087be5efd7d79edd65cee560475169bfa348cc93676dfbd6f7d220e5435171fc12d765ecd33337e23e6d593bf6ab65a86c2e03afe54d4993808618bc938cdb1d3f0bc6733", 0xc7}], 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x44, 0x3ff, 0xfff, 0x80000000, 0x2, 0xffff, 0x3, 0x2020}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xc8501, 0x85) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:24 executing program 4 (fault-call:8 fault-nth:30): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:24 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:24 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x2, 0x15, 0x0, 0x9, 0x2420, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0xa, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 772.332526] FAULT_INJECTION: forcing a failure. [ 772.332526] name failslab, interval 1, probability 0, space 0, times 0 [ 772.374890] CPU: 1 PID: 7773 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 772.382925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.392379] Call Trace: [ 772.394977] dump_stack+0x1b2/0x281 [ 772.398628] should_fail.cold+0x10a/0x149 [ 772.402878] should_failslab+0xd6/0x130 [ 772.406858] kmem_cache_alloc+0x28e/0x3c0 [ 772.411016] mmu_topup_memory_caches+0x83/0x300 [ 772.415786] kvm_mmu_load+0x1e/0xd00 [ 772.419508] ? kvm_apic_accept_events+0x16f/0x3f0 [ 772.424364] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 772.429125] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 772.434081] ? _parse_integer+0xe4/0x130 [ 772.438174] ? vcpu_load+0x18/0x90 [ 772.441723] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 772.448282] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 772.453125] ? lock_acquire+0x170/0x3f0 [ 772.457098] ? lock_downgrade+0x740/0x740 [ 772.461250] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 772.465419] kvm_vcpu_ioctl+0x3de/0xc50 [ 772.469400] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 772.475343] ? proc_fail_nth_write+0x7b/0x180 [ 772.479837] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 772.484769] ? trace_hardirqs_on+0x10/0x10 [ 772.489020] ? fsnotify+0x974/0x11b0 [ 772.493085] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 772.498033] ? SyS_write+0x1b7/0x210 [ 772.501750] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 772.507635] do_vfs_ioctl+0x75a/0xff0 [ 772.511434] ? ioctl_preallocate+0x1a0/0x1a0 [ 772.515842] ? lock_downgrade+0x740/0x740 [ 772.519996] ? __fget+0x225/0x360 [ 772.523451] ? do_vfs_ioctl+0xff0/0xff0 [ 772.527425] ? security_file_ioctl+0x83/0xb0 [ 772.531929] SyS_ioctl+0x7f/0xb0 [ 772.535299] ? do_vfs_ioctl+0xff0/0xff0 [ 772.539280] do_syscall_64+0x1d5/0x640 [ 772.543197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 772.548387] RIP: 0033:0x466459 [ 772.551572] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.559280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 772.566569] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x1100008, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) sendto$ax25(r1, &(0x7f0000000140)="e67faa90a960866f723c39640a14f39dff69466cf4e97dea86277f0d74b3bd3ceb4e138f99df5b39ba42dac96dcbeeff1b0f49678472970ab2bab5c1ba1a0ec351e4172b2a78c7dbdba402699acdc0173fcb71d3fe48857edb8d3ea35fb9631b0e179a46a045333b0682047d082b93ff8d65e0d434d7fa993d8ce19dc81e885e7e", 0x81, 0x8040, 0x0, 0x0) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 772.573924] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.581231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.588501] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:24 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x6420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x1, 0x20, 0x2, 0x80000000, 0x100, 0x6, 0x1, 0x8000, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r5 = fork() sched_setattr(r5, &(0x7f0000000140)={0x38, 0x6, 0x10000020, 0xf4, 0x3f, 0x9, 0x1, 0x800005, 0xfffffffe, 0x6a1a}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000480)={{0xa, 0x6, 0x5, 0x9, 'syz0\x00', 0xc1}, 0x2, 0x20, 0x9e5, r4, 0x3, 0x9, 'syz0\x00', &(0x7f00000002c0)=['/dem\x00E\xf3\x9d\xdf\xd1\x1a\x01F\xf8\xb0t\xa3n|G\xf0l\xeaO\xbce/=\xda\t\xd5\xbf\xee\x82~d;\xb0\xf5\\\x86\xe7y\xc9O>\t3\xbc1\xafG\xb0\xdc\xc0\xb9&@\xd2(\xa8\xed\xf9\xc58\x0es\xb0L\x81\x03\xfc\xf3c\xdd\x17\x00\'\")A\xbbc\x19[L\xcc\x97\x03\xdbg\xff\xcc\xa5\xc1\xb9\xcb\x8dn\xe8h>\x13\x96\x85\x81A\x8d-q@\x82\xb0\x81\xb3S\xd0\xae\fa%\x9f\a\xde\xbf<\xed\xbe\x18t\xeaC\x89\xd5\x81\xfet\x9b\xeb\x03\xa3\x1dI\xce\xf5\xe9y\x05\x04\x0f1r#7\xff)\xc2%%', '\x05{)-\x00', ''], 0xa4, [], [0x2, 0x6, 0x0, 0xd3d]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 10:57:24 executing program 4 (fault-call:8 fault-nth:31): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file3\x00', 0x200, 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) r6 = syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x240480, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@fowner_lt={'fowner<', r4}}]}}) mmap(&(0x7f0000237000/0x4000)=nil, 0x4000, 0x1000006, 0x4000010, r6, 0x752c5000) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 772.761255] FAULT_INJECTION: forcing a failure. [ 772.761255] name failslab, interval 1, probability 0, space 0, times 0 [ 772.827769] CPU: 0 PID: 7804 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 772.835602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.845057] Call Trace: [ 772.847654] dump_stack+0x1b2/0x281 [ 772.851290] should_fail.cold+0x10a/0x149 [ 772.855450] should_failslab+0xd6/0x130 [ 772.859429] kmem_cache_alloc+0x28e/0x3c0 [ 772.863599] mmu_topup_memory_caches+0x83/0x300 [ 772.868277] kvm_mmu_load+0x1e/0xd00 [ 772.871991] ? kvm_apic_accept_events+0x16f/0x3f0 [ 772.876844] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 772.881602] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 772.886526] ? _parse_integer+0xe4/0x130 [ 772.890676] ? vcpu_load+0x18/0x90 [ 772.894220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 772.899683] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 772.905570] ? lock_acquire+0x170/0x3f0 [ 772.909542] ? lock_downgrade+0x740/0x740 [ 772.913695] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 772.917836] kvm_vcpu_ioctl+0x3de/0xc50 [ 772.921806] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 772.927687] ? proc_fail_nth_write+0x7b/0x180 [ 772.932191] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 772.937202] ? trace_hardirqs_on+0x10/0x10 [ 772.941448] ? fsnotify+0x974/0x11b0 [ 772.945153] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 772.950076] ? SyS_write+0x1b7/0x210 [ 772.953785] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 772.959662] do_vfs_ioctl+0x75a/0xff0 [ 772.963458] ? ioctl_preallocate+0x1a0/0x1a0 [ 772.967855] ? lock_downgrade+0x740/0x740 [ 772.972026] ? __fget+0x225/0x360 [ 772.975556] ? do_vfs_ioctl+0xff0/0xff0 [ 772.979523] ? security_file_ioctl+0x83/0xb0 [ 772.983934] SyS_ioctl+0x7f/0xb0 [ 772.987290] ? do_vfs_ioctl+0xff0/0xff0 [ 772.991285] do_syscall_64+0x1d5/0x640 [ 772.995696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 773.000887] RIP: 0033:0x466459 [ 773.004079] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.011802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 773.019082] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 773.026360] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.033624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.040887] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:25 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/150, 0x96}], 0x1, 0x0, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x4}, 0x2, 0x100000001, 0x5, 0x9, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 10:57:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)) close(r2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:25 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:25 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xbd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:25 executing program 4 (fault-call:8 fault-nth:32): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 773.229140] FAULT_INJECTION: forcing a failure. [ 773.229140] name failslab, interval 1, probability 0, space 0, times 0 [ 773.260266] CPU: 1 PID: 7835 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 773.268078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.277433] Call Trace: [ 773.280027] dump_stack+0x1b2/0x281 [ 773.283661] should_fail.cold+0x10a/0x149 [ 773.287852] should_failslab+0xd6/0x130 [ 773.291834] kmem_cache_alloc+0x28e/0x3c0 [ 773.296009] mmu_topup_memory_caches+0x83/0x300 [ 773.300676] kvm_mmu_load+0x1e/0xd00 [ 773.304379] ? kvm_apic_accept_events+0x16f/0x3f0 [ 773.309223] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 773.313980] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 773.318911] ? _parse_integer+0xe4/0x130 [ 773.322965] ? vcpu_load+0x18/0x90 [ 773.326496] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 773.332569] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 773.337417] ? lock_acquire+0x170/0x3f0 [ 773.341394] ? lock_downgrade+0x740/0x740 [ 773.345538] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 773.349674] kvm_vcpu_ioctl+0x3de/0xc50 [ 773.353643] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 773.359538] ? proc_fail_nth_write+0x7b/0x180 [ 773.364113] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 773.369122] ? trace_hardirqs_on+0x10/0x10 [ 773.373376] ? fsnotify+0x974/0x11b0 [ 773.377089] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 773.382012] ? SyS_write+0x1b7/0x210 [ 773.385718] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 773.391599] do_vfs_ioctl+0x75a/0xff0 [ 773.395411] ? ioctl_preallocate+0x1a0/0x1a0 [ 773.399812] ? lock_downgrade+0x740/0x740 [ 773.403953] ? __fget+0x225/0x360 [ 773.407393] ? do_vfs_ioctl+0xff0/0xff0 [ 773.412313] ? security_file_ioctl+0x83/0xb0 [ 773.416712] SyS_ioctl+0x7f/0xb0 [ 773.420070] ? do_vfs_ioctl+0xff0/0xff0 [ 773.424035] do_syscall_64+0x1d5/0x640 [ 773.427918] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 773.433096] RIP: 0033:0x466459 [ 773.436283] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.443989] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 773.451266] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 773.458551] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.465833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.473093] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f00000006c0)=""/224, 0xe0}], 0x6, 0xd9f, 0x2) mmap(&(0x7f000005a000/0x4000)=nil, 0x4000, 0x0, 0x50, r2, 0xd4870000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x34, 0x8, 0xc1, 0x4, 0x3, 0x0, 0xc18a, 0x7e, 0x40, 0x48, 0x7fff, 0x2, 0x38, 0x1, 0x81, 0x2, 0x6}, [{0x60000000, 0x5, 0x3, 0x80000000, 0x9a, 0x1, 0x0, 0x80}, {0x6474e551, 0x6, 0x3, 0x9, 0x3f, 0x8, 0xffff, 0x726e7e5c}], "df6a5f05cc9174016027a9bb3e9a7a0af72d7bcd6207ca953dc239cc737fe51e0f4abaf0a73bda3995cf62b280aa31a324b58c2bb8364022ec048bda262fa80e3a7b0ad22cd419f88581d7a320e5", [[], [], [], [], [], [], [], [], []]}, 0x9fe) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r2, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/244, 0xf4}], 0x3, 0xd9f, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x4, 0x7) 10:57:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000000c0)={0x18}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1, 0x5, 0x2093f592) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="7d82d1055d24a28663a114921e3903d403595e891a4c469df35fa449dc951284d3c9144941a497f2ef288b380509f6833b706595d321a7350c2787512d97c273a7fb076f422eb6850cc2027163b4f0d4da10520435b20b7a7f61819f98786c2a5eb2d81840aed9e918a9100ca6116f2c73a3971da719d64f64520fe931fd86c0fe595aebc2dfe03581e407", 0x8b, 0x3}, {&(0x7f0000000480)="b79f9a0c9982c4ffb5abb3abb88772b536d20be1d7c54f96d5e2f501f7a7be663d2908fb993dce4ad016c12e346f2eb2d0df057ffe42d437eece66655491ffa11a72f7619339d754aca4aa34eac166c07705bf53201d6ac87bde8ca26b9737c98ae0857b9eff7c", 0x67, 0x9f6}], 0x2000, &(0x7f0000000540)=ANY=[@ANYBLOB='mpol=bind:8,/,,size=pm9xUt,huge=within_size,nr_blocks=k9k\x009,fsname=},smackfsdef=vfat\x00,obj_type=]t,audit,pcr=00000000000000000056,smackfshat=vfat\x00,fowner>', @ANYRESDEC=r3, @ANYBLOB="509a"]) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:25 executing program 4 (fault-call:8 fault-nth:33): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 774.001918] FAULT_INJECTION: forcing a failure. [ 774.001918] name failslab, interval 1, probability 0, space 0, times 0 [ 774.068627] CPU: 0 PID: 7888 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 774.076585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.086075] Call Trace: [ 774.088771] dump_stack+0x1b2/0x281 [ 774.092407] should_fail.cold+0x10a/0x149 [ 774.096569] should_failslab+0xd6/0x130 [ 774.100611] kmem_cache_alloc+0x28e/0x3c0 [ 774.104784] mmu_topup_memory_caches+0x83/0x300 [ 774.109457] kvm_mmu_load+0x1e/0xd00 [ 774.113163] ? kvm_apic_accept_events+0x16f/0x3f0 [ 774.118011] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 774.122771] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 774.127717] ? _parse_integer+0xe4/0x130 [ 774.131805] ? vcpu_load+0x18/0x90 [ 774.135341] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 774.140791] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 774.145715] ? lock_acquire+0x170/0x3f0 [ 774.149700] ? lock_downgrade+0x740/0x740 [ 774.153856] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 774.158111] kvm_vcpu_ioctl+0x3de/0xc50 [ 774.162093] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 774.167979] ? proc_fail_nth_write+0x7b/0x180 [ 774.172475] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 774.177411] ? trace_hardirqs_on+0x10/0x10 [ 774.181653] ? fsnotify+0x974/0x11b0 [ 774.185371] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 774.190299] ? SyS_write+0x1b7/0x210 [ 774.194104] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 774.199992] do_vfs_ioctl+0x75a/0xff0 [ 774.203800] ? ioctl_preallocate+0x1a0/0x1a0 [ 774.208229] ? lock_downgrade+0x740/0x740 [ 774.212391] ? __fget+0x225/0x360 [ 774.215858] ? do_vfs_ioctl+0xff0/0xff0 [ 774.219831] ? security_file_ioctl+0x83/0xb0 [ 774.224252] SyS_ioctl+0x7f/0xb0 [ 774.227665] ? do_vfs_ioctl+0xff0/0xff0 [ 774.231639] do_syscall_64+0x1d5/0x640 [ 774.235533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 774.240764] RIP: 0033:0x466459 [ 774.243945] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.251662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 774.258954] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 774.266918] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.274185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.281538] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800003, 0x810, r1, 0xffffd000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:27 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:27 executing program 4 (fault-call:8 fault-nth:34): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:27 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x101f9, 0x3, 0x4000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:27 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x23c6cadbc2c830ee, 0x70, 0x8, 0x0, 0x80, 0x2, 0x0, 0x800000000, 0x50900, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x10, 0x3, 0x2, 0x8, 0xb45, 0x78, 0x3f}, r0, 0xf, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x199400, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 775.774951] FAULT_INJECTION: forcing a failure. [ 775.774951] name failslab, interval 1, probability 0, space 0, times 0 [ 775.855760] CPU: 1 PID: 7940 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 775.863597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.873083] Call Trace: [ 775.875686] dump_stack+0x1b2/0x281 [ 775.879323] should_fail.cold+0x10a/0x149 [ 775.883475] should_failslab+0xd6/0x130 [ 775.887454] kmem_cache_alloc+0x28e/0x3c0 [ 775.891614] mmu_topup_memory_caches+0x83/0x300 [ 775.896296] kvm_mmu_load+0x1e/0xd00 [ 775.900020] ? kvm_apic_accept_events+0x16f/0x3f0 [ 775.904902] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 775.909672] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 775.914610] ? _parse_integer+0xe4/0x130 [ 775.918680] ? vcpu_load+0x18/0x90 [ 775.935260] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 775.940902] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 775.945742] ? lock_acquire+0x170/0x3f0 [ 775.949730] ? lock_downgrade+0x740/0x740 [ 775.953881] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 775.958019] kvm_vcpu_ioctl+0x3de/0xc50 [ 775.961993] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 775.967874] ? proc_fail_nth_write+0x7b/0x180 [ 775.972362] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 775.977303] ? trace_hardirqs_on+0x10/0x10 [ 775.981533] ? fsnotify+0x974/0x11b0 [ 775.985241] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 775.990163] ? SyS_write+0x1b7/0x210 [ 775.993894] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 776.000129] do_vfs_ioctl+0x75a/0xff0 [ 776.003931] ? ioctl_preallocate+0x1a0/0x1a0 [ 776.008422] ? lock_downgrade+0x740/0x740 [ 776.012569] ? __fget+0x225/0x360 [ 776.016016] ? do_vfs_ioctl+0xff0/0xff0 [ 776.020021] ? security_file_ioctl+0x83/0xb0 [ 776.024630] SyS_ioctl+0x7f/0xb0 [ 776.028172] ? do_vfs_ioctl+0xff0/0xff0 [ 776.032149] do_syscall_64+0x1d5/0x640 [ 776.036052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 776.041246] RIP: 0033:0x466459 [ 776.044443] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x80000001, 0x2, 0x9}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 776.052149] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 776.059522] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 776.066797] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.075449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.082715] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x5) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x3f, 0x5, 0xfc, 0x9, 0x0, 0x100, 0x100001, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x46721, 0x100000001, 0x2, 0x2, 0x7, 0x0, 0x5}, r0, 0x9, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000340)=0x81) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:28 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xc0, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x72, 0xb, "bf9019be8d9c51c00688b8179d7fd03b02091682ff811a4c8eb6dbb3e8c0adc77db5873704edd3cdf0a05398b9a201e7cae917e0f5f9113abc0502da013ffd0b12f2503d3975fcf8d7ecb24983402be445569bb510fceffde5be195bf3038ab4d4923409eb17da871c39fd08531a"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x20}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x81}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xfff7}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x8}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r5 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x8, 0x4040) write$input_event(r5, &(0x7f0000000380)={{0x77359400}, 0x3, 0x2, 0x8}, 0x18) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:28 executing program 4 (fault-call:8 fault-nth:35): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:28 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x8a54b81f5a3579ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, r4, 0x200004, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 776.518145] FAULT_INJECTION: forcing a failure. [ 776.518145] name failslab, interval 1, probability 0, space 0, times 0 [ 776.560168] CPU: 0 PID: 8031 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 776.568002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.577537] Call Trace: [ 776.580134] dump_stack+0x1b2/0x281 [ 776.583767] should_fail.cold+0x10a/0x149 [ 776.587923] should_failslab+0xd6/0x130 [ 776.591928] kmem_cache_alloc+0x28e/0x3c0 [ 776.596091] mmu_topup_memory_caches+0x83/0x300 [ 776.600771] kvm_mmu_load+0x1e/0xd00 [ 776.604479] ? kvm_apic_accept_events+0x16f/0x3f0 [ 776.609313] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 776.614090] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 776.619022] ? _parse_integer+0xe4/0x130 [ 776.623082] ? vcpu_load+0x18/0x90 [ 776.626620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 776.632117] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 776.636993] ? lock_acquire+0x170/0x3f0 [ 776.640961] ? lock_downgrade+0x740/0x740 [ 776.645111] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 776.649249] kvm_vcpu_ioctl+0x3de/0xc50 [ 776.653237] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 776.659116] ? proc_fail_nth_write+0x7b/0x180 [ 776.663643] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 776.668577] ? trace_hardirqs_on+0x10/0x10 [ 776.672807] ? fsnotify+0x974/0x11b0 [ 776.676513] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 776.681459] ? SyS_write+0x1b7/0x210 [ 776.685182] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 776.691058] do_vfs_ioctl+0x75a/0xff0 [ 776.694858] ? ioctl_preallocate+0x1a0/0x1a0 [ 776.699256] ? lock_downgrade+0x740/0x740 [ 776.703435] ? __fget+0x225/0x360 [ 776.706884] ? do_vfs_ioctl+0xff0/0xff0 [ 776.710849] ? security_file_ioctl+0x83/0xb0 [ 776.715283] SyS_ioctl+0x7f/0xb0 [ 776.718661] ? do_vfs_ioctl+0xff0/0xff0 [ 776.722632] do_syscall_64+0x1d5/0x640 [ 776.726670] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 776.731857] RIP: 0033:0x466459 [ 776.735055] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.742767] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 776.750044] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 776.757350] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.764626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.771929] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) statfs(&(0x7f00000000c0)='./file3\x00', &(0x7f0000000140)=""/171) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x20000, 0x0) preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/244, 0xf4}], 0x2, 0x0, 0x101) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:28 executing program 4 (fault-call:8 fault-nth:36): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 776.914635] FAULT_INJECTION: forcing a failure. [ 776.914635] name failslab, interval 1, probability 0, space 0, times 0 [ 776.928625] CPU: 0 PID: 8060 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 776.936465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.945823] Call Trace: [ 776.948426] dump_stack+0x1b2/0x281 [ 776.952062] should_fail.cold+0x10a/0x149 [ 776.956220] should_failslab+0xd6/0x130 [ 776.960202] kmem_cache_alloc+0x28e/0x3c0 10:57:28 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 776.964361] mmu_topup_memory_caches+0x83/0x300 [ 776.969058] kvm_mmu_load+0x1e/0xd00 [ 776.972851] ? kvm_apic_accept_events+0x16f/0x3f0 [ 776.977728] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 776.982496] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 776.987436] ? _parse_integer+0xe4/0x130 [ 776.991505] ? vcpu_load+0x18/0x90 [ 776.995060] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 777.000517] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 777.005462] ? lock_acquire+0x170/0x3f0 [ 777.009440] ? lock_downgrade+0x740/0x740 [ 777.013599] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 777.017736] kvm_vcpu_ioctl+0x3de/0xc50 [ 777.021704] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.027578] ? proc_fail_nth_write+0x7b/0x180 [ 777.032511] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.037431] ? trace_hardirqs_on+0x10/0x10 [ 777.041674] ? fsnotify+0x974/0x11b0 [ 777.045390] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.050311] ? SyS_write+0x1b7/0x210 [ 777.054018] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.059917] do_vfs_ioctl+0x75a/0xff0 [ 777.063716] ? ioctl_preallocate+0x1a0/0x1a0 [ 777.068221] ? lock_downgrade+0x740/0x740 [ 777.072377] ? __fget+0x225/0x360 [ 777.075839] ? do_vfs_ioctl+0xff0/0xff0 [ 777.079811] ? security_file_ioctl+0x83/0xb0 [ 777.084213] SyS_ioctl+0x7f/0xb0 [ 777.087568] ? do_vfs_ioctl+0xff0/0xff0 [ 777.091535] do_syscall_64+0x1d5/0x640 [ 777.095423] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 777.101386] RIP: 0033:0x466459 [ 777.104566] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:29 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3b1125dee50edd72004e9b221fb7367b10b7a41f8c190e1f126453fea6d03e550996c6180aae418790b2a1a233da3e7a073460b3ff62130cf6b3b14dc9151488475f1ea72ceef7ad914a216140804b1d702de0399d8084f8e22aa2adbd42090c711917ed647f41256164528e7513246b709a5fd199820c5bd70bbfd70d32f134a0023ae0627b9950d274ef315d5a1b9bb06d8809332aacb98e0142c4154b4e514999b055857463cae2445b51644f70723f5e84e06b037f5062609fd9e72f", @ANYRES16=0x0, @ANYBLOB="ff0429bd7000fddbdf25010000000c00080004000000000000000c00060003000000000000000c000400c767000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1004c890}, 0x4000050) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '..^-(\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x2000000d) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r7) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r8, &(0x7f0000000200)='./file3\x00') 10:57:29 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) [ 777.112268] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 777.119540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 777.126802] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.134073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.141331] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:29 executing program 4 (fault-call:8 fault-nth:37): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:29 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 777.333180] FAULT_INJECTION: forcing a failure. [ 777.333180] name failslab, interval 1, probability 0, space 0, times 0 [ 777.350538] CPU: 0 PID: 8088 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 777.358361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.367724] Call Trace: [ 777.370328] dump_stack+0x1b2/0x281 [ 777.373962] should_fail.cold+0x10a/0x149 [ 777.378138] should_failslab+0xd6/0x130 [ 777.382125] kmem_cache_alloc+0x28e/0x3c0 [ 777.386284] mmu_topup_memory_caches+0x83/0x300 [ 777.390960] kvm_mmu_load+0x1e/0xd00 [ 777.394679] ? kvm_apic_accept_events+0x16f/0x3f0 [ 777.399526] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 777.404379] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 777.409321] ? _parse_integer+0xe4/0x130 [ 777.413382] ? vcpu_load+0x18/0x90 [ 777.416932] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 777.422746] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 777.427594] ? lock_acquire+0x170/0x3f0 [ 777.431572] ? lock_downgrade+0x740/0x740 [ 777.435725] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 777.439875] kvm_vcpu_ioctl+0x3de/0xc50 [ 777.443856] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.449749] ? proc_fail_nth_write+0x7b/0x180 [ 777.454256] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.459189] ? trace_hardirqs_on+0x10/0x10 [ 777.463435] ? fsnotify+0x974/0x11b0 [ 777.467157] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.472091] ? SyS_write+0x1b7/0x210 [ 777.475818] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.481707] do_vfs_ioctl+0x75a/0xff0 [ 777.485518] ? ioctl_preallocate+0x1a0/0x1a0 [ 777.490045] ? lock_downgrade+0x740/0x740 [ 777.494202] ? __fget+0x225/0x360 [ 777.497658] ? do_vfs_ioctl+0xff0/0xff0 [ 777.501637] ? security_file_ioctl+0x83/0xb0 [ 777.506051] SyS_ioctl+0x7f/0xb0 [ 777.509429] ? do_vfs_ioctl+0xff0/0xff0 [ 777.513406] do_syscall_64+0x1d5/0x640 [ 777.517399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 777.522720] RIP: 0033:0x466459 [ 777.525993] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.533900] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 777.541526] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 777.548803] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.556094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.563724] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:29 executing program 4 (fault-call:8 fault-nth:38): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 777.714690] FAULT_INJECTION: forcing a failure. [ 777.714690] name failslab, interval 1, probability 0, space 0, times 0 [ 777.749931] CPU: 1 PID: 8113 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 777.757778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.767411] Call Trace: [ 777.770015] dump_stack+0x1b2/0x281 [ 777.773656] should_fail.cold+0x10a/0x149 [ 777.777846] should_failslab+0xd6/0x130 [ 777.782445] kmem_cache_alloc+0x28e/0x3c0 [ 777.787918] mmu_topup_memory_caches+0x83/0x300 [ 777.792603] kvm_mmu_load+0x1e/0xd00 [ 777.796328] ? kvm_apic_accept_events+0x16f/0x3f0 [ 777.801193] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 777.805977] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 777.811005] ? _parse_integer+0xe4/0x130 [ 777.815081] ? vcpu_load+0x18/0x90 [ 777.818666] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 777.824137] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 777.829009] ? lock_acquire+0x170/0x3f0 [ 777.832990] ? lock_downgrade+0x740/0x740 [ 777.837147] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 777.841387] kvm_vcpu_ioctl+0x3de/0xc50 [ 777.845372] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.851810] ? proc_fail_nth_write+0x7b/0x180 [ 777.856310] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.861535] ? trace_hardirqs_on+0x10/0x10 [ 777.865868] ? fsnotify+0x974/0x11b0 [ 777.869588] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 777.874537] ? SyS_write+0x1b7/0x210 [ 777.878626] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 777.884518] do_vfs_ioctl+0x75a/0xff0 [ 777.888327] ? ioctl_preallocate+0x1a0/0x1a0 [ 777.892854] ? lock_downgrade+0x740/0x740 [ 777.897184] ? __fget+0x225/0x360 [ 777.900688] ? do_vfs_ioctl+0xff0/0xff0 [ 777.904663] ? security_file_ioctl+0x83/0xb0 [ 777.909072] SyS_ioctl+0x7f/0xb0 [ 777.912439] ? do_vfs_ioctl+0xff0/0xff0 [ 777.916430] do_syscall_64+0x1d5/0x640 [ 777.920346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 777.925537] RIP: 0033:0x466459 [ 777.928724] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.936471] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 777.943762] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 777.951058] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.958349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:57:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 777.965619] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:30 executing program 4 (fault-call:8 fault-nth:39): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 778.098087] FAULT_INJECTION: forcing a failure. [ 778.098087] name failslab, interval 1, probability 0, space 0, times 0 [ 778.112471] CPU: 1 PID: 8131 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 778.120289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.129681] Call Trace: [ 778.132292] dump_stack+0x1b2/0x281 [ 778.136112] should_fail.cold+0x10a/0x149 [ 778.140292] should_failslab+0xd6/0x130 [ 778.144272] kmem_cache_alloc+0x28e/0x3c0 [ 778.148430] mmu_topup_memory_caches+0x83/0x300 [ 778.153124] kvm_mmu_load+0x1e/0xd00 [ 778.156841] ? kvm_apic_accept_events+0x16f/0x3f0 [ 778.161683] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 778.166451] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 778.171729] ? _parse_integer+0xe4/0x130 [ 778.175794] ? vcpu_load+0x18/0x90 [ 778.179335] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 778.184795] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 778.189639] ? lock_acquire+0x170/0x3f0 [ 778.193613] ? lock_downgrade+0x740/0x740 [ 778.197766] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 778.201908] kvm_vcpu_ioctl+0x3de/0xc50 [ 778.205880] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 778.211768] ? proc_fail_nth_write+0x7b/0x180 [ 778.216263] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 778.221193] ? trace_hardirqs_on+0x10/0x10 [ 778.225442] ? fsnotify+0x974/0x11b0 [ 778.229155] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 778.234088] ? SyS_write+0x1b7/0x210 [ 778.237807] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 778.243704] do_vfs_ioctl+0x75a/0xff0 [ 778.247519] ? ioctl_preallocate+0x1a0/0x1a0 [ 778.251933] ? lock_downgrade+0x740/0x740 [ 778.256116] ? __fget+0x225/0x360 [ 778.259578] ? do_vfs_ioctl+0xff0/0xff0 [ 778.264096] ? security_file_ioctl+0x83/0xb0 [ 778.269037] SyS_ioctl+0x7f/0xb0 [ 778.272415] ? do_vfs_ioctl+0xff0/0xff0 [ 778.276396] do_syscall_64+0x1d5/0x640 [ 778.280324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 778.285599] RIP: 0033:0x466459 [ 778.288786] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.296520] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 778.303796] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 778.311172] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.318447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 778.325722] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:31 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x240000, 0x0) finit_module(r0, &(0x7f0000000180)='$\x00', 0x1) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000001c0)=0x23) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:31 executing program 4 (fault-call:8 fault-nth:40): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:31 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000480)={{r2}, "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"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x5, 0x3, 0x20, 0x5, 0x0, 0x4, 0x81050, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4422, 0x2, @perf_bp={&(0x7f0000000100)}, 0x4000, 0x7, 0x423, 0x4, 0x81, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r5, 0xa) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:31 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/nfsfs\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\\+{$(,:-{&{\x00') sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180)}, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x9b, 0x3f, 0x0, 0x20, 0x0, 0x9, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3abb, 0x1, @perf_bp={&(0x7f0000000480), 0x2}, 0x20, 0x20, 0x1, 0x4, 0x2, 0x7, 0x800}, r4, 0x3, 0xffffffffffffffff, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:31 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = getpid() sched_rr_get_interval(0x0, &(0x7f0000000300)) sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x24080) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="67d9fa26360f0013b8a5008ec826656564660f3881b10700660f38817a000f01cb0f403f660ffa48ca6526f30f38f60836640f579a620e", 0x37}], 0x1, 0x40, &(0x7f00000001c0)=[@dstype3={0x7, 0xf}, @cr0={0x0, 0x60000020}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) [ 779.647023] FAULT_INJECTION: forcing a failure. [ 779.647023] name fail_page_alloc, interval 1, probability 0, space 0, times 1 10:57:31 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x7, 0x10001, 0xfff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x58, 0x0, 0x7f, "e55ad0f99ec6f28395b615cc2a768fdb", "8e837971e2d88c24820db70499204ced77fad78942b97bcfc82cd84da1df66d8a674c4785347a7361316ae67142fe975cc83533eb06f0c946c4b7c2a3b1ad42414cd9a"}, 0x58, 0x0) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 779.725206] CPU: 1 PID: 8172 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 779.733043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.742413] Call Trace: [ 779.745028] dump_stack+0x1b2/0x281 [ 779.748657] should_fail.cold+0x10a/0x149 [ 779.752812] __alloc_pages_nodemask+0x22c/0x2720 [ 779.757650] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 779.761815] ? SyS_ioctl+0x7f/0xb0 [ 779.765364] ? do_syscall_64+0x1d5/0x640 [ 779.769450] ? ima_match_policy+0x85a/0x10e0 [ 779.773861] ? trace_hardirqs_on+0x10/0x10 [ 779.778101] ? __lock_acquire+0x5fc/0x3f20 [ 779.782334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 779.787177] ? fs_reclaim_release+0xd0/0x110 [ 779.791590] ? mmu_topup_memory_caches+0x83/0x300 [ 779.796436] alloc_pages_current+0x155/0x260 [ 779.800897] ? kmem_cache_alloc+0x35f/0x3c0 [ 779.805216] __get_free_pages+0xb/0x40 [ 779.809112] mmu_topup_memory_caches+0x187/0x300 [ 779.813874] kvm_mmu_load+0x1e/0xd00 [ 779.817587] ? kvm_apic_accept_events+0x16f/0x3f0 [ 779.822426] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 779.827186] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 779.832122] ? _parse_integer+0xe4/0x130 [ 779.836186] ? vcpu_load+0x18/0x90 [ 779.839722] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 779.845174] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 779.850038] ? lock_acquire+0x170/0x3f0 [ 779.854011] ? lock_downgrade+0x740/0x740 [ 779.858158] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 779.862299] kvm_vcpu_ioctl+0x3de/0xc50 [ 779.866281] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 779.872164] ? proc_fail_nth_write+0x7b/0x180 [ 779.876662] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 779.881592] ? trace_hardirqs_on+0x10/0x10 [ 779.885843] ? fsnotify+0x974/0x11b0 [ 779.889554] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 779.894575] ? SyS_write+0x1b7/0x210 [ 779.898294] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 779.904182] do_vfs_ioctl+0x75a/0xff0 [ 779.907984] ? ioctl_preallocate+0x1a0/0x1a0 [ 779.912436] ? lock_downgrade+0x740/0x740 [ 779.916587] ? __fget+0x225/0x360 [ 779.920035] ? do_vfs_ioctl+0xff0/0xff0 [ 779.924008] ? security_file_ioctl+0x83/0xb0 [ 779.928422] SyS_ioctl+0x7f/0xb0 [ 779.931791] ? do_vfs_ioctl+0xff0/0xff0 [ 779.935965] do_syscall_64+0x1d5/0x640 [ 779.939857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 779.945132] RIP: 0033:0x466459 [ 779.948352] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.956068] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 779.963344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 10:57:31 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0x9, 0x1}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 779.970616] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.977912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.985277] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:32 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:32 executing program 4 (fault-call:8 fault-nth:41): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:32 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2438, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x2, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = dup(r2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f00000000c0)=[0x1, 0x1], 0x2) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 780.229544] FAULT_INJECTION: forcing a failure. [ 780.229544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 780.245476] CPU: 1 PID: 8239 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 780.253311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.262757] Call Trace: [ 780.265376] dump_stack+0x1b2/0x281 [ 780.269015] should_fail.cold+0x10a/0x149 [ 780.273194] __alloc_pages_nodemask+0x22c/0x2720 [ 780.277965] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 780.282130] ? SyS_ioctl+0x7f/0xb0 [ 780.285666] ? do_syscall_64+0x1d5/0x640 [ 780.289729] ? ima_match_policy+0x85a/0x10e0 [ 780.294137] ? trace_hardirqs_on+0x10/0x10 [ 780.298376] ? __lock_acquire+0x5fc/0x3f20 [ 780.302608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 780.307455] ? fs_reclaim_release+0xd0/0x110 [ 780.311867] ? mmu_topup_memory_caches+0x83/0x300 [ 780.316713] alloc_pages_current+0x155/0x260 [ 780.321119] ? kmem_cache_alloc+0x35f/0x3c0 [ 780.325466] __get_free_pages+0xb/0x40 [ 780.329362] mmu_topup_memory_caches+0x187/0x300 [ 780.334127] kvm_mmu_load+0x1e/0xd00 [ 780.337841] ? kvm_apic_accept_events+0x16f/0x3f0 [ 780.342681] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 780.347443] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 780.352398] ? _parse_integer+0xe4/0x130 [ 780.356490] ? vcpu_load+0x18/0x90 [ 780.360030] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 780.365495] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 780.370372] ? lock_acquire+0x170/0x3f0 [ 780.374351] ? lock_downgrade+0x740/0x740 [ 780.378502] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 780.382648] kvm_vcpu_ioctl+0x3de/0xc50 [ 780.386648] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 780.392549] ? proc_fail_nth_write+0x7b/0x180 [ 780.397079] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 780.402012] ? trace_hardirqs_on+0x10/0x10 [ 780.406268] ? fsnotify+0x974/0x11b0 [ 780.409994] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 780.414924] ? SyS_write+0x1b7/0x210 [ 780.418645] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 780.424537] do_vfs_ioctl+0x75a/0xff0 10:57:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f00000000c0)='./file3\x00', 0x800, 0x193) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setpipe(r4, 0x407, 0x2) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffff673, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d3b48c7706552fab28b81a38e0932285a490219d2be15a2a08212d58e1f71e557c6dc950e0aaa646e4fdb5d31cc6128effe611cfdd1ead5bfd1d6fd6af6d29dfafd8c3c554de59b5d60a4a4ef07a89f75eb4d1bb0becc6c32c25cd797983e81c9dc2a9474736249f1b8c04bbedbc7757ee0c144d03c54a02620d125c35072807c4085ced03e13e533118cec282cfe1c167d352d1554d", 0x96, 0x9}], 0x20, &(0x7f0000000400)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r5}}, {@huge_within_size='huge=within_size'}, {@huge_within_size='huge=within_size'}, {@mode={'mode', 0x3d, 0x8}}, {@huge_advise='huge=advise'}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x37, 0x30, 0x6d]}}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 780.428354] ? ioctl_preallocate+0x1a0/0x1a0 [ 780.432868] ? lock_downgrade+0x740/0x740 [ 780.437015] ? __fget+0x225/0x360 [ 780.440481] ? do_vfs_ioctl+0xff0/0xff0 [ 780.444457] ? security_file_ioctl+0x83/0xb0 [ 780.448866] SyS_ioctl+0x7f/0xb0 [ 780.452252] ? do_vfs_ioctl+0xff0/0xff0 [ 780.456228] do_syscall_64+0x1d5/0x640 [ 780.460120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 780.465334] RIP: 0033:0x466459 [ 780.468530] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:32 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x9, 0x8000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="00ebffff6c6178"]) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, [], [{0xaf, 0x0, 0x7fff, 0x0, 0xccca, 0x7ebe}, {0xad, 0x6, 0x7, 0x5, 0x5, 0x7}], [[], [], [], [], [], [], [], []]}) [ 780.476252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 780.483513] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 780.490970] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.498235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.505501] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:32 executing program 4 (fault-call:8 fault-nth:42): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 780.752548] FAULT_INJECTION: forcing a failure. [ 780.752548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 780.764545] CPU: 0 PID: 8282 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 780.772352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.781731] Call Trace: [ 780.784442] dump_stack+0x1b2/0x281 [ 780.788079] should_fail.cold+0x10a/0x149 [ 780.792233] __alloc_pages_nodemask+0x22c/0x2720 [ 780.796991] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 780.801144] ? SyS_ioctl+0x7f/0xb0 [ 780.804691] ? do_syscall_64+0x1d5/0x640 [ 780.808768] ? ima_match_policy+0x85a/0x10e0 [ 780.813964] ? trace_hardirqs_on+0x10/0x10 [ 780.818206] ? __lock_acquire+0x5fc/0x3f20 [ 780.822445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 780.827310] ? cache_alloc_refill+0x1da/0x350 [ 780.831809] ? fs_reclaim_release+0xd0/0x110 [ 780.836240] ? mmu_topup_memory_caches+0x83/0x300 [ 780.841067] alloc_pages_current+0x155/0x260 [ 780.845459] ? kmem_cache_alloc+0x35f/0x3c0 [ 780.849766] __get_free_pages+0xb/0x40 [ 780.853641] mmu_topup_memory_caches+0x187/0x300 [ 780.858422] kvm_mmu_load+0x1e/0xd00 [ 780.862134] ? kvm_apic_accept_events+0x16f/0x3f0 [ 780.867090] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 780.871843] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 780.876882] ? _parse_integer+0xe4/0x130 [ 780.880927] ? vcpu_load+0x18/0x90 [ 780.884473] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 780.889911] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 780.894759] ? lock_acquire+0x170/0x3f0 [ 780.898724] ? lock_downgrade+0x740/0x740 [ 780.902861] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 780.906992] kvm_vcpu_ioctl+0x3de/0xc50 [ 780.911138] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 780.917006] ? proc_fail_nth_write+0x7b/0x180 [ 780.921593] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 780.926510] ? trace_hardirqs_on+0x10/0x10 [ 780.930727] ? fsnotify+0x974/0x11b0 [ 780.934527] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 780.939463] ? SyS_write+0x1b7/0x210 [ 780.943177] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 780.949057] do_vfs_ioctl+0x75a/0xff0 [ 780.952847] ? ioctl_preallocate+0x1a0/0x1a0 [ 780.957236] ? lock_downgrade+0x740/0x740 [ 780.961383] ? __fget+0x225/0x360 [ 780.964818] ? do_vfs_ioctl+0xff0/0xff0 [ 780.968791] ? security_file_ioctl+0x83/0xb0 [ 780.973188] SyS_ioctl+0x7f/0xb0 [ 780.976538] ? do_vfs_ioctl+0xff0/0xff0 [ 780.980511] do_syscall_64+0x1d5/0x640 [ 780.984399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 780.989925] RIP: 0033:0x466459 [ 780.993102] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 781.000786] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 781.008075] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 781.015328] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.022575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.029848] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:34 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x10000]}, 0x8, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x1f, 0x3, 0x83, 0x10, 0x0, 0x1, 0x80, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbc4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8070, 0x3, 0x9, 0x7, 0x5, 0x3, 0xedad}, r0, 0x5, r2, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0xe0, 0xfe, 0x3f, 0x9, 0x0, 0xfffffffffffffffe, 0x80, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000300), 0xb}, 0x1000, 0xffffffff, 0x1f, 0x8, 0x82, 0x80, 0x7}, r0, 0x1, r2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000040)={&(0x7f000000b000/0x2000)=nil, 0x2000}) 10:57:34 executing program 4 (fault-call:8 fault-nth:43): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:34 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000000d00)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, [], 0xe}, 0xfffffff8}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="7f9291e4b17f", 0x6}, {&(0x7f00000002c0)="d1d8f34b210533802d67ff27751571a9b455adf9cb943ca9229f7e74b380bf65453d502f8e37a58e99f77b286eb04039f905a87e4e498f59323863e5485ce7a9c02306e8b4f00b56b9c435d84f49130aebaf89e4d7abfe4af4a39e5906794c0db9ec3f0ac8cc1e83289bc4b0b32eb86c5a2acb65bb04115d21fdaeaf5153c7773c4cbc575dbb3b038848d51814fa3b9c5991729994d39f4ffd809bec5b1c5dd0ddf7b8bb4691d717d5a3b546e94fb22c57a620", 0xb3}, {&(0x7f0000000380)="56b68c0fae89f1afebea277ec2d19795fe7af09b3962237576996f2d1362a1125406bddc847614069d33bf46de6a41e349cd54b954f827a10d95e8eb0dc0ee54f608bc3a988c2b33e79e31e9d2e4d6c93bd6cae6ca0222479870adcf69eecbe71823e0f9d7", 0x65}, {&(0x7f0000000400)="a7b5d2668ab024851933cfdbb082ff85f968f2924eb952237c619666d2dc4925963488178a2eea985df85f2424a960085151776b1457163920ce5e4990491ef7508365368a1bcbc21ee63eb89f8f58ad0c5fb20e1660ebecd1ffcab041f33bf40b417b3ef6eedbbfa1a0b38ec7536a857422b68fa0bd865cf1fd3965123f066eb07c0325171aa35438dd60dcb406cee95f737b531b698c64f2373e4c8ef05512e90e482a3821992c06f40b2fbe84dd5a1b6bcd5597781851a54d8abc0de189fafcd0b5490fcf7953318d35d0550447cf68fb8a4ced5ad49cf7d841d2d2cbfac3b03ae7378e2d5b10f6368ed48f3936767f", 0xf1}, {&(0x7f0000000500)="9a8570a268b3df0d30f2a69dd78fae80df20c638cb6385228d1e20936666e2201d79f2aa1841c1b808e8149d74dea35d9178dae559b3d80121eca16a771ee05df43381f018ef8944d6a30e29bc222a6ab7355c4aba4d365d71065e8fa105d8123056b0076c4085bd2c53101812529c023ea498917b6bf745d8afa47c2e044624bd44386b19d3d816740faf512f3546bc7754ad92b2abc26e3d61881a", 0x9c}, {&(0x7f00000005c0)="8d09efc5a19e2d80ff35ba801bf71960ba5ee436aae81bd303fd421f0d7f43381490f326ab8a27f2bade10d7", 0x2c}, {&(0x7f0000000600)="b78aadf53453542e955fd521dcc597556128e3a3a319a22e0ed0bcb121a49f46f3430834ebabb4cc7cf719bb1bacf007e108560593b1c682463d5e80e82160a69f576e311b6f1c584e187054671d3746bcc1e280331a3e89", 0x58}, {&(0x7f0000000680)="a125bdc626adc08a5e5d3c786cfa16b12f8a21335dc9b11e80cdd1ee15ee718d4c208909a808b241cbfdbcc7e3d65346f8eba79a69f29359821c756e9a460d7d4ff70545736b62c354dbc93b3b1c35402bd80a8004e4ebbb90c815f211d2c92122d43bb1b71cd153a7dc966378f8fdbfd41800a2a6a05a138e8ece6111f452b85c58d99eded2b6a8d4b2e488dde5208e8e688d7aa927771b49", 0x99}, {&(0x7f0000000740)="b2cb14f738372b4efa822f026bb3c74b3db6b90d48954bc888e75848335125508e93a79edc8f8c429b7a794286f7dcf6030bc3d68a9b80181b990eac9499dee3f2190be86ecd04ba3932192aef3299a6d1b104c13cdb048c2efc37cf8782c0bda6155cfafa4f64eded90cc915cd364a87359960ee0708db951729a1b5ffb5415b93fcce2abf33a5c1b9458df7a90c3077cea7daac4c39fab9e45a238b26d656fa6f00646ed96c33649e9", 0xaa}, {&(0x7f0000000800)="bbe8d9f3bdd32c9de25e6b279389dcb6fff30bfcf4251e54c94de824627663", 0x1f}], 0xa, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], 0x14d0}}, {{&(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x2, {0xa, 0x4e23, 0x74, @ipv4={[], [], @multicast2}, 0x6}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)="acf89c5f242506b2187f0e8eac655b5e7bbe0b7776fe521c6e7677c4413e33715b4958afcf73cc9426c7f62eec7d70172062f29652bf1a", 0x37}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x298}}], 0x2, 0x45) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44202, 0x0) 10:57:34 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xffffffff80000000, 0x400003) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xff, 0x1, 0xff, 0x0, 0x800, 0x28086, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc4, 0x4}, 0x751, 0x1, 0x401, 0x0, 0xb51, 0x2, 0x3}, r2, 0x7, r3, 0x6) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() tkill(r7, 0x401004000000016) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x4, 0x5, 0x29, 0x0, 0x52, 0x91001, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x177c00, 0x1ff}, 0x15462, 0xfffffffffffffbf7, 0x9, 0x3, 0x401, 0x784f13cb, 0x7fff}, r7, 0xca, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 10:57:34 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x4, 0x15, 0x0, 0x9, 0xaf724, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x902, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = gettid() tkill(r1, 0x401004000000016) getpgrp(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) getpriority(0x1, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000fd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) close(r3) dup2(r3, r0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getown(r4, 0x9) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0xa9) fadvise64(r5, 0xb28, 0x8, 0x0) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r6) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 782.710994] FAULT_INJECTION: forcing a failure. [ 782.710994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 782.734547] CPU: 0 PID: 8309 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 782.742370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.751816] Call Trace: [ 782.754420] dump_stack+0x1b2/0x281 [ 782.758162] should_fail.cold+0x10a/0x149 [ 782.762324] __alloc_pages_nodemask+0x22c/0x2720 [ 782.767116] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 782.771305] ? SyS_ioctl+0x7f/0xb0 [ 782.774849] ? do_syscall_64+0x1d5/0x640 [ 782.778920] ? ima_match_policy+0x85a/0x10e0 [ 782.783352] ? trace_hardirqs_on+0x10/0x10 [ 782.787592] ? __lock_acquire+0x5fc/0x3f20 [ 782.791828] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 782.796679] ? cache_alloc_refill+0x1da/0x350 [ 782.801190] ? fs_reclaim_release+0xd0/0x110 [ 782.805625] ? mmu_topup_memory_caches+0x83/0x300 [ 782.810481] alloc_pages_current+0x155/0x260 [ 782.814891] ? kmem_cache_alloc+0x35f/0x3c0 [ 782.819212] __get_free_pages+0xb/0x40 [ 782.823106] mmu_topup_memory_caches+0x187/0x300 [ 782.827880] kvm_mmu_load+0x1e/0xd00 [ 782.831598] ? kvm_apic_accept_events+0x16f/0x3f0 [ 782.836451] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 782.841307] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 782.847578] ? _parse_integer+0xe4/0x130 [ 782.851649] ? vcpu_load+0x18/0x90 [ 782.855199] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 782.860673] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 782.865524] ? lock_acquire+0x170/0x3f0 [ 782.869503] ? lock_downgrade+0x740/0x740 [ 782.873655] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 782.877805] kvm_vcpu_ioctl+0x3de/0xc50 [ 782.881783] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 782.887704] ? proc_fail_nth_write+0x7b/0x180 [ 782.892208] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 782.897151] ? trace_hardirqs_on+0x10/0x10 [ 782.901427] ? fsnotify+0x974/0x11b0 [ 782.905147] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 782.910080] ? SyS_write+0x1b7/0x210 [ 782.913801] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 782.919719] do_vfs_ioctl+0x75a/0xff0 [ 782.923558] ? ioctl_preallocate+0x1a0/0x1a0 [ 782.927966] ? lock_downgrade+0x740/0x740 [ 782.932122] ? __fget+0x225/0x360 [ 782.935577] ? do_vfs_ioctl+0xff0/0xff0 [ 782.939554] ? security_file_ioctl+0x83/0xb0 [ 782.943984] SyS_ioctl+0x7f/0xb0 [ 782.947370] ? do_vfs_ioctl+0xff0/0xff0 [ 782.951346] do_syscall_64+0x1d5/0x640 [ 782.956553] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 782.961742] RIP: 0033:0x466459 [ 782.964939] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.972651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 782.979921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 782.987190] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.994465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.004458] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:35 executing program 4 (fault-call:8 fault-nth:44): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 783.123547] FAULT_INJECTION: forcing a failure. [ 783.123547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 783.143541] CPU: 0 PID: 8334 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 783.151366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.160720] Call Trace: [ 783.163318] dump_stack+0x1b2/0x281 [ 783.166954] should_fail.cold+0x10a/0x149 [ 783.171113] __alloc_pages_nodemask+0x22c/0x2720 [ 783.177085] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 783.181246] ? SyS_ioctl+0x7f/0xb0 [ 783.184789] ? do_syscall_64+0x1d5/0x640 [ 783.189637] ? ima_match_policy+0x85a/0x10e0 [ 783.194050] ? trace_hardirqs_on+0x10/0x10 [ 783.198726] ? __lock_acquire+0x5fc/0x3f20 [ 783.202966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 783.207840] ? fs_reclaim_release+0xd0/0x110 [ 783.212258] ? mmu_topup_memory_caches+0x83/0x300 [ 783.217131] alloc_pages_current+0x155/0x260 [ 783.221573] ? kmem_cache_alloc+0x35f/0x3c0 [ 783.226534] __get_free_pages+0xb/0x40 [ 783.230448] mmu_topup_memory_caches+0x187/0x300 [ 783.235233] kvm_mmu_load+0x1e/0xd00 [ 783.238948] ? kvm_apic_accept_events+0x16f/0x3f0 [ 783.243828] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 783.248593] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 783.253527] ? _parse_integer+0xe4/0x130 [ 783.257620] ? vcpu_load+0x18/0x90 [ 783.261168] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 783.266627] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 783.271471] ? lock_acquire+0x170/0x3f0 [ 783.275446] ? lock_downgrade+0x740/0x740 [ 783.279601] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 783.283803] kvm_vcpu_ioctl+0x3de/0xc50 [ 783.287783] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 783.294025] ? proc_fail_nth_write+0x7b/0x180 [ 783.298523] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 783.303457] ? trace_hardirqs_on+0x10/0x10 [ 783.307789] ? fsnotify+0x974/0x11b0 [ 783.311503] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 783.316441] ? SyS_write+0x1b7/0x210 [ 783.320250] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 783.326146] do_vfs_ioctl+0x75a/0xff0 [ 783.329954] ? ioctl_preallocate+0x1a0/0x1a0 [ 783.334364] ? lock_downgrade+0x740/0x740 [ 783.338519] ? __fget+0x225/0x360 [ 783.341973] ? do_vfs_ioctl+0xff0/0xff0 [ 783.345948] ? security_file_ioctl+0x83/0xb0 [ 783.350358] SyS_ioctl+0x7f/0xb0 [ 783.353726] ? do_vfs_ioctl+0xff0/0xff0 [ 783.357703] do_syscall_64+0x1d5/0x640 [ 783.361599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 783.366791] RIP: 0033:0x466459 [ 783.369979] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.377685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 783.384971] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 783.393020] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.400389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.407749] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:35 executing program 4 (fault-call:8 fault-nth:45): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:35 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 783.525888] FAULT_INJECTION: forcing a failure. [ 783.525888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 783.538532] CPU: 0 PID: 8352 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 783.546387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.555768] Call Trace: [ 783.558362] dump_stack+0x1b2/0x281 [ 783.561995] should_fail.cold+0x10a/0x149 [ 783.566184] __alloc_pages_nodemask+0x22c/0x2720 [ 783.570940] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 783.575088] ? SyS_ioctl+0x7f/0xb0 [ 783.578630] ? do_syscall_64+0x1d5/0x640 [ 783.582784] ? ima_match_policy+0x85a/0x10e0 [ 783.587194] ? trace_hardirqs_on+0x10/0x10 [ 783.591558] ? __lock_acquire+0x5fc/0x3f20 [ 783.595797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 783.600652] ? fs_reclaim_release+0xd0/0x110 [ 783.605071] ? mmu_topup_memory_caches+0x83/0x300 [ 783.609919] alloc_pages_current+0x155/0x260 [ 783.614421] ? kmem_cache_alloc+0x35f/0x3c0 [ 783.618746] __get_free_pages+0xb/0x40 [ 783.622636] mmu_topup_memory_caches+0x187/0x300 [ 783.627396] kvm_mmu_load+0x1e/0xd00 [ 783.633025] ? kvm_apic_accept_events+0x16f/0x3f0 [ 783.637882] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 783.642840] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 783.647859] ? _parse_integer+0xe4/0x130 [ 783.651928] ? vcpu_load+0x18/0x90 [ 783.655482] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 783.660954] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 783.665799] ? lock_acquire+0x170/0x3f0 [ 783.669778] ? lock_downgrade+0x740/0x740 [ 783.673915] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 783.678041] kvm_vcpu_ioctl+0x3de/0xc50 [ 783.681999] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 783.687871] ? proc_fail_nth_write+0x7b/0x180 [ 783.692345] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 783.697262] ? trace_hardirqs_on+0x10/0x10 [ 783.701495] ? fsnotify+0x974/0x11b0 [ 783.705184] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 783.710092] ? SyS_write+0x1b7/0x210 [ 783.713796] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 783.719677] do_vfs_ioctl+0x75a/0xff0 [ 783.723556] ? ioctl_preallocate+0x1a0/0x1a0 [ 783.727946] ? lock_downgrade+0x740/0x740 [ 783.732089] ? __fget+0x225/0x360 [ 783.736280] ? do_vfs_ioctl+0xff0/0xff0 [ 783.740259] ? security_file_ioctl+0x83/0xb0 [ 783.744679] SyS_ioctl+0x7f/0xb0 [ 783.748034] ? do_vfs_ioctl+0xff0/0xff0 [ 783.752012] do_syscall_64+0x1d5/0x640 [ 783.755905] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 783.761081] RIP: 0033:0x466459 [ 783.764251] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:35 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:35 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x44102, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x401004000000016) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000500)={{0xa, 0x1, 0xfffffff9, 0x9, '\x00', 0x6}, 0x0, 0x20000000, 0x80, r3, 0x0, 0x3ff, 'syz0\x00', &(0x7f00000004c0), 0x0, [], [0x3626, 0xa656, 0x2, 0x9c]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xfce8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x2, 0x7, 0x1, 0x0, 0xad5, 0x8a00, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb26, 0x2, @perf_config_ext={0x1}, 0x1, 0x6, 0x2, 0x7, 0x20, 0x7fff, 0xfffe}, r0, 0xb, 0xffffffffffffffff, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x1, 0x0, 0x81, 0x0, 0xf2, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x1, 0x40}, 0x0, 0x9, 0x400, 0x6, 0x8000, 0x3, 0x926}, r0, 0x0, r5, 0x8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 783.772105] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 783.779364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 783.786723] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.793979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.801253] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:35 executing program 2: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r0 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_mount_image$nfs(&(0x7f0000000600)='nfs\x00', &(0x7f0000000640)='./file3\x00', 0x1, 0x7, &(0x7f0000000ac0)=[{&(0x7f0000000680)="f75b21f647e2c090766ec7562deba8bb6b817f6089eb13f65b59806d39302f1b5385864a3e2e4dc1d4ce4a1eb086ee53702cee651c3bce2d83ecf0171e9f027b0c4316375d981b0f2a112d42c8084ce4114aeddb6e7207dbc511b9727f6ce459bd9199c7d3a1d7fbf2565d7e3faf2a19fa47a61e46d6acb714e5b10206faba2338dc0a995123dc1ea5130e52836f0d832cb7e04b97b3afa2795d88a0192b6e6da31f8d4aa565899e1bb9bded8eee00cd716fd080bbb52714", 0xb8, 0x3}, {&(0x7f0000000740)="366fadab7b9acf2e631c0a51ebfdc6ec4f634bd6ae7b", 0x16, 0x3ff}, {&(0x7f0000000780)="e9d73453cb903aa01abdb1640b227f9880b76179b3576b3ce6eedde631f22f8cc02219ca949786700a4a3e31eeff7330bfd41a2d302328b69a9e06551db511f1d88c3245267ef401548a", 0x4a, 0x7}, {&(0x7f0000000800)="4cf5521e6ffc2e90182d60f3a9bacd3a2ef9c48b862fdf2e97b15a352d22ebbb8e3413d08f197f798e0830b8e1f1e44ca50d4cacc1e40f9fd3a42ce686023601703536211e580d1524a8bfa1a3b1b77c2657277cac9e94d6e6080c704c3638a2a530efff75b0bbdb13d55c0fdb582e2b10c0366b0d4bc37e6b6bcf73dd7cc3b58984e3a679260145ee8ef2e5e9c50d7001fb2b89d6ff5d525c119eef04c4aaa30494dfba3e276d570b661614d6766d2eb748357a10332decf4ce1b10253b49e45a57a1d0440ce45baaf93bcb11d481f594a3090ede79aa47c0fd663719a7dc2ff3c7eaa2971407675395e48416", 0xed, 0x2}, {&(0x7f0000000900)="fc3689fd60d02b086d3d82414b0b0edb4c6a0ac85637e0311458db2071337a2e680502a1697a746efba7fe9acbde5153bfa0617044c25871d01521a4b2ea560a1872d90ff0fdd086e6cd99a0b7268dad35acf706fb2c249a1fb7325155f6bc81604da6cfeaf3f3dd522aa00aec53458c98e76dc15ad3f9248eec38b4afe946", 0x7f, 0x3}, {&(0x7f0000001980)="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", 0x1000, 0x80}, {&(0x7f00000009c0)="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", 0xfd, 0x9}], 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB=':,^hvsh,\x00\x00\x00\x00']) preadv(r5, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=""/66, 0x42}], 0x1, 0x8, 0x2) setreuid(0xee01, r4) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./file3\x00', 0x0) sendmsg$unix(r3, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)="08ae337682874cb5fb9f11f16da71483529a774578642d", 0x17}, {&(0x7f00000001c0)="76b1b43ce6164592bbefac294491304a1d360b58", 0x14}, {&(0x7f00000002c0)="13c4ebe87867792af0a21e4a245627b5200aae0edd28ec0df46029806327e84eca135ce4d8268a05d6cdf511c5c93e628acb7906aac2cbb0e225c10745aa9dc21ba84074c7294aa32f5887f05d49fa6167e4e04cb5a57b2ea6ea625e6b3de9eecf98f5ccd18ff24fe76a0dcfaa2283c2dd4d39e43ef63cf019ae1bc2585c95d7d561", 0x82}, {&(0x7f0000000380)='2', 0x1}, {&(0x7f00000003c0)="76dfaeeebbc4ece477daa5fe9378697632940c46851dbc1cdafe98e8b1f061cb6b8c245f9c1db43fa5535e98cac3f3c883d7483c0acd1b8cb8078d79e222e173f905a7b4af1c4358293b61d308a12dcbc967d5cd8fb6948cdc799085913a744caccd4b463277ccfc3d2c34057f4dff3951f88b9a3431a8eb0cb7236b1769b737b7b6fccd05aabc023d09b32cff2ccabbc9551654dcaa891a163f86ebdb5be065f0d72b2cd87f82012dba19067fa29d34fdc520e375907ced5e6f0d92abd388dd02fa0a858b6f68cbf8d22f3a84b2d63e3e7cc203b84d99717f6d7d787ba9", 0xde}, {&(0x7f00000004c0)="8a6605b2025d13eca7942a223e0ad90f8951e8b4aca333a5d1d8037d80f6494aa553282934ba0a62e651cb136046c63124b25088704f727edb9525eb", 0x3c}, {&(0x7f0000000500)="ac", 0x1}], 0x7, 0x0, 0x0, 0x8800}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') 10:57:35 executing program 4 (fault-call:8 fault-nth:46): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:35 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 783.947363] print_req_error: I/O error, dev loop2, sector 0 10:57:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 784.058295] FAULT_INJECTION: forcing a failure. [ 784.058295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.096599] CPU: 1 PID: 8396 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 784.104432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.113786] Call Trace: [ 784.116419] dump_stack+0x1b2/0x281 [ 784.120078] should_fail.cold+0x10a/0x149 [ 784.124235] __alloc_pages_nodemask+0x22c/0x2720 [ 784.128992] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 784.133141] ? SyS_ioctl+0x7f/0xb0 [ 784.136708] ? do_syscall_64+0x1d5/0x640 [ 784.140806] ? ima_match_policy+0x85a/0x10e0 [ 784.145220] ? trace_hardirqs_on+0x10/0x10 [ 784.149475] ? __lock_acquire+0x5fc/0x3f20 [ 784.153706] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 784.158539] ? cache_alloc_refill+0x1da/0x350 [ 784.163030] ? fs_reclaim_release+0xd0/0x110 [ 784.167436] ? mmu_topup_memory_caches+0x83/0x300 [ 784.172274] alloc_pages_current+0x155/0x260 [ 784.176678] ? kmem_cache_alloc+0x35f/0x3c0 [ 784.180989] __get_free_pages+0xb/0x40 [ 784.184873] mmu_topup_memory_caches+0x187/0x300 [ 784.189636] kvm_mmu_load+0x1e/0xd00 [ 784.193343] ? kvm_apic_accept_events+0x16f/0x3f0 [ 784.198197] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 784.202962] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 784.207898] ? _parse_integer+0xe4/0x130 [ 784.211954] ? vcpu_load+0x18/0x90 [ 784.215496] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 784.220965] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 784.225812] ? lock_acquire+0x170/0x3f0 [ 784.229773] ? lock_downgrade+0x740/0x740 [ 784.233919] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 784.238062] kvm_vcpu_ioctl+0x3de/0xc50 [ 784.242204] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 784.248081] ? proc_fail_nth_write+0x7b/0x180 [ 784.252744] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 784.257674] ? trace_hardirqs_on+0x10/0x10 [ 784.261900] ? fsnotify+0x974/0x11b0 [ 784.265695] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 784.270618] ? SyS_write+0x1b7/0x210 [ 784.274330] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 784.280206] do_vfs_ioctl+0x75a/0xff0 [ 784.284002] ? ioctl_preallocate+0x1a0/0x1a0 [ 784.288402] ? lock_downgrade+0x740/0x740 [ 784.292557] ? __fget+0x225/0x360 [ 784.295999] ? do_vfs_ioctl+0xff0/0xff0 [ 784.299961] ? security_file_ioctl+0x83/0xb0 [ 784.304366] SyS_ioctl+0x7f/0xb0 [ 784.307905] ? do_vfs_ioctl+0xff0/0xff0 [ 784.311876] do_syscall_64+0x1d5/0x640 [ 784.315760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 784.320953] RIP: 0033:0x466459 [ 784.324128] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.331826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 784.339081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 784.346338] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.353593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.360859] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:37 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f000071c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f20e06635200000000f22e066b98703000066b80a00000066ba000000000f3067360f01caba4200b8b600ef684f00f00885a548ea00706400f466b9f60900000f32b80f000f00d8", 0x48}], 0x1, 0xd, &(0x7f00000001c0)=[@flags={0x3, 0x220200}, @cstype3={0x5, 0x2}], 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:37 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)) close(r4) signalfd4(r4, &(0x7f0000000100)={[0x5]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00') 10:57:37 executing program 4 (fault-call:8 fault-nth:47): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:37 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) mkdirat(r0, &(0x7f0000000440)='./file3\x00', 0x105) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)) geteuid() getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r3 = getuid() r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x501200, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/245, 0xf5}], 0x2, 0x80, 0xfff) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:37 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 785.715691] FAULT_INJECTION: forcing a failure. [ 785.715691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.788904] CPU: 0 PID: 8434 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 785.796830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.806188] Call Trace: [ 785.808790] dump_stack+0x1b2/0x281 [ 785.812454] should_fail.cold+0x10a/0x149 [ 785.816698] __alloc_pages_nodemask+0x22c/0x2720 [ 785.821461] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 785.825627] ? SyS_ioctl+0x7f/0xb0 [ 785.829199] ? do_syscall_64+0x1d5/0x640 [ 785.833294] ? ima_match_policy+0x85a/0x10e0 [ 785.837776] ? trace_hardirqs_on+0x10/0x10 [ 785.842029] ? __lock_acquire+0x5fc/0x3f20 [ 785.846257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 785.851111] ? fs_reclaim_release+0xd0/0x110 [ 785.855507] ? mmu_topup_memory_caches+0x83/0x300 [ 785.860350] alloc_pages_current+0x155/0x260 [ 785.864966] ? kmem_cache_alloc+0x35f/0x3c0 [ 785.869300] __get_free_pages+0xb/0x40 [ 785.873191] mmu_topup_memory_caches+0x187/0x300 [ 785.877960] kvm_mmu_load+0x1e/0xd00 [ 785.881658] ? kvm_apic_accept_events+0x16f/0x3f0 [ 785.886510] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 785.891293] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 785.896262] ? _parse_integer+0xe4/0x130 [ 785.900438] ? vcpu_load+0x18/0x90 [ 785.903980] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 785.909428] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 785.914272] ? lock_acquire+0x170/0x3f0 [ 785.918273] ? lock_downgrade+0x740/0x740 [ 785.922413] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 785.926558] kvm_vcpu_ioctl+0x3de/0xc50 [ 785.930606] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 785.936650] ? proc_fail_nth_write+0x7b/0x180 [ 785.941141] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 785.946060] ? trace_hardirqs_on+0x10/0x10 [ 785.950280] ? fsnotify+0x974/0x11b0 [ 785.954006] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 785.959017] ? SyS_write+0x1b7/0x210 [ 785.962731] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 785.968620] do_vfs_ioctl+0x75a/0xff0 [ 785.972415] ? ioctl_preallocate+0x1a0/0x1a0 [ 785.976815] ? lock_downgrade+0x740/0x740 [ 785.980950] ? __fget+0x225/0x360 [ 785.984383] ? do_vfs_ioctl+0xff0/0xff0 [ 785.988353] ? security_file_ioctl+0x83/0xb0 [ 785.992755] SyS_ioctl+0x7f/0xb0 [ 785.996106] ? do_vfs_ioctl+0xff0/0xff0 [ 786.000079] do_syscall_64+0x1d5/0x640 [ 786.003980] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 786.009160] RIP: 0033:0x466459 [ 786.012341] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 786.020033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 786.027289] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 786.034930] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.042187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.049445] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:38 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:38 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:38 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:38 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:38 executing program 4 (fault-call:8 fault-nth:48): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 786.904874] FAULT_INJECTION: forcing a failure. [ 786.904874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 786.938273] CPU: 1 PID: 8485 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 786.946105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.956271] Call Trace: [ 786.959647] dump_stack+0x1b2/0x281 [ 786.963279] should_fail.cold+0x10a/0x149 [ 786.967452] __alloc_pages_nodemask+0x22c/0x2720 [ 786.972208] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 786.976361] ? SyS_ioctl+0x7f/0xb0 [ 786.979903] ? do_syscall_64+0x1d5/0x640 [ 786.983970] ? ima_match_policy+0x85a/0x10e0 [ 786.988387] ? trace_hardirqs_on+0x10/0x10 [ 786.992625] ? __lock_acquire+0x5fc/0x3f20 [ 786.996859] ? gfp_pfmemalloc_allowed+0x150/0x150 10:57:38 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)) statx(r1, &(0x7f00000000c0)='./file1\x00', 0x4000, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() setreuid(r4, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x7, 0x5, &(0x7f0000000740)=[{&(0x7f00000001c0)="fa072de2d8cdb8f1f830d52f2d4cf381bd32ecda19395198a2c76d4dc9cbe40ef0f4d8b64af8eb9544709883792b3348214421af52f91469c2eaa3ba6f2e", 0x3e, 0x8}, {&(0x7f00000003c0)="f3dfde69f5c5a3046035b701e433284e67c766c5b63f82a7ec4d1bb5d379b0d03280c82df01f124b4fe5ad041e1268de6b48db001d1d8458941ada4d5d2bc8433598269c95cc937e863cbc911aea549648b18d25f135cc30da1758643ef4c2999f4d9df97aa279cb1324f9afcab8b6f1e74d81b748bfb8cb55fbe7bac0af6c5d4cb8dde3baf14e8232335a8c42c96334631f8330", 0x94, 0x3}, {&(0x7f0000000480)="b97232ceb1789497a0abb15e1bcb7b24160439c01f570fda431dea853831e15baca95e20e4179aa7d5029838932d0acd295e57ba101eb965c10052a3b93b5a417109b650eca2aae93ea22d2c7aca469f2001b1f9dbec9789ae9ef372dda52a086ead8f9e46a3ae33a15df30cf24213b83e320d0ed7b1d7f68be82b7df76c61abddf0ab00ebf8a24abdd90d4387c95b07058057eb72e2dd281671c1d577946e760c387905cfd44e7a242e03f467cb838be17fd4eb6291704b392948304ff63d", 0xbf}, {&(0x7f0000000540)="867f5411dd7d2b3ce3a4f84b9c38a67688135a45d42f58fe23112e5960f9cb72222a74c297a1092c837b7758c774989bc9d1e92d678a657744e0a09b012bbbc0d03643884fc4cfead47064609078eaa3e4ae01c929416fd2c1d0a964094c41f280c151af8821fb768d7409b6193b76b9a845415f5c342e82d61875d68dee49c2c679c735ec1d4aaf37443887ae606ccdd174c4814cc072c1213fdb61577a639ace217e57ae8b91ed70ce33be2c9cb604e03d7480810ec06c15e5dc90a3cf26611759caeaee1eddcacac53a3c9044122a26d70e6cd84cfcdd36a2e45d782198aff53b00abdd90bb2ee7ccfee43d1064", 0xef, 0xea0}, {&(0x7f0000000640)="68de4270d941fecd4c9185ad3f20393a9b3224f3ffdcc6722d6ca12d9251a4edb4d67813c929c689d3623ff2d84e6b66017c77346016e8f77abf8f9de5ff35f4c7b00f7f630a652e485725eaf9a44fcbdb295128261df18d01105ae1b303c3ac6d0fb2fd89f38d1db0c225c3d90c2889b3b8f7e5c09401ab4b174d9743e1aae3ebc1c294fcf567082b7774b9e876f8e50b7b9559be86add4d87e38f5a5907c7de9bccc1f4e0b1e2ced3f40a662c5ac824197ea3c9a974e2007535fb35b34ef0d54e6cd66019f4f3d746b7e", 0xcb, 0xad}], 0x8000, &(0x7f00000007c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}], [{@uid_gt={'uid>', r4}}]}) 10:57:39 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 787.001712] ? fs_reclaim_release+0xd0/0x110 [ 787.006131] ? mmu_topup_memory_caches+0x83/0x300 [ 787.010980] alloc_pages_current+0x155/0x260 [ 787.015955] ? kmem_cache_alloc+0x35f/0x3c0 [ 787.020297] __get_free_pages+0xb/0x40 [ 787.024192] mmu_topup_memory_caches+0x187/0x300 [ 787.028952] kvm_mmu_load+0x1e/0xd00 [ 787.032693] ? kvm_apic_accept_events+0x16f/0x3f0 [ 787.037635] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 787.042396] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 787.047337] ? _parse_integer+0xe4/0x130 [ 787.051422] ? vcpu_load+0x18/0x90 [ 787.054968] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 787.060431] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 787.065273] ? lock_acquire+0x170/0x3f0 [ 787.070652] ? lock_downgrade+0x740/0x740 [ 787.074815] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 787.078964] kvm_vcpu_ioctl+0x3de/0xc50 [ 787.082957] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 787.088869] ? proc_fail_nth_write+0x7b/0x180 [ 787.093368] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 787.098300] ? trace_hardirqs_on+0x10/0x10 10:57:39 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:39 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 787.102543] ? fsnotify+0x974/0x11b0 [ 787.106254] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 787.111208] ? SyS_write+0x1b7/0x210 [ 787.114939] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 787.120826] do_vfs_ioctl+0x75a/0xff0 [ 787.124645] ? ioctl_preallocate+0x1a0/0x1a0 [ 787.129070] ? lock_downgrade+0x740/0x740 [ 787.133250] ? __fget+0x225/0x360 [ 787.136737] ? do_vfs_ioctl+0xff0/0xff0 [ 787.140709] ? security_file_ioctl+0x83/0xb0 [ 787.145134] SyS_ioctl+0x7f/0xb0 [ 787.148499] ? do_vfs_ioctl+0xff0/0xff0 [ 787.152477] do_syscall_64+0x1d5/0x640 [ 787.156373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 787.161592] RIP: 0033:0x466459 [ 787.164775] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.172491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 787.179763] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 787.187068] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.194362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.201630] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:39 executing program 4 (fault-call:8 fault-nth:49): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 787.353991] FAULT_INJECTION: forcing a failure. [ 787.353991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 787.375598] CPU: 1 PID: 8533 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 787.383529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.392890] Call Trace: [ 787.395488] dump_stack+0x1b2/0x281 [ 787.399126] should_fail.cold+0x10a/0x149 [ 787.403452] __alloc_pages_nodemask+0x22c/0x2720 [ 787.408213] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 787.412373] ? SyS_ioctl+0x7f/0xb0 [ 787.415927] ? do_syscall_64+0x1d5/0x640 [ 787.420007] ? ima_match_policy+0x85a/0x10e0 [ 787.424648] ? trace_hardirqs_on+0x10/0x10 [ 787.428972] ? __lock_acquire+0x5fc/0x3f20 [ 787.433325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 787.438200] ? fs_reclaim_release+0xd0/0x110 [ 787.442627] ? mmu_topup_memory_caches+0x83/0x300 [ 787.447487] alloc_pages_current+0x155/0x260 [ 787.452000] ? kmem_cache_alloc+0x35f/0x3c0 [ 787.456329] __get_free_pages+0xb/0x40 [ 787.460224] mmu_topup_memory_caches+0x187/0x300 [ 787.465225] kvm_mmu_load+0x1e/0xd00 [ 787.469031] ? kvm_apic_accept_events+0x16f/0x3f0 [ 787.473935] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 787.478799] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 787.483742] ? _parse_integer+0xe4/0x130 [ 787.488050] ? vcpu_load+0x18/0x90 [ 787.491706] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 787.497176] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 787.502127] ? lock_acquire+0x170/0x3f0 [ 787.506520] ? lock_downgrade+0x740/0x740 [ 787.510693] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 787.514868] kvm_vcpu_ioctl+0x3de/0xc50 [ 787.518901] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 787.525155] ? proc_fail_nth_write+0x7b/0x180 [ 787.529660] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 787.534608] ? trace_hardirqs_on+0x10/0x10 [ 787.538859] ? fsnotify+0x974/0x11b0 [ 787.542583] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 787.547580] ? SyS_write+0x1b7/0x210 [ 787.551309] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 787.557407] do_vfs_ioctl+0x75a/0xff0 [ 787.561425] ? ioctl_preallocate+0x1a0/0x1a0 [ 787.566003] ? lock_downgrade+0x740/0x740 [ 787.570186] ? __fget+0x225/0x360 [ 787.573741] ? do_vfs_ioctl+0xff0/0xff0 [ 787.577851] ? security_file_ioctl+0x83/0xb0 [ 787.582495] SyS_ioctl+0x7f/0xb0 [ 787.585869] ? do_vfs_ioctl+0xff0/0xff0 [ 787.589990] do_syscall_64+0x1d5/0x640 [ 787.594074] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 787.599792] RIP: 0033:0x466459 [ 787.603005] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.611038] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 787.618895] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 787.626934] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.634454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.641926] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:42 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='/dev/kvm\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 10:57:42 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) close(r0) r1 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17, 0x800000000}], 0x2010, &(0x7f00000003c0)=ANY=[@ANYBLOB="b9f3308a2fcc392693d46eb0d8e909faf7c8a93212a8905f96b4a02a3bea9c0186c91fa324c50266715e4b5ef468d1b6ff10c77036d5cbf1598f19dd5f46421a7f65d3215659205bb88d52967e3e9561f00af21a28676377af16a370e113eed70df0e768a5b9abeba4007ba077f596541bd72f39b80c18f0b033b62b1f0eaeefa06f65255a4388372d97bf39f159dffe1f5fbbd885a67dc1157e57e31761cdfdc49064ece2494c440af2f0cd2db769821535867c2ba5a0377e8d171072b6db81aed1c264170bff08dcbb48947fd3c7b27b", @ANYRESOCT=r0, @ANYRESHEX=r0]) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r1, &(0x7f00000008c0), 0x0, 0x80000d9f, 0xfffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) mkdirat(r1, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r1, &(0x7f0000000100)='./file3\x00', r1, &(0x7f0000000200)='./file0\x00') 10:57:42 executing program 4 (fault-call:8 fault-nth:50): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:42 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x3a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)) close(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x8, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:42 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xe34}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x10000068, 0x400, 0xffff, 0x80, 0x7, 0x80, 0x7fff}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 790.115061] FAULT_INJECTION: forcing a failure. [ 790.115061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.161667] CPU: 1 PID: 8580 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 790.170753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.181446] Call Trace: [ 790.184138] dump_stack+0x1b2/0x281 [ 790.188335] should_fail.cold+0x10a/0x149 [ 790.193381] __alloc_pages_nodemask+0x22c/0x2720 [ 790.200866] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 790.205903] ? SyS_ioctl+0x7f/0xb0 [ 790.210000] ? do_syscall_64+0x1d5/0x640 [ 790.214675] ? ima_match_policy+0x85a/0x10e0 [ 790.219518] ? trace_hardirqs_on+0x10/0x10 [ 790.224423] ? __lock_acquire+0x5fc/0x3f20 [ 790.229157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 790.234118] ? fs_reclaim_release+0xd0/0x110 [ 790.238787] ? mmu_topup_memory_caches+0x83/0x300 [ 790.243941] alloc_pages_current+0x155/0x260 [ 790.249075] ? kmem_cache_alloc+0x35f/0x3c0 [ 790.253414] __get_free_pages+0xb/0x40 [ 790.257488] mmu_topup_memory_caches+0x187/0x300 [ 790.262966] kvm_mmu_load+0x1e/0xd00 [ 790.267815] ? kvm_apic_accept_events+0x16f/0x3f0 [ 790.274233] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 790.279319] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 790.284819] ? _parse_integer+0xe4/0x130 [ 790.288897] ? vcpu_load+0x18/0x90 [ 790.292895] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 790.298935] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 790.304714] ? lock_acquire+0x170/0x3f0 [ 790.309281] ? lock_downgrade+0x740/0x740 [ 790.313754] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 790.319073] kvm_vcpu_ioctl+0x3de/0xc50 [ 790.324140] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 790.331224] ? proc_fail_nth_write+0x7b/0x180 [ 790.336489] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 790.341969] ? trace_hardirqs_on+0x10/0x10 [ 790.348303] ? fsnotify+0x974/0x11b0 [ 790.352651] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 790.358532] ? SyS_write+0x1b7/0x210 [ 790.362972] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 790.369254] do_vfs_ioctl+0x75a/0xff0 [ 790.374574] ? ioctl_preallocate+0x1a0/0x1a0 [ 790.379454] ? lock_downgrade+0x740/0x740 [ 790.384283] ? __fget+0x225/0x360 [ 790.387945] ? do_vfs_ioctl+0xff0/0xff0 [ 790.392358] ? security_file_ioctl+0x83/0xb0 [ 790.397303] SyS_ioctl+0x7f/0xb0 [ 790.400873] ? do_vfs_ioctl+0xff0/0xff0 [ 790.405235] do_syscall_64+0x1d5/0x640 [ 790.409838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 790.415949] RIP: 0033:0x466459 [ 790.419333] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.427874] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 790.435404] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 790.443622] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.451640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:57:42 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 790.459356] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f00000000c0)=0x4) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0xa, 0x3, 0x8, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000007c0)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) setreuid(0xee01, r6) syz_mount_image$ubifs(&(0x7f0000000140)='ubifs\x00', &(0x7f0000000180)='./file0\x00', 0x3ff, 0x6, &(0x7f0000000600)=[{&(0x7f00000002c0)="21243ed165e8073771a09eae5cf08bc48031238a25a1e82cca344473401bdd3b55f4aba59d69e13598c760be9ffcba4d13120e48b5ee72e14b62243054b9807f7106d2eedf610a967d8c2090017ecf057e137a320c1897d901dbb034cee6b7fdc9b285c50fe6a18528deeaa5ae", 0x6d}, {&(0x7f0000001980)="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", 0x1000, 0x401}, {&(0x7f0000000340)="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", 0xff, 0x401}, {&(0x7f0000000440)="62e8a83bec502486be8f2172b5e6f81c00bf7dfa185aa6779afb60c0101409fd712412febdd60868eb640d757fb056222d12a67e49f5490f99ea67d8575189f82958cbbdb5521d776fe040a9f7ace32656d447d515e5ae760beb3252b1b69aedfa2acb1c696c3b0adfc6db91a84da9898fe9", 0x72, 0x38000}, {&(0x7f00000004c0)="50ebf18adedf4ed9c16c5a6897d189aa83366ddc5df958c0a8ec6283c27c81b8e9941ddc7f6bcc1486e2a1581d8b2d2fab4b3e3420c4a0e39772e6784fb8a7edd53b4d615d82ed3bdb0872c21e004060ce0b3bfd10f3d3f8aca22d5208515f31a1", 0x61, 0xddcf9e4}, {&(0x7f0000000540)="e1467cca191915445e7d22718a11e35c9d8019bd3a0454b228261de4beac5e3b5a55a12b0750cf88eb5a50e03cc366e13b176ff5d5282ca733a08997b4140b73ceffe130aa8ef139e85f57bc02a745c7ad3981c241b734ca2f418d319605f3872267e732ec35eb55e88ddefe20fd4751560b850288d072dacb22122f656eae13e92009b4eebdf81b9c1c4e9522f2f3a788b3205a65ccbc76eddc6525385aa9aa29cb3c661998ab1523f53a303ab38b4679b499231d05382cc496ae5d1e", 0xbd, 0x1ff}], 0x20, &(0x7f00000006c0)={[{@chk_data_crc='chk_data_crc'}, {@norm_unmount='norm_unmount'}, {@compr_none='compr=none'}, {@no_chk_data_crc='no_chk_data_crc'}], [{@fowner_gt={'fowner>', r6}}]}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:42 executing program 4 (fault-call:8 fault-nth:51): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:42 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(0x0, 0x401004000000016) rt_sigqueueinfo(0x0, 0x1e, &(0x7f0000000340)={0x35, 0x3, 0xfff}) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x81, 0x3, 0x1f, 0x98, 0x0, 0x9, 0x8002, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1, 0x5, 0x2, 0x3, 0x1, 0xb}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x8, 0x3, 0x0, 0x18, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, r1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 10:57:42 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 790.632717] FAULT_INJECTION: forcing a failure. [ 790.632717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:57:42 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) truncate(&(0x7f0000000140)='./file3\x00', 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) truncate(&(0x7f0000000180)='./file0/file0\x00', 0x7) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x4c0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 790.714316] CPU: 0 PID: 8620 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 790.724132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.734192] Call Trace: [ 790.736891] dump_stack+0x1b2/0x281 [ 790.740635] should_fail.cold+0x10a/0x149 [ 790.744821] __alloc_pages_nodemask+0x22c/0x2720 [ 790.749595] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 790.754814] ? SyS_ioctl+0x7f/0xb0 [ 790.758926] ? do_syscall_64+0x1d5/0x640 [ 790.764235] ? ima_match_policy+0x85a/0x10e0 [ 790.768749] ? trace_hardirqs_on+0x10/0x10 [ 790.773354] ? __lock_acquire+0x5fc/0x3f20 [ 790.778067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 790.783412] ? fs_reclaim_release+0xd0/0x110 [ 790.788112] ? mmu_topup_memory_caches+0x83/0x300 [ 790.793501] alloc_pages_current+0x155/0x260 [ 790.798234] ? kmem_cache_alloc+0x35f/0x3c0 [ 790.802815] __get_free_pages+0xb/0x40 [ 790.806946] mmu_topup_memory_caches+0x187/0x300 [ 790.812383] kvm_mmu_load+0x1e/0xd00 [ 790.816955] ? kvm_apic_accept_events+0x16f/0x3f0 [ 790.822680] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 790.827791] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 790.832964] ? _parse_integer+0xe4/0x130 [ 790.837775] ? vcpu_load+0x18/0x90 [ 790.841608] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 790.849905] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 790.857906] ? lock_acquire+0x170/0x3f0 [ 790.862300] ? lock_downgrade+0x740/0x740 [ 790.867130] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 790.871644] kvm_vcpu_ioctl+0x3de/0xc50 [ 790.876920] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 790.883660] ? proc_fail_nth_write+0x7b/0x180 [ 790.888835] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 790.893786] ? trace_hardirqs_on+0x10/0x10 [ 790.899377] ? fsnotify+0x974/0x11b0 [ 790.903530] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 790.908818] ? SyS_write+0x1b7/0x210 [ 790.912781] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 790.920016] do_vfs_ioctl+0x75a/0xff0 [ 790.923932] ? ioctl_preallocate+0x1a0/0x1a0 [ 790.930089] ? lock_downgrade+0x740/0x740 [ 790.935058] ? __fget+0x225/0x360 [ 790.938810] ? do_vfs_ioctl+0xff0/0xff0 [ 790.943786] ? security_file_ioctl+0x83/0xb0 [ 790.948790] SyS_ioctl+0x7f/0xb0 [ 790.954013] ? do_vfs_ioctl+0xff0/0xff0 [ 790.958702] do_syscall_64+0x1d5/0x640 [ 790.963376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 790.970219] RIP: 0033:0x466459 [ 790.974311] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.984692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 790.993078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 791.004562] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.013810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 791.021969] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:43 executing program 4 (fault-call:8 fault-nth:52): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:43 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:43 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x3, 0x21, 0x7, 0x1000004, 0xfffffffffffffffa, 0x6, 0x4, 0x6, 0xfe}, 0x0) prlimit64(r1, 0x2, &(0x7f0000000100)={0x1}, 0x0) sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) gettid() ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) getrlimit(0xb, &(0x7f0000000140)) [ 791.165595] FAULT_INJECTION: forcing a failure. [ 791.165595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 791.205509] CPU: 1 PID: 8659 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 791.215321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.228936] Call Trace: [ 791.231638] dump_stack+0x1b2/0x281 [ 791.235814] should_fail.cold+0x10a/0x149 [ 791.240792] __alloc_pages_nodemask+0x22c/0x2720 [ 791.246224] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 791.251930] ? SyS_ioctl+0x7f/0xb0 [ 791.256165] ? do_syscall_64+0x1d5/0x640 [ 791.261543] ? ima_match_policy+0x85a/0x10e0 [ 791.266866] ? trace_hardirqs_on+0x10/0x10 [ 791.271249] ? __lock_acquire+0x5fc/0x3f20 [ 791.276962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 791.282505] ? cache_alloc_refill+0x1da/0x350 [ 791.288062] ? fs_reclaim_release+0xd0/0x110 [ 791.292917] ? mmu_topup_memory_caches+0x83/0x300 [ 791.299826] alloc_pages_current+0x155/0x260 [ 791.304435] ? kmem_cache_alloc+0x35f/0x3c0 [ 791.309068] __get_free_pages+0xb/0x40 [ 791.313554] mmu_topup_memory_caches+0x187/0x300 [ 791.319169] kvm_mmu_load+0x1e/0xd00 [ 791.323295] ? kvm_apic_accept_events+0x16f/0x3f0 [ 791.328532] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 791.333816] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 791.339321] ? _parse_integer+0xe4/0x130 [ 791.343541] ? vcpu_load+0x18/0x90 [ 791.347952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 791.353691] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 791.359047] ? lock_acquire+0x170/0x3f0 [ 791.363497] ? lock_downgrade+0x740/0x740 [ 791.368182] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 791.372606] kvm_vcpu_ioctl+0x3de/0xc50 [ 791.377004] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 791.383459] ? proc_fail_nth_write+0x7b/0x180 [ 791.387959] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 791.393074] ? trace_hardirqs_on+0x10/0x10 [ 791.397686] ? fsnotify+0x974/0x11b0 [ 791.401688] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 791.407033] ? SyS_write+0x1b7/0x210 [ 791.411373] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 791.420513] do_vfs_ioctl+0x75a/0xff0 [ 791.424766] ? ioctl_preallocate+0x1a0/0x1a0 [ 791.429401] ? lock_downgrade+0x740/0x740 [ 791.433765] ? __fget+0x225/0x360 [ 791.438041] ? do_vfs_ioctl+0xff0/0xff0 [ 791.443768] ? security_file_ioctl+0x83/0xb0 [ 791.449758] SyS_ioctl+0x7f/0xb0 [ 791.453801] ? do_vfs_ioctl+0xff0/0xff0 [ 791.458506] do_syscall_64+0x1d5/0x640 [ 791.463063] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 791.469415] RIP: 0033:0x466459 [ 791.473626] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.483301] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 791.492133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 791.501864] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.514389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 791.525966] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:43 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x6ce78102, &(0x7f00000002c0)=""/79) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:45 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) syz_mount_image$pvfs2(&(0x7f00000000c0)='pvfs2\x00', &(0x7f0000000140)='./file3\x00', 0x7, 0x5, &(0x7f0000000540)=[{&(0x7f00000002c0)="eadad384aa2d44c0945dfa3582dc06f10552475ec1e8594f5f712262a526242df03caa6a8d5aabef554ed2b24df0e7eb59ab391fa2504fe89e4b21a2ed0355cb0332ce1e3954499a49b41e7ea591508fb33f2eeb68a02dcc6b019b8d4713ab68f91c9595e0e0f6bd8aeb5a27aaf1b5b40ea2e977bb97034640cf3e0f2af4e4ef5fa1f2cf1099c01481b687e50283a1b333bf7a06b5db0f2a05e1353572c23e4861aeb841963f3ac50359566fcfaa10b30b2b14bb528c807ddb90d2401b4cee01", 0xc0, 0x5}, {&(0x7f0000000180)="eb9e2294635010eb54bdd4fdbfea0e1ea0d231288c4bb92cb04108212431210971a8d9d15bc926c6acc0ede75f29feb2eff92fc60cf5ecedc4af5114ef15211bbce68ec1695003244fba4c8f3908825f4d7a6bf37d0cc240cf89cceb0add22ac569d97b39d", 0x65, 0xf4b}, {&(0x7f0000000380)="af5b616760d6fe29a72afc8031bddc5098cbc633952f9c182ed7dc3cdcab8d565092eda574e0d747d57497c2c0a8599644442e2c5940812ae0f485b334f3b1e44ed2b8a5e1260d4d", 0x48, 0x84}, {&(0x7f0000000400)="30c223", 0x3, 0xfff}, {&(0x7f0000000440)="e1f2f0f732942475e85eaffb603ad17161ceab07eaa0beaf7b89817fdca0b0809fa65f0af2f767ced2800fc51eab5d6e332e0f155b428e55137a19abeda0c0b6dd56e53ea9b32e2fac64ca54ec1c1bdbd0607d47f51779fb716d387c42a3210536f7780c82c3706b0824166a315f8037fb1e71fd53f3326e01caf2210c0110fcf9f85151c02e9b5adef0147f58ace874caf7e9b167f4a6379aaaf14bcdb21f95d2270a48e9877b68d661ed238730948bab22209b918c99acafb3eba6a3c3397cea1cb0f4b9260c044208bcd819b1afc186d8d216e5efe7daf7bddd38dbc6df208290b3", 0xe3, 0x100000000}], 0x2000, &(0x7f00000005c0)={[{'vfat\x00'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise_type='appraise_type=imasig'}]}) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:45 executing program 4 (fault-call:8 fault-nth:53): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:45 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() tkill(r4, 0x401004000000016) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000480)={{0x4, 0x4, 0x3c, 0x8, '\x00', 0x4}, 0x6, 0x100, 0xfffffffd, r4, 0x2, 0x5, 'syz1\x00', &(0x7f0000000100)=['\x00', '/dev/kvm\x00'], 0xa, [], [0x3f, 0x6, 0xffff, 0xef]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 10:57:45 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x60, 0x2b, 0x20, 0x7, 0x4, 0xffff, 0x8, 0x80000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) 10:57:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 793.127516] FAULT_INJECTION: forcing a failure. [ 793.127516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.183760] CPU: 1 PID: 8715 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 793.193360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.205297] Call Trace: [ 793.208429] dump_stack+0x1b2/0x281 [ 793.212518] should_fail.cold+0x10a/0x149 [ 793.217390] __alloc_pages_nodemask+0x22c/0x2720 [ 793.222700] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 793.227785] ? SyS_ioctl+0x7f/0xb0 10:57:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) ftruncate(r2, 0x4000001) sendfile(r2, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) [ 793.231853] ? do_syscall_64+0x1d5/0x640 [ 793.236409] ? trace_hardirqs_on+0x10/0x10 [ 793.241733] ? mark_held_locks+0xa6/0xf0 [ 793.245826] ? retint_kernel+0x2d/0x2d [ 793.250065] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 793.255457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 793.260503] ? fs_reclaim_release+0xd0/0x110 [ 793.265146] ? mmu_topup_memory_caches+0x83/0x300 [ 793.270285] alloc_pages_current+0x155/0x260 [ 793.274945] ? kmem_cache_alloc+0x35f/0x3c0 [ 793.279798] __get_free_pages+0xb/0x40 [ 793.283707] mmu_topup_memory_caches+0x187/0x300 [ 793.288650] kvm_mmu_load+0x1e/0xd00 [ 793.292602] ? kvm_apic_accept_events+0x16f/0x3f0 [ 793.297604] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 793.302950] ? kvm_get_time_scale+0x132/0x190 [ 793.307543] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 793.312756] ? trace_event_raw_event_kvm_mmio+0x270/0x270 [ 793.318681] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 793.323703] ? lock_acquire+0x170/0x3f0 [ 793.327693] ? lock_downgrade+0x740/0x740 [ 793.331997] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 793.336266] kvm_vcpu_ioctl+0x3de/0xc50 [ 793.340353] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 793.346252] ? proc_fail_nth_write+0x7b/0x180 [ 793.350790] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 793.356092] ? trace_hardirqs_on+0x10/0x10 [ 793.360377] ? fsnotify+0x974/0x11b0 [ 793.364111] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 793.369056] ? SyS_write+0x1b7/0x210 [ 793.372791] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 793.378680] do_vfs_ioctl+0x75a/0xff0 [ 793.382495] ? ioctl_preallocate+0x1a0/0x1a0 [ 793.387012] ? lock_downgrade+0x740/0x740 [ 793.391182] ? __fget+0x225/0x360 [ 793.394639] ? do_vfs_ioctl+0xff0/0xff0 [ 793.398637] ? security_file_ioctl+0x83/0xb0 [ 793.403171] SyS_ioctl+0x7f/0xb0 [ 793.406574] ? do_vfs_ioctl+0xff0/0xff0 [ 793.410565] do_syscall_64+0x1d5/0x640 [ 793.414575] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 793.419965] RIP: 0033:0x466459 [ 793.423154] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 793.430867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 793.438227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 793.445499] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.452878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.460156] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:45 executing program 4 (fault-call:8 fault-nth:54): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 793.590604] FAULT_INJECTION: forcing a failure. [ 793.590604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.637042] CPU: 0 PID: 8757 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 793.644877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.654243] Call Trace: [ 793.656852] dump_stack+0x1b2/0x281 [ 793.660539] should_fail.cold+0x10a/0x149 [ 793.664706] __alloc_pages_nodemask+0x22c/0x2720 [ 793.669505] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 793.673653] ? SyS_ioctl+0x7f/0xb0 [ 793.677196] ? do_syscall_64+0x1d5/0x640 [ 793.681283] ? ima_match_policy+0x85a/0x10e0 10:57:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 793.685762] ? trace_hardirqs_on+0x10/0x10 [ 793.690003] ? __lock_acquire+0x5fc/0x3f20 [ 793.694241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 793.699103] ? fs_reclaim_release+0xd0/0x110 [ 793.703519] ? mmu_topup_memory_caches+0x83/0x300 [ 793.708455] alloc_pages_current+0x155/0x260 [ 793.712988] ? kmem_cache_alloc+0x35f/0x3c0 [ 793.717338] __get_free_pages+0xb/0x40 [ 793.721244] mmu_topup_memory_caches+0x187/0x300 [ 793.726022] kvm_mmu_load+0x1e/0xd00 [ 793.729750] ? kvm_apic_accept_events+0x16f/0x3f0 [ 793.734592] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 793.739363] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 793.744310] ? _parse_integer+0xe4/0x130 [ 793.748492] ? vcpu_load+0x18/0x90 [ 793.752059] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 793.757540] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 793.762399] ? lock_acquire+0x170/0x3f0 [ 793.766379] ? lock_downgrade+0x740/0x740 [ 793.770889] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 793.775065] kvm_vcpu_ioctl+0x3de/0xc50 [ 793.779039] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 793.784947] ? proc_fail_nth_write+0x7b/0x180 [ 793.789458] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 793.794400] ? trace_hardirqs_on+0x10/0x10 [ 793.798640] ? fsnotify+0x974/0x11b0 [ 793.802357] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 793.807369] ? SyS_write+0x1b7/0x210 [ 793.811079] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 793.817304] do_vfs_ioctl+0x75a/0xff0 [ 793.821100] ? ioctl_preallocate+0x1a0/0x1a0 [ 793.825505] ? lock_downgrade+0x740/0x740 [ 793.829658] ? __fget+0x225/0x360 [ 793.835188] ? do_vfs_ioctl+0xff0/0xff0 [ 793.839160] ? security_file_ioctl+0x83/0xb0 [ 793.843614] SyS_ioctl+0x7f/0xb0 [ 793.846971] ? do_vfs_ioctl+0xff0/0xff0 [ 793.850938] do_syscall_64+0x1d5/0x640 [ 793.854821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 793.860015] RIP: 0033:0x466459 [ 793.863303] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.871182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 793.878469] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 793.885848] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.893113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.900396] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:46 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x40, 0x7, 0x6, 0x2b5, 0x0, 0x980000000, 0xe4, 0x8}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:57:46 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:46 executing program 4 (fault-call:8 fault-nth:55): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:46 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0xad, 0x6, 0xff, 0x0, 0x0, 0xe58, 0x840, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000100), 0xb}, 0x1408, 0x929a, 0x9c, 0x3, 0x2, 0x3, 0x458a}, 0xffffffffffffffff, 0x0, r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x101000, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)={0x57, 0x7d, 0x2, {0x0, 0x50, 0x0, 0x9, {0xb6, 0x0, 0x8}, 0x2080000, 0xdc, 0x8001, 0x80000000, 0x9, '/dev/kvm\x00', 0x2, '})', 0x9, '/dev/kvm\x00', 0x9, '/dev/kvm\x00'}}, 0x57) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) [ 794.235493] FAULT_INJECTION: forcing a failure. [ 794.235493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.248257] CPU: 1 PID: 8804 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 794.256171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.265529] Call Trace: [ 794.268127] dump_stack+0x1b2/0x281 [ 794.271763] should_fail.cold+0x10a/0x149 [ 794.275934] __alloc_pages_nodemask+0x22c/0x2720 [ 794.280699] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 794.284876] ? SyS_ioctl+0x7f/0xb0 [ 794.288441] ? do_syscall_64+0x1d5/0x640 [ 794.292530] ? finish_task_switch+0x178/0x610 [ 794.297026] ? trace_hardirqs_on+0x10/0x10 [ 794.301266] ? kvm_arch_vcpu_load+0x2c4/0x750 [ 794.305761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 794.310610] ? finish_task_switch+0x218/0x610 [ 794.315111] ? fs_reclaim_release+0xd0/0x110 [ 794.319539] ? mmu_topup_memory_caches+0x83/0x300 [ 794.324391] alloc_pages_current+0x155/0x260 [ 794.328798] ? kmem_cache_alloc+0x35f/0x3c0 [ 794.333134] __get_free_pages+0xb/0x40 [ 794.337023] mmu_topup_memory_caches+0x187/0x300 [ 794.341784] ? retint_kernel+0x2d/0x2d [ 794.345682] kvm_mmu_load+0x1e/0xd00 [ 794.349394] ? kvm_arch_vcpu_ioctl_run+0x1a1/0x5ae0 [ 794.354416] ? kvm_cpu_has_injectable_intr+0x24c/0x2c0 [ 794.359695] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 794.364626] ? _parse_integer+0xe4/0x130 [ 794.368713] ? vcpu_load+0x18/0x90 [ 794.372279] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 794.377745] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 794.382608] ? lock_acquire+0x170/0x3f0 [ 794.386604] ? lock_downgrade+0x740/0x740 [ 794.390759] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 794.394903] kvm_vcpu_ioctl+0x3de/0xc50 [ 794.398878] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 794.404762] ? proc_fail_nth_write+0x7b/0x180 [ 794.409262] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 794.414193] ? trace_hardirqs_on+0x10/0x10 [ 794.418430] ? fsnotify+0x974/0x11b0 [ 794.422147] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 794.427075] ? SyS_write+0x1b7/0x210 [ 794.430790] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 794.436679] do_vfs_ioctl+0x75a/0xff0 [ 794.440495] ? ioctl_preallocate+0x1a0/0x1a0 [ 794.444907] ? lock_downgrade+0x740/0x740 [ 794.449080] ? __fget+0x225/0x360 [ 794.452537] ? do_vfs_ioctl+0xff0/0xff0 [ 794.456516] ? security_file_ioctl+0x83/0xb0 [ 794.461387] SyS_ioctl+0x7f/0xb0 [ 794.464789] ? do_vfs_ioctl+0xff0/0xff0 [ 794.468777] do_syscall_64+0x1d5/0x640 [ 794.472678] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 794.477873] RIP: 0033:0x466459 [ 794.481069] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.488784] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 794.496259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 794.503530] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.510800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.518076] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:48 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/mcfilter6\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x101000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696e6465783d6f6e2c6e66735f6578706f72743d6f662c6d65617b7572652c736d61636b66736861743d402e212dffffffff61636b66737472616e736d7574653d5e2c726f6f74636f6e7465787452756e636f6e66696e65645f752c6f626a5f757365723d3526252f232c646f6e745f956561737572652c61707072616973652c6673636f6e746578743d73797374656d5f752c736d61636b97f2c29342b82e7666"]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x3, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r5 = dup2(r0, r3) fcntl$setlease(r5, 0x400, 0x2) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:48 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:48 executing program 4 (fault-call:8 fault-nth:56): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:48 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c6f1bdf0110001fff000000000000000097c000"/32, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000700ffffffff"], 0x3c}}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4200, r6, 0x200, 0x100059) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:48 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x204b83, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000002c0)="66465a479db90f0800000f32c74424000c010000c7442402d6fb59c8ff1c24660f38814b0066baf80cb870b66d86ef66bafc0cb046ee66b840000f00d80fc77f7ac4c13972e1f766b82e000f00d0", 0x4e}], 0x1, 0x17, &(0x7f0000000340)=[@flags={0x3, 0x28101}, @dstype0={0x6, 0x2}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 796.172072] FAULT_INJECTION: forcing a failure. [ 796.172072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.243974] CPU: 1 PID: 8860 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 796.251824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.261181] Call Trace: [ 796.263787] dump_stack+0x1b2/0x281 [ 796.267416] should_fail.cold+0x10a/0x149 [ 796.271590] __alloc_pages_nodemask+0x22c/0x2720 [ 796.276474] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 796.280625] ? SyS_ioctl+0x7f/0xb0 [ 796.284183] ? do_syscall_64+0x1d5/0x640 [ 796.288257] ? ima_match_policy+0x85a/0x10e0 [ 796.292687] ? trace_hardirqs_on+0x10/0x10 [ 796.296948] ? __lock_acquire+0x5fc/0x3f20 [ 796.301188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 796.306048] ? fs_reclaim_release+0xd0/0x110 [ 796.310475] ? mmu_topup_memory_caches+0x83/0x300 [ 796.315346] alloc_pages_current+0x155/0x260 [ 796.319842] ? kmem_cache_alloc+0x35f/0x3c0 [ 796.324164] __get_free_pages+0xb/0x40 [ 796.328069] mmu_topup_memory_caches+0x187/0x300 [ 796.332852] kvm_mmu_load+0x1e/0xd00 [ 796.336583] ? kvm_apic_accept_events+0x16f/0x3f0 [ 796.341440] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 796.346196] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 796.351124] ? _parse_integer+0xe4/0x130 [ 796.355204] ? vcpu_load+0x18/0x90 [ 796.358745] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 796.364303] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 796.369239] ? lock_acquire+0x170/0x3f0 [ 796.373223] ? lock_downgrade+0x740/0x740 [ 796.377399] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 796.381547] kvm_vcpu_ioctl+0x3de/0xc50 [ 796.385523] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 796.391410] ? proc_fail_nth_write+0x7b/0x180 [ 796.395907] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 796.400839] ? trace_hardirqs_on+0x10/0x10 [ 796.422279] ? fsnotify+0x974/0x11b0 [ 796.426000] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 796.430934] ? SyS_write+0x1b7/0x210 [ 796.434653] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 796.440566] do_vfs_ioctl+0x75a/0xff0 [ 796.444372] ? ioctl_preallocate+0x1a0/0x1a0 [ 796.448786] ? lock_downgrade+0x740/0x740 [ 796.452940] ? __fget+0x225/0x360 [ 796.456392] ? do_vfs_ioctl+0xff0/0xff0 [ 796.460369] ? security_file_ioctl+0x83/0xb0 [ 796.464795] SyS_ioctl+0x7f/0xb0 [ 796.468160] ? do_vfs_ioctl+0xff0/0xff0 [ 796.472141] do_syscall_64+0x1d5/0x640 [ 796.476036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 796.481238] RIP: 0033:0x466459 [ 796.484431] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 10:57:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') getdents64(r1, &(0x7f00000000c0)=""/25, 0x19) [ 796.492134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 796.499400] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 796.506667] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.513936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.521204] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:48 executing program 4 (fault-call:8 fault-nth:57): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:48 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 10:57:48 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 796.652013] FAULT_INJECTION: forcing a failure. [ 796.652013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.679864] CPU: 1 PID: 8897 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 796.687696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.697054] Call Trace: [ 796.699645] dump_stack+0x1b2/0x281 [ 796.703285] should_fail.cold+0x10a/0x149 [ 796.707533] __alloc_pages_nodemask+0x22c/0x2720 [ 796.712302] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 796.716450] ? SyS_ioctl+0x7f/0xb0 [ 796.719990] ? do_syscall_64+0x1d5/0x640 [ 796.724152] ? trace_hardirqs_on+0x10/0x10 [ 796.728394] ? __lock_acquire+0x5fc/0x3f20 [ 796.732639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 796.737517] ? fs_reclaim_release+0xd0/0x110 [ 796.741932] ? mmu_topup_memory_caches+0x83/0x300 [ 796.746809] alloc_pages_current+0x155/0x260 [ 796.751223] ? kmem_cache_alloc+0x35f/0x3c0 [ 796.756949] __get_free_pages+0xb/0x40 [ 796.760851] mmu_topup_memory_caches+0x187/0x300 [ 796.765622] kvm_mmu_load+0x1e/0xd00 [ 796.769345] ? kvm_apic_accept_events+0x16f/0x3f0 [ 796.774199] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 796.778969] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 796.783934] ? _parse_integer+0xe4/0x130 [ 796.788099] ? vcpu_load+0x18/0x90 [ 796.791896] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 796.797713] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 796.802567] ? lock_acquire+0x170/0x3f0 [ 796.806549] ? lock_downgrade+0x740/0x740 [ 796.811576] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 796.815725] kvm_vcpu_ioctl+0x3de/0xc50 [ 796.819698] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 796.825606] ? proc_fail_nth_write+0x7b/0x180 [ 796.830101] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 796.835033] ? trace_hardirqs_on+0x10/0x10 [ 796.839278] ? fsnotify+0x974/0x11b0 [ 796.843002] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 796.847940] ? SyS_write+0x1b7/0x210 [ 796.851660] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 796.857556] do_vfs_ioctl+0x75a/0xff0 [ 796.861393] ? ioctl_preallocate+0x1a0/0x1a0 [ 796.865805] ? lock_downgrade+0x740/0x740 [ 796.869957] ? __fget+0x225/0x360 [ 796.873438] ? do_vfs_ioctl+0xff0/0xff0 [ 796.877440] ? security_file_ioctl+0x83/0xb0 [ 796.881860] SyS_ioctl+0x7f/0xb0 [ 796.885224] ? do_vfs_ioctl+0xff0/0xff0 [ 796.889202] do_syscall_64+0x1d5/0x640 [ 796.893141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 796.898351] RIP: 0033:0x466459 10:57:48 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r1, &(0x7f0000000340)={0x38, 0x3, 0x20, 0x0, 0x80000000, 0x4, 0x7, 0x4, 0x400, 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x5, 0x8000000, 0x5, 0x83e, 0xffffffffffffff7f, 0x7fff, 0x9, 0x8000, 0xfffffffd}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x77, 0x8, 0x20, 0x1, 0x0, 0x32, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x10042, 0x100, 0x3, 0x8, 0x1ff, 0x2, 0x800}, 0x0, 0xf, 0xffffffffffffffff, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x3}]}, @volatile={0x8}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x4}, {0x7, 0x3}, {0x7}, {0x7, 0x2}]}, @datasec={0x2, 0x4, 0x0, 0xf, 0x2, [{0x4, 0xfffffff7, 0x200}, {0x5, 0xb2, 0x8000}, {0x3, 0x4, 0x401}, {0x3, 0xc853, 0x1ff}], "2910"}, @datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x2, 0x8001, 0xc0}, {0x1, 0x5, 0xd9}, {0x4, 0x4, 0x3232}], "ddb08e"}]}, {0x0, [0x61, 0x0, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f00000005c0)=""/226, 0x104, 0xe2}, 0x20) close(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x1, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x2) r5 = creat(&(0x7f0000000100)='./file3\x00', 0xb2) renameat(r5, &(0x7f0000000140)='./file3\x00', r4, &(0x7f0000000200)='./file0\x00') 10:57:48 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 796.901554] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.909522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 796.916810] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 796.924079] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.931348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.939075] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:49 executing program 4 (fault-call:8 fault-nth:58): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000600)=0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x47183fc7, 0xc1028, 0xb39231877c654f59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x48010, 0x0, 0x0, 0x0, 0xbb64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:57:49 executing program 2: r0 = syz_mount_image$udf(&(0x7f00000000c0)='udf\x00', &(0x7f0000000140)='./file3\x00', 0x1, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="a218266da4d11985e6c2694b726436d321262f5e2bedf0258b7100370fb840101f083236255aa800243303d938030ad2dff614d0a4dacaf7a3a300eedde75379028197c34f95927a2db0266bccb8d3da1a46b912625abc5d77f37f3f45fab6a48e766e28caa0bf16716a40", 0x6b, 0x8}, {&(0x7f00000002c0)="9533347638e3737f383c5f6a1a63ace8b0460e48a7b9c37f19659be51782a8e748aa6bd8e76a15bf24ff8487c0a58b88ff509d84b83a7214b2757d1e484314f73b5f42ef4ccd3563a68b83fa4443b63af4620bea13caec006491602dcd905ec3ee", 0x61, 0x5}], 0x409, &(0x7f0000000380)={[{@noadinicb='noadinicb'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}]}) fanotify_mark(0xffffffffffffffff, 0x12, 0xc000000, r0, &(0x7f0000000440)='./file3\x00') r1 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r1, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r1, &(0x7f0000000100)='./file3\x00', r1, &(0x7f0000000200)='./file0\x00') [ 797.183733] FAULT_INJECTION: forcing a failure. [ 797.183733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.234925] CPU: 0 PID: 8947 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 797.242775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.252134] Call Trace: [ 797.254731] dump_stack+0x1b2/0x281 [ 797.258358] should_fail.cold+0x10a/0x149 [ 797.262522] __alloc_pages_nodemask+0x22c/0x2720 [ 797.267283] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 797.271436] ? SyS_ioctl+0x7f/0xb0 [ 797.274968] ? do_syscall_64+0x1d5/0x640 [ 797.279027] ? ima_match_policy+0x85a/0x10e0 [ 797.283434] ? trace_hardirqs_on+0x10/0x10 [ 797.287670] ? __lock_acquire+0x5fc/0x3f20 [ 797.291903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 797.296746] ? fs_reclaim_release+0xd0/0x110 [ 797.301154] ? mmu_topup_memory_caches+0x83/0x300 [ 797.306011] alloc_pages_current+0x155/0x260 [ 797.310432] ? kmem_cache_alloc+0x35f/0x3c0 [ 797.314838] __get_free_pages+0xb/0x40 [ 797.318724] mmu_topup_memory_caches+0x187/0x300 [ 797.323507] kvm_mmu_load+0x1e/0xd00 [ 797.327229] ? kvm_apic_accept_events+0x16f/0x3f0 [ 797.332068] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 797.336843] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 797.341770] ? _parse_integer+0xe4/0x130 [ 797.345825] ? vcpu_load+0x18/0x90 [ 797.349403] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 797.354854] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 797.359693] ? lock_acquire+0x170/0x3f0 [ 797.363661] ? lock_downgrade+0x740/0x740 [ 797.367823] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 797.371960] kvm_vcpu_ioctl+0x3de/0xc50 [ 797.375930] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 797.381806] ? proc_fail_nth_write+0x7b/0x180 [ 797.386336] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 797.391261] ? trace_hardirqs_on+0x10/0x10 [ 797.395492] ? fsnotify+0x974/0x11b0 [ 797.399196] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 797.404122] ? SyS_write+0x1b7/0x210 [ 797.407832] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 797.413717] do_vfs_ioctl+0x75a/0xff0 [ 797.417605] ? ioctl_preallocate+0x1a0/0x1a0 [ 797.422051] ? lock_downgrade+0x740/0x740 [ 797.426194] ? __fget+0x225/0x360 [ 797.429638] ? do_vfs_ioctl+0xff0/0xff0 [ 797.433629] ? security_file_ioctl+0x83/0xb0 [ 797.438050] SyS_ioctl+0x7f/0xb0 [ 797.441419] ? do_vfs_ioctl+0xff0/0xff0 [ 797.445405] do_syscall_64+0x1d5/0x640 [ 797.449292] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 797.454918] RIP: 0033:0x466459 [ 797.458092] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.465795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 797.473070] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 797.480332] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.487595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.494870] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 797.613843] UDF-fs: bad mount option "mask=^MAY_EXEC" or missing value 10:57:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x20, 0x75, 0x8, 0x5, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x1, 0x1}, 0x326, 0x4, 0x80, 0x2, 0x3, 0x69, 0x52}, r4, 0xc, r5, 0x2) 10:57:49 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:49 executing program 4 (fault-call:8 fault-nth:59): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@mpls_getroute={0xc4, 0x1a, 0x200, 0x70bd27, 0x25dfdbfc, {0x1c, 0x14, 0x10, 0x1, 0xff, 0x0, 0xfd, 0x1, 0x1800}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_DST={0x8, 0x1, {0xf35d}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x31, 0x8, r4}}, @RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe96}, {0x9}, {0x9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x8001}, {0x8001, 0x0, 0x1}, {0x5}, {0xb77}, {0x2, 0x0, 0x1}, {0x1f}, {0x200, 0x0, 0x1}, {0x3ff}, {0xb2, 0x0, 0x1}, {0x1000}, {0x8000}, {0x7}, {0x829, 0x0, 0x1}, {0xc0000}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfff}, {0x2, 0x0, 0x1}, {0x401}, {0x7, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x1}, {0x930, 0x0, 0x1}, {0x3}]}, @RTA_DST={0x8, 0x1, {0x8}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x9805863fbdd1530d) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:49 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x21}, 0x0, 0x800000000, 0xfffffffe, 0x0, 0x9}, r1, 0x0, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:57:49 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x0, 0x0, 0x3ad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) [ 797.812365] FAULT_INJECTION: forcing a failure. [ 797.812365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.841362] CPU: 1 PID: 9002 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 797.849191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.858548] Call Trace: [ 797.861138] dump_stack+0x1b2/0x281 [ 797.864768] should_fail.cold+0x10a/0x149 [ 797.868922] __alloc_pages_nodemask+0x22c/0x2720 [ 797.873676] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 797.877829] ? SyS_ioctl+0x7f/0xb0 [ 797.881367] ? do_syscall_64+0x1d5/0x640 [ 797.885429] ? ima_match_policy+0x85a/0x10e0 [ 797.889864] ? trace_hardirqs_on+0x10/0x10 [ 797.894111] ? __lock_acquire+0x5fc/0x3f20 [ 797.898360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 797.903234] ? fs_reclaim_release+0xd0/0x110 [ 797.907652] ? mmu_topup_memory_caches+0x83/0x300 [ 797.912498] alloc_pages_current+0x155/0x260 [ 797.916906] ? kmem_cache_alloc+0x35f/0x3c0 [ 797.921250] __get_free_pages+0xb/0x40 [ 797.925140] mmu_topup_memory_caches+0x187/0x300 [ 797.929906] kvm_mmu_load+0x1e/0xd00 [ 797.933634] ? kvm_apic_accept_events+0x16f/0x3f0 [ 797.938487] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 797.943267] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 797.948205] ? _parse_integer+0xe4/0x130 [ 797.952273] ? vcpu_load+0x18/0x90 [ 797.955817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 797.961278] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 797.966119] ? lock_acquire+0x170/0x3f0 [ 797.970098] ? lock_downgrade+0x740/0x740 [ 797.974257] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 797.978495] kvm_vcpu_ioctl+0x3de/0xc50 [ 797.982482] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 797.988371] ? proc_fail_nth_write+0x7b/0x180 [ 797.992872] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 797.997822] ? trace_hardirqs_on+0x10/0x10 [ 798.002079] ? fsnotify+0x974/0x11b0 [ 798.005803] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 798.010746] ? SyS_write+0x1b7/0x210 [ 798.014516] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 798.020497] do_vfs_ioctl+0x75a/0xff0 [ 798.024302] ? ioctl_preallocate+0x1a0/0x1a0 [ 798.028718] ? lock_downgrade+0x740/0x740 [ 798.032876] ? __fget+0x225/0x360 [ 798.036329] ? do_vfs_ioctl+0xff0/0xff0 [ 798.040307] ? security_file_ioctl+0x83/0xb0 [ 798.044718] SyS_ioctl+0x7f/0xb0 [ 798.048080] ? do_vfs_ioctl+0xff0/0xff0 [ 798.052055] do_syscall_64+0x1d5/0x640 [ 798.055957] entry_SYSCALL_64_after_hwframe+0x46/0xbb 10:57:49 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0xd9f, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000001400)=""/84) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000001480)=""/117) r9 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000001480)=""/117) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b80)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="a277cd7ac4d3f2935bee41f92b218f00fed954c6f2eac6fddd45f669f7fc5e972bb576d280541b5f569651e0fd98c21c794608241d490aff5bcc7218a36e6420e6519714f6eb04764c9d4c89c43e2820fe9ac03222909957e8767bd82d569fcadacf78d5f2847c20d9fdcc94781953526eb596819d5ca614e3c9998ad925b127fbd1", 0x82}, {&(0x7f0000000140)="449af4d9f3720035a0ebd6802fe841f4d467e5cf22612c1f1256dac6f6224ef40d67eae4e5f315ceb19ba0a9ebea30b59925c9709aa1dce6797100d11ebbee1c22695785d1f7e5d16cce500ef146f9a819f4899df43a35c7de78a76b44b9b0632b810f6662d42bb608ecfc91d9f3339628bdfc5a44247b51b4f453f5fce4074e800cf2e9b1b71a6be33d79e29da2c75d97b4869f9dd662a296ee73d69a73d42bc778c0b65378d6cf4af8ad57", 0xac}, {&(0x7f0000000200)="2f2c77e67194c97f0208e74fbc39553dbef5db79e9a27cb3b96bb8d28e344b696955cc5a8dcec368352f130825f92f38cff4359cb81166f4e60c3dd6416c9c645111916f060e3f317312af47e89682149ab8e0e56ba78e578473ad3763cbab8e4c4e129332ccb0e84a65521a42682f1fae60140686badb3038a0270dd2c5ec0c3cf7967bfd28af68562934ab00037151f93ec7345215279f95789124483df6ada1e62225d8bc", 0xa6}, {0x0}], 0x4, &(0x7f0000000400), 0x0, 0x4000}, {&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000540)="01dd4a9bdf90b8177079cabc2881a97ca26196840eae9f52abfeec9f01c546a08cf5a80ca3f13cdbfc194bbd11d529194be69cb4e716c93876eb1fe8389d9fc69186bb806b258c92614006688d22c3d6691d00adf14c44c900b08ed908aefaa7e1dcd3cc34b5a60a02fe", 0x6a}, {&(0x7f00000005c0)="5135f5cf7b6019c4116ea96ab21f68513795fad4303510476f367d6e37bf658a95e486631bdd7c37d967d41e9e427e99e3ce7a2ea5a861df432fff61dbcf40846c89d0f8ec240ca8f0e288c51f316985773806ad564febe99b57a7665a864aa8e9f1fbd9db5f6f4a3053e27ccfd7f246b185eb63e32e79953a1ea1de2e90789d7dba22c7d5644af745ab532c", 0x8c}, {0x0}, {&(0x7f0000000740)="3e68541bc62e2c4c495bb7c4ca49cf2ca8e79c4ac7f903a0cefd7dc6ef54d23fd3cb25a9a1e6574738e5145c703bd000fc53256b4abe36699740f2b4665a726692f0571507b08b59723c1200a7ba3b16dc2e329d731aa5c0e97cd9c40acda9a9b5c66dcbe2468c764265b7abe94257b4cfc0898ad8047f76e5a0a6e06df421f4e36f", 0x82}, {&(0x7f0000001d00)="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", 0xe4e}, {&(0x7f0000000800)="0c4031c3a410a4be38c89a52232518d232f9ea60b461a77065a43b0a0714f64cc9ec8be24a12e27370f922f6639630e6637375ce3772f23712225069e536000b687294a58092840803668ca70e412786984d46978b64e760d1cb", 0x5a}], 0x6, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20, 0x54}, {&(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30, 0x880}, {&(0x7f0000003040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f00000030c0)="af2ddca5f2f2aa3a3a7ab220c17e040eba2b992ed4be1f32f898f0be1f1da94c169491d2ac11aa92e5abdc5443b819ef98c6881ac4e63c91224ebd883a11d6c69f173f88b45cdf580408d36144baa087c7bdd1f7914159243da3bf24c3ba940a15d50e210de51130eca6ba", 0x6b}, {&(0x7f0000003140)}, {0x0}], 0x3, &(0x7f0000002f00)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000d300a5ce7cc28aafe523f9fa63a33434b8b0cd5e614c28f6c80b7a3d575fa2479c098b1eeaaf064bfe74f29fd41d0c711fa76c7a2f6c744a411ebfb436e9f097de63641058151c3bfc0a1feeaca7497bbbf62bd49a19064997f2f45c5fb685c33fc18bf0"], 0x30, 0x2000080}, {&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003340)="09ec30ebe387d24875080e24346b630ce927c2255c006c11f9f49b403701ebcb", 0x20}], 0x1, &(0x7f0000003580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0, 0x8000}, {&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003840)='\b', 0x1}, {&(0x7f0000003880)="c055d1c5231df04dad1867bd4b1d90c2c515cb1fb47bd941361de572f92e6d1c9516fbb4806112eb3dc3d4edb3f780e8bf387c0f0ba2a4a659566ad414e5ce539e698b445a73071ee04d104c3b428da78b9cbcb829e676016bbf5e32e33dc22ba68d0e46be0970cf849c9d217a451537fa2a2ea6e5439244b8fe6e23e050823a4cf9d71c57e9417c4b0888ba2d484c4f88352dff041a209171d40a6d69741ba43b298d945ca344fd209f61ac618778e1783e8d7f748cbc5981f7a3ea6bc459ba7bd11b1ccc08e444dfa9c1329b8b830f6a2880caff0b4f3b2195b635eecc9533eab18e348d", 0xe5}, {&(0x7f0000003980)="209268cebdb16549f099e2d11802d018652bf3940eb280326cb515737020bd", 0x1f}], 0x4, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x90, 0x81}, {0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000048c0)="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", 0xffb}, {&(0x7f00000058c0)="330716fa74e76f0309ab4939fecd1328ef279677696dce9c54d549c72ca21fd8f6ec803755670c67d1b44d5d6263a61517ef901b3041e9d2ced2cf2a91d43b59eb7716328860be8fce14529d21c22a85ab3d6435c15112b168666882718979b6b08d5c091aa8e1a0d8aed072cb01e93aa00cb16ace7df7ac1e", 0x79}], 0x2, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0, 0x40}], 0x7, 0xc000) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000180)="8a507edadcf43e02", 0x8, 0x1}, {&(0x7f0000001980)="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", 0x1000, 0xffffffffffffffc0}], 0x1000000, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x35, 0x2d, 0x78, 0x78, 0x34]}}, {@gid={'gid', 0x3d, r7}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@smackfsdef={'smackfsdef'}}]}) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:50 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:50 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) rt_tgsigqueueinfo(r4, r0, 0x2e, &(0x7f0000000140)={0x32, 0xbc0f, 0x100}) r5 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 798.061147] RIP: 0033:0x466459 [ 798.064349] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.072078] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 798.079380] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 798.087088] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.094371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.101644] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:50 executing program 4 (fault-call:8 fault-nth:60): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r4) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:50 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r6 = gettid() ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x3ff, 0x2, 0x6, 0x8001, 0x1, 0x3321c13a, 0x401, 0x3, 0x3, 0x272, 0x100000000, 0x5, 0x1, 0x100, 0x20, 0x7fffffff], 0x4000, 0xbc106}) tkill(r6, 0x401004000000016) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x7f, 0x48, [], 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xaf, 0xf1, 0x8, 0x1f, 0x0, 0x101, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1622, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x18000, 0x4, 0x6, 0x2, 0x4, 0xe7, 0xf7b}, r6, 0xc, r5, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 798.297900] FAULT_INJECTION: forcing a failure. [ 798.297900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.318376] CPU: 1 PID: 9053 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 798.326193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.335555] Call Trace: [ 798.338167] dump_stack+0x1b2/0x281 [ 798.341803] should_fail.cold+0x10a/0x149 [ 798.345959] __alloc_pages_nodemask+0x22c/0x2720 [ 798.350715] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 798.354860] ? SyS_ioctl+0x7f/0xb0 [ 798.358483] ? do_syscall_64+0x1d5/0x640 [ 798.362547] ? ima_match_policy+0x85a/0x10e0 [ 798.366955] ? trace_hardirqs_on+0x10/0x10 [ 798.371192] ? __lock_acquire+0x5fc/0x3f20 [ 798.375459] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 798.380311] ? cache_alloc_refill+0x1da/0x350 [ 798.384822] ? fs_reclaim_release+0xd0/0x110 [ 798.389243] ? mmu_topup_memory_caches+0x83/0x300 [ 798.394090] alloc_pages_current+0x155/0x260 [ 798.398524] ? kmem_cache_alloc+0x35f/0x3c0 [ 798.402855] __get_free_pages+0xb/0x40 [ 798.406749] mmu_topup_memory_caches+0x187/0x300 [ 798.411538] kvm_mmu_load+0x1e/0xd00 [ 798.415290] ? kvm_apic_accept_events+0x16f/0x3f0 [ 798.420146] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 798.424910] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 798.429946] ? _parse_integer+0xe4/0x130 [ 798.434008] ? vcpu_load+0x18/0x90 [ 798.437560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 798.443110] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 798.447950] ? lock_acquire+0x170/0x3f0 [ 798.452797] ? lock_downgrade+0x740/0x740 [ 798.456953] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 798.461099] kvm_vcpu_ioctl+0x3de/0xc50 [ 798.465080] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 798.470967] ? proc_fail_nth_write+0x7b/0x180 [ 798.475468] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 798.480659] ? trace_hardirqs_on+0x10/0x10 [ 798.484899] ? fsnotify+0x974/0x11b0 [ 798.488615] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 798.493546] ? SyS_write+0x1b7/0x210 [ 798.497542] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 798.503458] do_vfs_ioctl+0x75a/0xff0 [ 798.507261] ? ioctl_preallocate+0x1a0/0x1a0 [ 798.511673] ? lock_downgrade+0x740/0x740 [ 798.515834] ? __fget+0x225/0x360 [ 798.519293] ? do_vfs_ioctl+0xff0/0xff0 [ 798.523267] ? security_file_ioctl+0x83/0xb0 [ 798.527679] SyS_ioctl+0x7f/0xb0 [ 798.531128] ? do_vfs_ioctl+0xff0/0xff0 [ 798.535281] do_syscall_64+0x1d5/0x640 [ 798.539183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 798.544374] RIP: 0033:0x466459 10:57:50 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 798.547564] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.555278] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 798.562985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 798.570282] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.577548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.584814] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:50 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:50 executing program 4 (fault-call:8 fault-nth:61): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 798.787452] FAULT_INJECTION: forcing a failure. [ 798.787452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.816792] CPU: 0 PID: 9087 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 798.824625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.833982] Call Trace: 10:57:50 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x400) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 798.836573] dump_stack+0x1b2/0x281 [ 798.840202] should_fail.cold+0x10a/0x149 [ 798.844367] __alloc_pages_nodemask+0x22c/0x2720 [ 798.849128] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 798.853285] ? SyS_ioctl+0x7f/0xb0 [ 798.856828] ? do_syscall_64+0x1d5/0x640 [ 798.860907] ? ima_match_policy+0x85a/0x10e0 [ 798.865730] ? trace_hardirqs_on+0x10/0x10 [ 798.865743] ? __lock_acquire+0x5fc/0x3f20 [ 798.865754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 798.865767] ? fs_reclaim_release+0xd0/0x110 [ 798.865782] ? mmu_topup_memory_caches+0x83/0x300 [ 798.865793] alloc_pages_current+0x155/0x260 [ 798.865802] ? kmem_cache_alloc+0x35f/0x3c0 [ 798.865810] __get_free_pages+0xb/0x40 [ 798.865818] mmu_topup_memory_caches+0x187/0x300 [ 798.865830] kvm_mmu_load+0x1e/0xd00 [ 798.865839] ? kvm_apic_accept_events+0x16f/0x3f0 [ 798.865848] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 798.865859] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 798.865870] ? _parse_integer+0xe4/0x130 [ 798.865880] ? vcpu_load+0x18/0x90 [ 798.865891] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 798.865903] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 798.865910] ? lock_acquire+0x170/0x3f0 [ 798.865918] ? lock_downgrade+0x740/0x740 [ 798.865930] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 798.865937] kvm_vcpu_ioctl+0x3de/0xc50 10:57:51 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r0, 0xe, 0xffffffffffffffff, 0x3) r2 = gettid() tkill(r2, 0x401004000000016) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x7f, 0xd3, 0x0, 0x0, 0x0, 0x3d, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfff}, 0x442b, 0xd8c8, 0x3, 0x4, 0x400, 0x6, 0xfffc}, r2, 0x1, r1, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x8, 0x1, 0xba, 0x1, 0x0, 0x4, 0x40, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x8}, 0xa200, 0x9, 0x8001, 0x2, 0x7, 0x10001, 0x1000}, r2, 0x4, r1, 0xb) 10:57:51 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:51 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) close(r1) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e9b4dc8726531207666617400207666617400206d66619d0c205d20207666617400207601a0a76e7b46cf6161740020245e1fc291041863cc7e381d23b04d4f838808674b86424d1e1d21858b24f3f168a13e99660f5567ec146c25360d4c29fa2297964522f88f659f159b53451db56962941e74e422e6a2a17f4ede3f724a40a8314414c6ac4cd0991b4469bf90dc042ccea16d5672a6a858928d8b831dad7db76d09bc1c876547efc62311f987a078f2bfa91eb41b3719c80ae7bae86af28a26567f53b4978581e000"/218], 0x35) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_mount_image$fuse(&(0x7f00000001c0)='fuse\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x420, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x31e5}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure='measure'}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@pcr={'pcr', 0x3d, 0x16}}]}}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000440)=0x2) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) r3 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="c90b566ea0b2a86d19287a6f216b78b82b255a03bce2af7f4a92928bc9d648f80e150aa83d9223f3c41effc41078c464630dbc824a7756edb28df7346a7013d74475967821d49840cba2e4d12e16b7132704347673a48dd21338a33492d0f1bcfa04345067a0587f79510e32469d9d75", @ANYRES16, @ANYRESDEC, @ANYRES64=r0, @ANYRES16, @ANYRES16, @ANYRES64=r0, @ANYRES64]) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r5) mkdirat(r3, &(0x7f0000000140)='./file3\x00', 0x0) renameat(r3, &(0x7f0000000100)='./file3\x00', r3, &(0x7f0000000200)='./file0\x00') 10:57:51 executing program 4 (fault-call:8 fault-nth:62): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 798.865946] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 798.865956] ? proc_fail_nth_write+0x7b/0x180 [ 798.865965] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 798.865973] ? trace_hardirqs_on+0x10/0x10 [ 798.865985] ? fsnotify+0x974/0x11b0 [ 798.865992] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 798.866002] ? SyS_write+0x1b7/0x210 [ 798.866012] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 798.866021] do_vfs_ioctl+0x75a/0xff0 [ 798.866031] ? ioctl_preallocate+0x1a0/0x1a0 [ 798.866038] ? lock_downgrade+0x740/0x740 [ 798.866050] ? __fget+0x225/0x360 [ 798.866058] ? do_vfs_ioctl+0xff0/0xff0 [ 798.866066] ? security_file_ioctl+0x83/0xb0 10:57:51 executing program 4 (fault-call:8 fault-nth:63): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 798.866075] SyS_ioctl+0x7f/0xb0 [ 798.866082] ? do_vfs_ioctl+0xff0/0xff0 10:57:51 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 798.866091] do_syscall_64+0x1d5/0x640 [ 798.866105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 798.866113] RIP: 0033:0x466459 10:57:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') [ 798.866118] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.866128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 798.866133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 798.866137] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.866142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.866147] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 799.119072] FAULT_INJECTION: forcing a failure. [ 799.119072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.119091] CPU: 0 PID: 9121 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 799.119096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.119100] Call Trace: [ 799.119116] dump_stack+0x1b2/0x281 [ 799.119129] should_fail.cold+0x10a/0x149 [ 799.119144] __alloc_pages_nodemask+0x22c/0x2720 [ 799.119153] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 799.119162] ? SyS_ioctl+0x7f/0xb0 [ 799.119170] ? do_syscall_64+0x1d5/0x640 [ 799.119182] ? ima_match_policy+0x85a/0x10e0 [ 799.119195] ? mark_held_locks+0xa6/0xf0 [ 799.119205] ? retint_kernel+0x2d/0x2d [ 799.119214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 799.119222] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.119234] ? retint_kernel+0x2d/0x2d [ 799.119247] ? alloc_pages_current+0xe3/0x260 [ 799.119257] alloc_pages_current+0x155/0x260 [ 799.119265] ? kmem_cache_alloc+0x35f/0x3c0 [ 799.119274] __get_free_pages+0xb/0x40 [ 799.119284] mmu_topup_memory_caches+0x187/0x300 [ 799.119297] kvm_mmu_load+0x1e/0xd00 [ 799.119307] ? kvm_apic_accept_events+0x16f/0x3f0 [ 799.119316] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 799.119327] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 799.119337] ? _parse_integer+0xe4/0x130 [ 799.119347] ? vcpu_load+0x18/0x90 [ 799.119356] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 799.119369] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 799.119376] ? lock_acquire+0x170/0x3f0 [ 799.119384] ? lock_downgrade+0x740/0x740 [ 799.119395] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 799.119402] kvm_vcpu_ioctl+0x3de/0xc50 [ 799.119411] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 799.119421] ? proc_fail_nth_write+0x7b/0x180 [ 799.119429] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 799.119438] ? trace_hardirqs_on+0x10/0x10 [ 799.119448] ? fsnotify+0x974/0x11b0 [ 799.119456] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 799.119464] ? SyS_write+0x1b7/0x210 [ 799.119475] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 799.119484] do_vfs_ioctl+0x75a/0xff0 [ 799.119494] ? ioctl_preallocate+0x1a0/0x1a0 [ 799.119501] ? lock_downgrade+0x740/0x740 [ 799.119512] ? __fget+0x225/0x360 [ 799.119520] ? do_vfs_ioctl+0xff0/0xff0 [ 799.119529] ? security_file_ioctl+0x83/0xb0 [ 799.119538] SyS_ioctl+0x7f/0xb0 [ 799.119544] ? do_vfs_ioctl+0xff0/0xff0 [ 799.119553] do_syscall_64+0x1d5/0x640 [ 799.119566] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 799.119573] RIP: 0033:0x466459 [ 799.119578] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.119587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 799.119592] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 799.119596] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.119601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.119606] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 [ 799.227576] FAULT_INJECTION: forcing a failure. [ 799.227576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.567519] CPU: 1 PID: 9140 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 799.575355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.584694] Call Trace: [ 799.587279] dump_stack+0x1b2/0x281 [ 799.590900] should_fail.cold+0x10a/0x149 [ 799.595119] __alloc_pages_nodemask+0x22c/0x2720 [ 799.600241] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 799.604393] ? SyS_ioctl+0x7f/0xb0 [ 799.607914] ? do_syscall_64+0x1d5/0x640 [ 799.611957] ? ima_match_policy+0x85a/0x10e0 [ 799.616345] ? trace_hardirqs_on+0x10/0x10 [ 799.620563] ? __lock_acquire+0x5fc/0x3f20 [ 799.624791] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 799.629620] ? fs_reclaim_release+0xd0/0x110 [ 799.634023] ? mmu_topup_memory_caches+0x83/0x300 [ 799.639451] alloc_pages_current+0x155/0x260 [ 799.643855] ? kmem_cache_alloc+0x35f/0x3c0 [ 799.648166] __get_free_pages+0xb/0x40 [ 799.652047] mmu_topup_memory_caches+0x187/0x300 [ 799.656852] kvm_mmu_load+0x1e/0xd00 [ 799.660551] ? kvm_apic_accept_events+0x16f/0x3f0 [ 799.665387] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 799.670125] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 799.675048] ? _parse_integer+0xe4/0x130 [ 799.679088] ? vcpu_load+0x18/0x90 [ 799.682611] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 799.688051] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 799.692982] ? lock_acquire+0x170/0x3f0 [ 799.696939] ? lock_downgrade+0x740/0x740 [ 799.701071] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 799.705206] kvm_vcpu_ioctl+0x3de/0xc50 [ 799.709160] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 799.715026] ? proc_fail_nth_write+0x7b/0x180 [ 799.719511] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 799.724433] ? trace_hardirqs_on+0x10/0x10 [ 799.728657] ? fsnotify+0x974/0x11b0 [ 799.732387] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 799.737349] ? SyS_write+0x1b7/0x210 [ 799.741046] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 799.747030] do_vfs_ioctl+0x75a/0xff0 [ 799.750817] ? ioctl_preallocate+0x1a0/0x1a0 [ 799.755208] ? lock_downgrade+0x740/0x740 [ 799.759338] ? __fget+0x225/0x360 [ 799.762886] ? do_vfs_ioctl+0xff0/0xff0 [ 799.766852] ? security_file_ioctl+0x83/0xb0 [ 799.771355] SyS_ioctl+0x7f/0xb0 [ 799.774711] ? do_vfs_ioctl+0xff0/0xff0 [ 799.778870] do_syscall_64+0x1d5/0x640 [ 799.783015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 799.788206] RIP: 0033:0x466459 [ 799.791387] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.799082] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 799.806346] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 799.813654] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.820909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.828167] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17, 0x2}], 0x0, &(0x7f00000009c0)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)) close(r2) ppoll(&(0x7f00000000c0)=[{r2, 0x1}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x8]}, 0x8) r3 = gettid() tkill(r3, 0x401004000000016) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0xfa, 0xc1, 0x3f, 0x0, 0x32f2, 0x80400, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x3f}, 0x10000, 0x7, 0x6, 0x7, 0x8, 0x8001, 0x3}, r3, 0xf, r4, 0xf) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r6) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') 10:57:53 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:53 executing program 0: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:57:53 executing program 4 (fault-call:8 fault-nth:64): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:53 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x4, 0x1, 0x80, 0x9, 0x0, 0x6e43cb14, 0x83508, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x87a}, 0x4a9, 0x8000, 0xfffffff8, 0x5, 0x4cf, 0x3, 0x8}, r3, 0xb, r4, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) mmap(&(0x7f000063d000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0xf6932000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000001940)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) [ 801.367894] FAT-fs (loop2): invalid media value (0x00) [ 801.379083] FAT-fs (loop2): Can't find a valid FAT filesystem [ 801.409555] FAULT_INJECTION: forcing a failure. [ 801.409555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.466271] CPU: 0 PID: 9186 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 801.474106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.483465] Call Trace: [ 801.486068] dump_stack+0x1b2/0x281 [ 801.489702] should_fail.cold+0x10a/0x149 [ 801.493859] __alloc_pages_nodemask+0x22c/0x2720 [ 801.498611] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 801.502781] ? SyS_ioctl+0x7f/0xb0 [ 801.506319] ? do_syscall_64+0x1d5/0x640 [ 801.510389] ? ima_match_policy+0x85a/0x10e0 [ 801.514801] ? trace_hardirqs_on+0x10/0x10 [ 801.519041] ? __lock_acquire+0x5fc/0x3f20 [ 801.523300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 801.528151] ? fs_reclaim_release+0xd0/0x110 [ 801.532573] ? mmu_topup_memory_caches+0x83/0x300 [ 801.537449] alloc_pages_current+0x155/0x260 [ 801.541865] ? kmem_cache_alloc+0x35f/0x3c0 [ 801.546315] __get_free_pages+0xb/0x40 [ 801.550577] mmu_topup_memory_caches+0x187/0x300 [ 801.555374] kvm_mmu_load+0x1e/0xd00 [ 801.559097] ? kvm_apic_accept_events+0x16f/0x3f0 [ 801.563953] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 801.568720] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 801.573657] ? _parse_integer+0xe4/0x130 [ 801.577727] ? vcpu_load+0x18/0x90 [ 801.581290] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 801.586746] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 801.591615] ? lock_acquire+0x170/0x3f0 [ 801.595587] ? lock_downgrade+0x740/0x740 [ 801.599759] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 801.603905] kvm_vcpu_ioctl+0x3de/0xc50 [ 801.607903] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 801.613818] ? proc_fail_nth_write+0x7b/0x180 [ 801.618315] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 801.623252] ? trace_hardirqs_on+0x10/0x10 [ 801.627514] ? fsnotify+0x974/0x11b0 [ 801.631233] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 801.636182] ? SyS_write+0x1b7/0x210 [ 801.639986] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 801.645877] do_vfs_ioctl+0x75a/0xff0 [ 801.649681] ? ioctl_preallocate+0x1a0/0x1a0 [ 801.654092] ? lock_downgrade+0x740/0x740 [ 801.658247] ? __fget+0x225/0x360 [ 801.661706] ? do_vfs_ioctl+0xff0/0xff0 [ 801.665686] ? security_file_ioctl+0x83/0xb0 [ 801.670099] SyS_ioctl+0x7f/0xb0 [ 801.673464] ? do_vfs_ioctl+0xff0/0xff0 [ 801.677524] do_syscall_64+0x1d5/0x640 [ 801.681422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 801.686628] RIP: 0033:0x466459 [ 801.689905] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.697610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 801.704877] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 801.712146] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.719414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.726693] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:54 executing program 1: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x6, 0x15, 0x0, 0x9, 0x2420, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fff}, r1, 0xe, 0xffffffffffffffff, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) r5 = gettid() ptrace$setregs(0xd, r5, 0x2, &(0x7f00000002c0)="0617e481c66697ea3b7e939264265352c15b17ad123831f1cf04f83fafabbb132b34e8b11a121827e58e98b0499ee2a2b6a2888f1bb30dbb80a8446264cfa8ddb493b0b2bbe1d7f7637441") ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000480)={0x3, 0x70, 0x1f, 0xff, 0x2, 0x2, 0x0, 0x6981be74, 0xa00, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x2010, 0x2, 0x0, 0x7, 0x8, 0x80000000, 0x9}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x100000, 0x80, 0x83, 0x2}) r6 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7f, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000340)={0x4, 0x3, 0x2, 0x2000, &(0x7f0000007000/0x2000)=nil}) 10:57:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:54 executing program 4 (fault-call:8 fault-nth:65): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:57:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x7, 0x5, 0x3, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 10:57:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 802.235182] FAULT_INJECTION: forcing a failure. [ 802.235182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.263176] CPU: 0 PID: 9221 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 802.271049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.280413] Call Trace: [ 802.283032] dump_stack+0x1b2/0x281 [ 802.286667] should_fail.cold+0x10a/0x149 [ 802.290830] __alloc_pages_nodemask+0x22c/0x2720 [ 802.295619] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 802.299767] ? SyS_ioctl+0x7f/0xb0 [ 802.303457] ? do_syscall_64+0x1d5/0x640 [ 802.307528] ? ima_match_policy+0x85a/0x10e0 [ 802.311961] ? trace_hardirqs_on+0x10/0x10 [ 802.316214] ? __lock_acquire+0x5fc/0x3f20 [ 802.320465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 802.325323] ? fs_reclaim_release+0xd0/0x110 [ 802.329770] ? mmu_topup_memory_caches+0x83/0x300 [ 802.334621] alloc_pages_current+0x155/0x260 [ 802.339050] ? kmem_cache_alloc+0x35f/0x3c0 [ 802.343380] __get_free_pages+0xb/0x40 [ 802.347278] mmu_topup_memory_caches+0x187/0x300 [ 802.352164] kvm_mmu_load+0x1e/0xd00 [ 802.355881] ? kvm_apic_accept_events+0x16f/0x3f0 [ 802.360727] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 802.365521] kvm_arch_vcpu_ioctl_run+0x3639/0x5ae0 [ 802.370484] ? _parse_integer+0xe4/0x130 [ 802.374551] ? vcpu_load+0x18/0x90 [ 802.378103] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 802.383591] ? kvm_arch_vcpu_runnable+0x530/0x530 [ 802.388452] ? lock_acquire+0x170/0x3f0 [ 802.392438] ? lock_downgrade+0x740/0x740 [ 802.396591] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 802.400742] kvm_vcpu_ioctl+0x3de/0xc50 [ 802.404947] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 802.410837] ? proc_fail_nth_write+0x7b/0x180 [ 802.415338] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 802.420272] ? trace_hardirqs_on+0x10/0x10 [ 802.424515] ? fsnotify+0x974/0x11b0 [ 802.428235] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 802.433180] ? SyS_write+0x1b7/0x210 [ 802.436903] ? kvm_vm_ioctl_check_extension_generic+0xa0/0xa0 [ 802.442978] do_vfs_ioctl+0x75a/0xff0 [ 802.446791] ? ioctl_preallocate+0x1a0/0x1a0 [ 802.451218] ? lock_downgrade+0x740/0x740 [ 802.455376] ? __fget+0x225/0x360 [ 802.458831] ? do_vfs_ioctl+0xff0/0xff0 [ 802.462898] ? security_file_ioctl+0x83/0xb0 [ 802.467396] SyS_ioctl+0x7f/0xb0 [ 802.470771] ? do_vfs_ioctl+0xff0/0xff0 [ 802.474771] do_syscall_64+0x1d5/0x640 [ 802.478671] entry_SYSCALL_64_after_hwframe+0x46/0xbb 10:57:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x8, 0x3, 0x0, 0x15, 0x0, 0x9, 0x2420, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x83d, 0x0, @perf_config_ext={0x0, 0x20}, 0x3, 0x7, 0x5, 0x0, 0x0, 0xffff}, r0, 0x10, 0xffffffffffffffff, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/autofs\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x46, 0x3, 0x7, 0xc2, 0x0, 0x5, 0xab801, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000640), 0x9}, 0x12000, 0x8, 0x8000, 0x5, 0x8, 0xc0000000, 0x9}, r0, 0x10, r1, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x4, 0x0, 0x4800, 0x2, 0x6, 0x8, 0x8], 0x8, 0x0, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f00007ac000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000180)="2682a41931050f837151640f06a0fb7f66b8010000000f23c80f21f86635040000000f23f80fc7a8b600d1d2660fc73566b8005000000f23c00f21f8663503000c000f23f8660f2810", 0x49}], 0x1, 0x28, &(0x7f0000000300)=[@efer, @cr4={0x1, 0x4}], 0x2) r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x4, 0x420) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000600)={0x8, 0x903, &(0x7f0000000480)="59df625252dc9127348401ecb1e033c64777b5a5f9f0d6506514b18e3fb8d1b5e99a254fd3aa8f162f3a274b067ac0607af020feb41cb6dfe9de719e84467adee261b074dd863d0de8f13023ad5111d4ee2b244919e71f2b588526f1571852a600", &(0x7f0000000500)="430cae4587e311c1d4144734eddc1c229f24fab4aeb4285932ffbc0721ab5b227d773fc5b092febc82cfe16e7acd2815001bbfd86fe76a353ecd4baf83a80d3dc5116a9c2ca23765fd1448d768f2e88ef2d0296356844539db1f6ed3eb246caf34e1ee2217a3215b1462e28553c884ac6fea9d94b81d0013f2c5e4b574ccb571de503971fed611b9c35ac2911eed450ca109545501b8232fe16db63415a350d6863e6f70706389774b6bbb89c93d2e18d1cf623d95365deb8bd4980ca8015e456a11d9dd4c0352a8a0b94903504e74fd509c791ce163d9bb984c99", 0x61, 0xdb}) r7 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 802.483859] RIP: 0033:0x466459 [ 802.487044] RSP: 002b:00007f7c53cfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.494754] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 802.502023] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 802.509291] RBP: 00007f7c53cfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.516648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.523919] R13: 00007ffe343bbdcf R14: 00007f7c53cfb300 R15: 0000000000022000 10:57:54 executing program 4 (fault-call:8 fault-nth:66): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 802.723507] FAULT_INJECTION: forcing a failure. [ 802.723507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.746695] CPU: 0 PID: 9256 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 802.754615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.764078] Call Trace: [ 802.766689] dump_stack+0x1b2/0x281 [ 802.770336] should_fail.cold+0x10a/0x149 [ 802.774547] __alloc_pages_nodemask+0x22c/0x2720 [ 802.779316] ? kvm_vcpu_ioctl+0x3de/0xc50 [ 802.782354] ------------[ cut here ]------------ [ 802.783497] ? SyS_ioctl+0x7f/0xb0