0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5238) 03:45:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xda03, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:42 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 978.822085][ T8559] FAULT_INJECTION: forcing a failure. [ 978.822085][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 978.848609][ T8559] CPU: 1 PID: 8559 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 978.856494][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.866528][ T8559] Call Trace: [ 978.869799][ T8559] dump_stack+0x1d8/0x2f8 [ 978.874103][ T8559] should_fail+0x555/0x770 [ 978.878495][ T8559] __should_failslab+0x11a/0x160 [ 978.883406][ T8559] should_failslab+0x9/0x20 [ 978.887882][ T8559] kmem_cache_alloc_trace+0x5d/0x2f0 [ 978.893141][ T8559] ? perf_event_alloc+0xd3/0x2430 [ 978.898131][ T8559] ? inherit_event+0x9d8/0xb90 [ 978.902869][ T8559] perf_event_alloc+0xd3/0x2430 [ 978.907690][ T8559] ? __kasan_check_write+0x14/0x20 [ 978.912769][ T8559] inherit_event+0xc5/0xb90 [ 978.917244][ T8559] perf_event_init_task+0x583/0x990 [ 978.922413][ T8559] copy_process+0x173b/0x5ac0 [ 978.927068][ T8559] ? __kasan_check_write+0x14/0x20 [ 978.932151][ T8559] ? refcount_sub_and_test_checked+0x179/0x230 [ 978.938271][ T8559] _do_fork+0x13f/0x5b0 [ 978.942393][ T8559] ? debug_smp_processor_id+0x1c/0x20 [ 978.947746][ T8559] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 978.953784][ T8559] __x64_sys_clone+0x1ec/0x230 [ 978.958515][ T8559] do_syscall_64+0xfe/0x140 [ 978.962985][ T8559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.968864][ T8559] RIP: 0033:0x459829 [ 978.972723][ T8559] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.992289][ T8559] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 979.000663][ T8559] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 979.008601][ T8559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:42 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 979.016545][ T8559] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.024495][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 979.032434][ T8559] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfeff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:42 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:42 executing program 5 (fault-call:7 fault-nth:8): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:45:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5250) 03:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:42 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 979.211325][ T8601] FAULT_INJECTION: forcing a failure. [ 979.211325][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 979.227765][ T8601] CPU: 0 PID: 8601 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 979.235649][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.245681][ T8601] Call Trace: [ 979.245697][ T8601] dump_stack+0x1d8/0x2f8 [ 979.253259][ T8601] should_fail+0x555/0x770 [ 979.257661][ T8601] __should_failslab+0x11a/0x160 [ 979.257674][ T8601] should_failslab+0x9/0x20 [ 979.257682][ T8601] kmem_cache_alloc_trace+0x5d/0x2f0 [ 979.257692][ T8601] ? perf_event_alloc+0xd3/0x2430 [ 979.257698][ T8601] ? inherit_event+0x9d8/0xb90 [ 979.257706][ T8601] perf_event_alloc+0xd3/0x2430 [ 979.257718][ T8601] ? __kasan_check_write+0x14/0x20 [ 979.257727][ T8601] inherit_event+0xc5/0xb90 [ 979.257740][ T8601] perf_event_init_task+0x583/0x990 [ 979.301680][ T8601] copy_process+0x173b/0x5ac0 [ 979.306323][ T8601] ? __kasan_check_write+0x14/0x20 [ 979.311401][ T8601] ? refcount_sub_and_test_checked+0x179/0x230 [ 979.317524][ T8601] _do_fork+0x13f/0x5b0 [ 979.321647][ T8601] ? debug_smp_processor_id+0x1c/0x20 [ 979.326983][ T8601] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 979.333015][ T8601] __x64_sys_clone+0x1ec/0x230 [ 979.337759][ T8601] do_syscall_64+0xfe/0x140 [ 979.342244][ T8601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.348103][ T8601] RIP: 0033:0x459829 [ 979.351961][ T8601] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.371529][ T8601] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 979.379900][ T8601] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 979.387838][ T8601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 979.395873][ T8601] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.403808][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 979.411745][ T8601] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff0f, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 03:45:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5268) 03:45:43 executing program 5 (fault-call:7 fault-nth:9): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 979.611298][ T8634] FAULT_INJECTION: forcing a failure. [ 979.611298][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 979.627050][ T8634] CPU: 1 PID: 8634 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 979.635027][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.645046][ T8634] Call Trace: [ 979.648308][ T8634] dump_stack+0x1d8/0x2f8 [ 979.652607][ T8634] should_fail+0x555/0x770 [ 979.656999][ T8634] __should_failslab+0x11a/0x160 [ 979.661911][ T8634] ? dup_fd+0x71/0xc90 [ 979.665946][ T8634] should_failslab+0x9/0x20 [ 979.670428][ T8634] kmem_cache_alloc+0x56/0x2e0 [ 979.675160][ T8634] dup_fd+0x71/0xc90 [ 979.679031][ T8634] ? refcount_inc_checked+0x1e/0x50 [ 979.684198][ T8634] ? copy_semundo+0x1c0/0x220 [ 979.688841][ T8634] copy_process+0x18d8/0x5ac0 [ 979.693482][ T8634] ? __kasan_check_write+0x14/0x20 [ 979.698571][ T8634] ? refcount_sub_and_test_checked+0x179/0x230 [ 979.704694][ T8634] _do_fork+0x13f/0x5b0 [ 979.708839][ T8634] ? __kasan_check_write+0x14/0x20 [ 979.713933][ T8634] ? __fpregs_load_activate+0x195/0x220 [ 979.719445][ T8634] ? switch_fpu_return+0xe/0x10 [ 979.724267][ T8634] __x64_sys_clone+0x1ec/0x230 [ 979.729011][ T8634] do_syscall_64+0xfe/0x140 [ 979.733479][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.739352][ T8634] RIP: 0033:0x459829 03:45:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) [ 979.743211][ T8634] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.762779][ T8634] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 979.771256][ T8634] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 979.779198][ T8634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 979.787138][ T8634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.795075][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 979.803013][ T8634] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff7f, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000254769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:43 executing program 5 (fault-call:7 fault-nth:10): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5280) 03:45:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) [ 979.986882][ T8666] FAULT_INJECTION: forcing a failure. [ 979.986882][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 980.004685][ T8666] CPU: 1 PID: 8666 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 980.012573][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.012576][ T8666] Call Trace: [ 980.012591][ T8666] dump_stack+0x1d8/0x2f8 [ 980.012604][ T8666] should_fail+0x555/0x770 [ 980.012622][ T8666] __should_failslab+0x11a/0x160 [ 980.012634][ T8666] should_failslab+0x9/0x20 [ 980.012641][ T8666] kmem_cache_alloc_trace+0x5d/0x2f0 [ 980.012653][ T8666] ? alloc_fdtable+0x98/0x290 [ 980.034634][ T8666] alloc_fdtable+0x98/0x290 [ 980.034644][ T8666] dup_fd+0x94f/0xc90 [ 980.034658][ T8666] copy_process+0x18d8/0x5ac0 [ 980.044030][ T8666] ? __kasan_check_write+0x14/0x20 [ 980.044039][ T8666] ? refcount_sub_and_test_checked+0x179/0x230 [ 980.044055][ T8666] _do_fork+0x13f/0x5b0 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 980.053945][ T8666] ? debug_smp_processor_id+0x1c/0x20 [ 980.053954][ T8666] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 980.053964][ T8666] __x64_sys_clone+0x1ec/0x230 [ 980.053976][ T8666] do_syscall_64+0xfe/0x140 [ 980.062396][ T8666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.062403][ T8666] RIP: 0033:0x459829 [ 980.062410][ T8666] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:43 executing program 5 (fault-call:7 fault-nth:11): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 980.062417][ T8666] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 980.072134][ T8666] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 980.072139][ T8666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 980.072144][ T8666] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.072149][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 980.072154][ T8666] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 980.175863][ T8682] FAULT_INJECTION: forcing a failure. [ 980.175863][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 980.200515][ T8682] CPU: 1 PID: 8682 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 980.208412][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.208416][ T8682] Call Trace: [ 980.208429][ T8682] dump_stack+0x1d8/0x2f8 [ 980.208442][ T8682] should_fail+0x555/0x770 [ 980.208455][ T8682] __should_failslab+0x11a/0x160 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 980.208468][ T8682] should_failslab+0x9/0x20 [ 980.208478][ T8682] kmem_cache_alloc_trace+0x5d/0x2f0 [ 980.208486][ T8682] ? alloc_fdtable+0x98/0x290 [ 980.208499][ T8682] alloc_fdtable+0x98/0x290 [ 980.226078][ T8682] dup_fd+0x94f/0xc90 [ 980.226090][ T8682] copy_process+0x18d8/0x5ac0 [ 980.226099][ T8682] ? __kasan_check_write+0x14/0x20 [ 980.226107][ T8682] ? refcount_sub_and_test_checked+0x179/0x230 [ 980.226122][ T8682] _do_fork+0x13f/0x5b0 [ 980.235402][ T8682] ? debug_smp_processor_id+0x1c/0x20 [ 980.235411][ T8682] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 980.235423][ T8682] __x64_sys_clone+0x1ec/0x230 [ 980.245143][ T8682] do_syscall_64+0xfe/0x140 [ 980.245152][ T8682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.245161][ T8682] RIP: 0033:0x459829 [ 980.254270][ T8682] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.254275][ T8682] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:45:43 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:44 executing program 5 (fault-call:7 fault-nth:12): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 980.254283][ T8682] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 980.254290][ T8682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 980.262875][ T8682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.262880][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 980.262884][ T8682] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 980.448093][ T8697] FAULT_INJECTION: forcing a failure. [ 980.448093][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 980.476258][ T8697] CPU: 0 PID: 8697 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 980.484133][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.494178][ T8697] Call Trace: [ 980.497456][ T8697] dump_stack+0x1d8/0x2f8 [ 980.501772][ T8697] should_fail+0x555/0x770 [ 980.506163][ T8697] __should_failslab+0x11a/0x160 [ 980.506175][ T8697] should_failslab+0x9/0x20 [ 980.506185][ T8697] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 980.506192][ T8697] ? __kmalloc_node+0x3c/0x60 [ 980.506202][ T8697] __kmalloc_node+0x3c/0x60 [ 980.530651][ T8697] kvmalloc_node+0xcc/0x130 [ 980.535141][ T8697] alloc_fdtable+0x16c/0x290 [ 980.539719][ T8697] dup_fd+0x94f/0xc90 [ 980.539733][ T8697] copy_process+0x18d8/0x5ac0 03:45:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffe, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 03:45:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5298) 03:45:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:44 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 980.539752][ T8697] _do_fork+0x13f/0x5b0 [ 980.552483][ T8697] ? debug_smp_processor_id+0x1c/0x20 [ 980.552493][ T8697] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 980.552503][ T8697] __x64_sys_clone+0x1ec/0x230 [ 980.552530][ T8697] do_syscall_64+0xfe/0x140 [ 980.563900][ T8697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.563907][ T8697] RIP: 0033:0x459829 [ 980.563916][ T8697] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.563920][ T8697] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 980.563930][ T8697] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 980.573146][ T8697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 980.573151][ T8697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.573156][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:44 executing program 5 (fault-call:7 fault-nth:13): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 03:45:44 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000027fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 980.573171][ T8697] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 980.721343][ T8731] FAULT_INJECTION: forcing a failure. [ 980.721343][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 980.738997][ T8731] CPU: 1 PID: 8731 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 980.746877][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.756902][ T8731] Call Trace: [ 980.760164][ T8731] dump_stack+0x1d8/0x2f8 [ 980.764462][ T8731] should_fail+0x555/0x770 [ 980.768858][ T8731] __should_failslab+0x11a/0x160 [ 980.773765][ T8731] should_failslab+0x9/0x20 [ 980.778235][ T8731] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 980.783929][ T8731] ? __kmalloc_node+0x3c/0x60 [ 980.788582][ T8731] __kmalloc_node+0x3c/0x60 [ 980.793069][ T8731] kvmalloc_node+0xcc/0x130 [ 980.797538][ T8731] alloc_fdtable+0x16c/0x290 [ 980.802180][ T8731] dup_fd+0x94f/0xc90 [ 980.806131][ T8731] copy_process+0x18d8/0x5ac0 [ 980.810771][ T8731] ? __kasan_check_write+0x14/0x20 [ 980.815865][ T8731] ? refcount_sub_and_test_checked+0x179/0x230 [ 980.821989][ T8731] _do_fork+0x13f/0x5b0 [ 980.826118][ T8731] ? debug_smp_processor_id+0x1c/0x20 [ 980.831452][ T8731] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 980.837482][ T8731] __x64_sys_clone+0x1ec/0x230 [ 980.842216][ T8731] do_syscall_64+0xfe/0x140 [ 980.846686][ T8731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.852546][ T8731] RIP: 0033:0x459829 [ 980.856407][ T8731] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.876065][ T8731] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 980.884446][ T8731] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 980.892399][ T8731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 980.900338][ T8731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.908275][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000280fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:44 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000029effffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 980.916217][ T8731] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:44 executing program 5 (fault-call:7 fault-nth:14): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 03:45:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3ffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x52b0) 03:45:44 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002efffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) [ 981.044252][ T8753] FAULT_INJECTION: forcing a failure. [ 981.044252][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 981.103250][ T8753] CPU: 1 PID: 8753 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 981.111148][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.121186][ T8753] Call Trace: [ 981.124460][ T8753] dump_stack+0x1d8/0x2f8 [ 981.128788][ T8753] should_fail+0x555/0x770 [ 981.133200][ T8753] __should_failslab+0x11a/0x160 [ 981.138134][ T8753] ? copy_fs_struct+0x4e/0x230 [ 981.142882][ T8753] should_failslab+0x9/0x20 [ 981.147367][ T8753] kmem_cache_alloc+0x56/0x2e0 [ 981.152114][ T8753] copy_fs_struct+0x4e/0x230 [ 981.156692][ T8753] copy_process+0x1a6e/0x5ac0 [ 981.161341][ T8753] ? __kasan_check_write+0x14/0x20 [ 981.166427][ T8753] ? refcount_sub_and_test_checked+0x179/0x230 [ 981.172567][ T8753] _do_fork+0x13f/0x5b0 [ 981.176711][ T8753] ? debug_smp_processor_id+0x1c/0x20 [ 981.182063][ T8753] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 981.188100][ T8753] __x64_sys_clone+0x1ec/0x230 [ 981.192835][ T8753] do_syscall_64+0xfe/0x140 [ 981.197310][ T8753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.203178][ T8753] RIP: 0033:0x459829 [ 981.207059][ T8753] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.226645][ T8753] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 981.235033][ T8753] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 981.242974][ T8753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 981.251025][ T8753] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 981.258963][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 981.266909][ T8753] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:44 executing program 5 (fault-call:7 fault-nth:15): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:45:44 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002f0ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 981.364923][ T8782] FAULT_INJECTION: forcing a failure. [ 981.364923][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 981.402424][ T8782] CPU: 0 PID: 8782 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 981.410313][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.420352][ T8782] Call Trace: [ 981.420367][ T8782] dump_stack+0x1d8/0x2f8 [ 981.420383][ T8782] should_fail+0x555/0x770 [ 981.432335][ T8782] __should_failslab+0x11a/0x160 [ 981.437259][ T8782] ? copy_process+0x1acb/0x5ac0 [ 981.442088][ T8782] should_failslab+0x9/0x20 [ 981.446558][ T8782] kmem_cache_alloc+0x56/0x2e0 [ 981.451285][ T8782] ? copy_fs_struct+0x185/0x230 [ 981.456101][ T8782] copy_process+0x1acb/0x5ac0 [ 981.460744][ T8782] ? __kasan_check_write+0x14/0x20 [ 981.465820][ T8782] ? refcount_sub_and_test_checked+0x179/0x230 [ 981.471946][ T8782] _do_fork+0x13f/0x5b0 [ 981.476079][ T8782] ? debug_smp_processor_id+0x1c/0x20 [ 981.481416][ T8782] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 981.487460][ T8782] __x64_sys_clone+0x1ec/0x230 [ 981.492197][ T8782] do_syscall_64+0xfe/0x140 [ 981.496670][ T8782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.502524][ T8782] RIP: 0033:0x459829 [ 981.506383][ T8782] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.525948][ T8782] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 981.534326][ T8782] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 981.542263][ T8782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 981.550200][ T8782] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 03:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 981.558135][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 981.566083][ T8782] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x40000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x52c8) 03:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 03:45:45 executing program 5 (fault-call:7 fault-nth:16): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000230eecb287400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x52e0) 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 981.806291][ T8831] FAULT_INJECTION: forcing a failure. [ 981.806291][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 981.819034][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 981.826910][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.836941][ T8831] Call Trace: [ 981.836956][ T8831] dump_stack+0x1d8/0x2f8 [ 981.836970][ T8831] should_fail+0x555/0x770 [ 981.836983][ T8831] __should_failslab+0x11a/0x160 [ 981.836993][ T8831] ? copy_process+0x1ce5/0x5ac0 [ 981.844555][ T8831] should_failslab+0x9/0x20 [ 981.844565][ T8831] kmem_cache_alloc+0x56/0x2e0 [ 981.844575][ T8831] copy_process+0x1ce5/0x5ac0 [ 981.844586][ T8831] ? __kasan_check_write+0x14/0x20 [ 981.853880][ T8831] ? refcount_sub_and_test_checked+0x179/0x230 [ 981.853898][ T8831] _do_fork+0x13f/0x5b0 [ 981.853907][ T8831] ? debug_smp_processor_id+0x1c/0x20 [ 981.863209][ T8831] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 981.863220][ T8831] __x64_sys_clone+0x1ec/0x230 03:45:45 executing program 5 (fault-call:7 fault-nth:17): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 981.863237][ T8831] do_syscall_64+0xfe/0x140 [ 981.872608][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.872616][ T8831] RIP: 0033:0x459829 [ 981.872623][ T8831] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.872630][ T8831] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 981.883837][ T8831] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 981.883842][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 981.883847][ T8831] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 981.883852][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 981.883856][ T8831] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 982.023766][ T8875] FAULT_INJECTION: forcing a failure. [ 982.023766][ T8875] name failslab, interval 1, probability 0, space 0, times 0 [ 982.040353][ T8875] CPU: 0 PID: 8875 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 982.048229][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.048233][ T8875] Call Trace: [ 982.048248][ T8875] dump_stack+0x1d8/0x2f8 [ 982.048263][ T8875] should_fail+0x555/0x770 03:45:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 982.048296][ T8875] __should_failslab+0x11a/0x160 [ 982.048308][ T8875] ? create_new_namespaces+0x35/0x700 [ 982.048320][ T8875] should_failslab+0x9/0x20 [ 982.048329][ T8875] kmem_cache_alloc+0x56/0x2e0 [ 982.048342][ T8875] ? cap_capable+0x250/0x290 [ 982.061633][ T8875] create_new_namespaces+0x35/0x700 [ 982.061643][ T8875] ? security_capable+0xa2/0xd0 [ 982.061653][ T8875] ? ns_capable+0x91/0xf0 [ 982.061663][ T8875] copy_namespaces+0x2bb/0x300 [ 982.061673][ T8875] copy_process+0x2605/0x5ac0 [ 982.061683][ T8875] ? __kasan_check_write+0x14/0x20 [ 982.061691][ T8875] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 982.061702][ T8875] ? refcount_sub_and_test_checked+0x179/0x230 [ 982.075298][ T8875] ? trace_hardirqs_on_caller+0x74/0x80 [ 982.075314][ T8875] _do_fork+0x13f/0x5b0 [ 982.075324][ T8875] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 982.075332][ T8875] ? check_preemption_disabled+0xa9/0x2a0 [ 982.075340][ T8875] __x64_sys_clone+0x1ec/0x230 [ 982.075352][ T8875] do_syscall_64+0xfe/0x140 [ 982.085249][ T8875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.085256][ T8875] RIP: 0033:0x459829 [ 982.085264][ T8875] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.085268][ T8875] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 982.085276][ T8875] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 982.085280][ T8875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:45 executing program 5 (fault-call:7 fault-nth:18): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 982.085285][ T8875] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.085289][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 982.085294][ T8875] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 03:45:45 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 982.289457][ T8892] FAULT_INJECTION: forcing a failure. [ 982.289457][ T8892] name failslab, interval 1, probability 0, space 0, times 0 03:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x52f8) [ 982.371130][ T8892] CPU: 1 PID: 8892 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 982.379020][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.389053][ T8892] Call Trace: [ 982.392334][ T8892] dump_stack+0x1d8/0x2f8 [ 982.396738][ T8892] should_fail+0x555/0x770 [ 982.401131][ T8892] __should_failslab+0x11a/0x160 [ 982.406035][ T8892] ? create_new_namespaces+0x35/0x700 [ 982.411408][ T8892] should_failslab+0x9/0x20 [ 982.415881][ T8892] kmem_cache_alloc+0x56/0x2e0 [ 982.420617][ T8892] ? cap_capable+0x250/0x290 [ 982.425172][ T8892] create_new_namespaces+0x35/0x700 [ 982.430335][ T8892] ? security_capable+0xa2/0xd0 [ 982.435153][ T8892] ? ns_capable+0x91/0xf0 [ 982.439451][ T8892] copy_namespaces+0x2bb/0x300 [ 982.444181][ T8892] copy_process+0x2605/0x5ac0 [ 982.448823][ T8892] ? __kasan_check_write+0x14/0x20 [ 982.453909][ T8892] ? refcount_sub_and_test_checked+0x179/0x230 [ 982.460045][ T8892] _do_fork+0x13f/0x5b0 [ 982.464176][ T8892] ? debug_smp_processor_id+0x1c/0x20 [ 982.469548][ T8892] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 982.475584][ T8892] __x64_sys_clone+0x1ec/0x230 [ 982.480314][ T8892] do_syscall_64+0xfe/0x140 [ 982.484786][ T8892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.490647][ T8892] RIP: 0033:0x459829 [ 982.494505][ T8892] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 982.514075][ T8892] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 982.522463][ T8892] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 982.530399][ T8892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 982.538578][ T8892] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.546516][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 982.554452][ T8892] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:46 executing program 5 (fault-call:7 fault-nth:19): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x200000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 03:45:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5310) [ 982.713880][ T8923] FAULT_INJECTION: forcing a failure. [ 982.713880][ T8923] name failslab, interval 1, probability 0, space 0, times 0 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 982.780145][ T8923] CPU: 0 PID: 8923 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 982.788161][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.798202][ T8923] Call Trace: [ 982.801499][ T8923] dump_stack+0x1d8/0x2f8 [ 982.805826][ T8923] should_fail+0x555/0x770 [ 982.810239][ T8923] __should_failslab+0x11a/0x160 [ 982.815162][ T8923] ? alloc_vfsmnt+0x27/0x470 [ 982.819742][ T8923] should_failslab+0x9/0x20 [ 982.824231][ T8923] kmem_cache_alloc+0x56/0x2e0 [ 982.828974][ T8923] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 982.834413][ T8923] alloc_vfsmnt+0x27/0x470 [ 982.838815][ T8923] clone_mnt+0x6b/0xbc0 [ 982.842966][ T8923] ? copy_tree+0x98/0xd60 [ 982.847281][ T8923] copy_tree+0x128/0xd60 [ 982.851499][ T8923] ? __kasan_check_write+0x14/0x20 [ 982.856606][ T8923] copy_mnt_ns+0x131/0xd30 [ 982.861016][ T8923] ? create_new_namespaces+0x35/0x700 [ 982.866378][ T8923] ? kmem_cache_alloc+0x223/0x2e0 [ 982.871391][ T8923] create_new_namespaces+0xde/0x700 [ 982.876577][ T8923] ? security_capable+0xa2/0xd0 [ 982.881417][ T8923] ? ns_capable+0x91/0xf0 [ 982.885734][ T8923] copy_namespaces+0x2bb/0x300 [ 982.890499][ T8923] copy_process+0x2605/0x5ac0 [ 982.895175][ T8923] ? __kasan_check_write+0x14/0x20 [ 982.900272][ T8923] ? refcount_sub_and_test_checked+0x179/0x230 [ 982.906421][ T8923] _do_fork+0x13f/0x5b0 [ 982.910584][ T8923] ? debug_smp_processor_id+0x1c/0x20 [ 982.915944][ T8923] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 982.921999][ T8923] __x64_sys_clone+0x1ec/0x230 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 982.926757][ T8923] do_syscall_64+0xfe/0x140 [ 982.931253][ T8923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.937131][ T8923] RIP: 0033:0x459829 [ 982.941015][ T8923] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.960616][ T8923] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 982.969008][ T8923] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:45:46 executing program 5 (fault-call:7 fault-nth:20): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 982.969012][ T8923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 982.969017][ T8923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.969021][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 982.969025][ T8923] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 983.057471][ T8967] FAULT_INJECTION: forcing a failure. [ 983.057471][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 983.070734][ T8967] CPU: 1 PID: 8967 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 983.078615][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.078619][ T8967] Call Trace: [ 983.078635][ T8967] dump_stack+0x1d8/0x2f8 [ 983.078649][ T8967] should_fail+0x555/0x770 [ 983.078661][ T8967] __should_failslab+0x11a/0x160 [ 983.078672][ T8967] ? alloc_vfsmnt+0xaa/0x470 [ 983.078682][ T8967] should_failslab+0x9/0x20 [ 983.078692][ T8967] __kmalloc_track_caller+0x79/0x340 [ 983.078705][ T8967] kstrdup_const+0x55/0x90 [ 983.078713][ T8967] alloc_vfsmnt+0xaa/0x470 [ 983.078722][ T8967] clone_mnt+0x6b/0xbc0 [ 983.078733][ T8967] copy_tree+0x128/0xd60 [ 983.078744][ T8967] ? __kasan_check_write+0x14/0x20 [ 983.078754][ T8967] copy_mnt_ns+0x131/0xd30 [ 983.078767][ T8967] ? create_new_namespaces+0x35/0x700 [ 983.092058][ T8967] ? kmem_cache_alloc+0x223/0x2e0 [ 983.156722][ T8967] create_new_namespaces+0xde/0x700 [ 983.161889][ T8967] ? security_capable+0xa2/0xd0 [ 983.166712][ T8967] ? ns_capable+0x91/0xf0 [ 983.171013][ T8967] copy_namespaces+0x2bb/0x300 [ 983.175753][ T8967] copy_process+0x2605/0x5ac0 [ 983.180393][ T8967] ? __kasan_check_write+0x14/0x20 [ 983.185482][ T8967] ? refcount_sub_and_test_checked+0x179/0x230 [ 983.191610][ T8967] _do_fork+0x13f/0x5b0 [ 983.195750][ T8967] ? debug_smp_processor_id+0x1c/0x20 [ 983.201086][ T8967] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 983.207126][ T8967] __x64_sys_clone+0x1ec/0x230 [ 983.211883][ T8967] do_syscall_64+0xfe/0x140 [ 983.216359][ T8967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.222229][ T8967] RIP: 0033:0x459829 [ 983.226096][ T8967] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.245673][ T8967] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:45:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:46 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 983.254049][ T8967] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 983.261984][ T8967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 983.269921][ T8967] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.277869][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 983.285810][ T8967] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5328) 03:45:47 executing program 5 (fault-call:7 fault-nth:21): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:47 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:47 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 983.452232][ T8994] FAULT_INJECTION: forcing a failure. [ 983.452232][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 983.467472][ T8994] CPU: 1 PID: 8994 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 983.475557][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.485592][ T8994] Call Trace: [ 983.488865][ T8994] dump_stack+0x1d8/0x2f8 [ 983.493168][ T8994] should_fail+0x555/0x770 [ 983.497571][ T8994] __should_failslab+0x11a/0x160 [ 983.502480][ T8994] ? alloc_vfsmnt+0x27/0x470 [ 983.507043][ T8994] should_failslab+0x9/0x20 [ 983.511510][ T8994] kmem_cache_alloc+0x56/0x2e0 [ 983.516241][ T8994] alloc_vfsmnt+0x27/0x470 [ 983.520624][ T8994] clone_mnt+0x6b/0xbc0 [ 983.524744][ T8994] copy_tree+0x4fc/0xd60 [ 983.528950][ T8994] ? __kasan_check_write+0x14/0x20 [ 983.534049][ T8994] copy_mnt_ns+0x131/0xd30 [ 983.538430][ T8994] ? create_new_namespaces+0x35/0x700 [ 983.543765][ T8994] ? kmem_cache_alloc+0x223/0x2e0 [ 983.548758][ T8994] create_new_namespaces+0xde/0x700 [ 983.553921][ T8994] ? security_capable+0xa2/0xd0 [ 983.558738][ T8994] ? ns_capable+0x91/0xf0 [ 983.563033][ T8994] copy_namespaces+0x2bb/0x300 [ 983.567761][ T8994] copy_process+0x2605/0x5ac0 [ 983.572422][ T8994] ? __kasan_check_write+0x14/0x20 [ 983.577501][ T8994] ? refcount_sub_and_test_checked+0x179/0x230 [ 983.583622][ T8994] _do_fork+0x13f/0x5b0 [ 983.587744][ T8994] ? debug_smp_processor_id+0x1c/0x20 [ 983.593077][ T8994] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 983.599112][ T8994] __x64_sys_clone+0x1ec/0x230 [ 983.603843][ T8994] do_syscall_64+0xfe/0x140 [ 983.608314][ T8994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.614170][ T8994] RIP: 0033:0x459829 [ 983.618037][ T8994] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.637614][ T8994] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 983.645984][ T8994] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 983.653919][ T8994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 983.661857][ T8994] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.669794][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 983.677729][ T8994] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 03:45:47 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:47 executing program 5 (fault-call:7 fault-nth:22): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5340) [ 983.821568][ T9020] FAULT_INJECTION: forcing a failure. [ 983.821568][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 983.876105][ T9020] CPU: 1 PID: 9020 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 983.884017][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.894051][ T9020] Call Trace: [ 983.894067][ T9020] dump_stack+0x1d8/0x2f8 [ 983.894081][ T9020] should_fail+0x555/0x770 [ 983.894095][ T9020] __should_failslab+0x11a/0x160 [ 983.894106][ T9020] ? alloc_vfsmnt+0xaa/0x470 [ 983.894116][ T9020] should_failslab+0x9/0x20 [ 983.894125][ T9020] __kmalloc_track_caller+0x79/0x340 [ 983.894139][ T9020] kstrdup_const+0x55/0x90 [ 983.901702][ T9020] alloc_vfsmnt+0xaa/0x470 [ 983.901710][ T9020] clone_mnt+0x6b/0xbc0 [ 983.901720][ T9020] copy_tree+0x4fc/0xd60 [ 983.911011][ T9020] ? __kasan_check_write+0x14/0x20 [ 983.911022][ T9020] copy_mnt_ns+0x131/0xd30 [ 983.911033][ T9020] ? create_new_namespaces+0x35/0x700 [ 983.920051][ T9020] ? kmem_cache_alloc+0x223/0x2e0 [ 983.920065][ T9020] create_new_namespaces+0xde/0x700 [ 983.929702][ T9020] ? security_capable+0xa2/0xd0 [ 983.929712][ T9020] ? ns_capable+0x91/0xf0 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:45:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 983.929721][ T9020] copy_namespaces+0x2bb/0x300 [ 983.929731][ T9020] copy_process+0x2605/0x5ac0 [ 983.938235][ T9020] ? __kasan_check_write+0x14/0x20 [ 983.938248][ T9020] ? refcount_sub_and_test_checked+0x179/0x230 [ 983.938266][ T9020] _do_fork+0x13f/0x5b0 [ 983.938275][ T9020] ? debug_smp_processor_id+0x1c/0x20 [ 983.938284][ T9020] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 983.938293][ T9020] __x64_sys_clone+0x1ec/0x230 [ 983.947583][ T9020] do_syscall_64+0xfe/0x140 03:45:47 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:47 executing program 5 (fault-call:7 fault-nth:23): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 983.947594][ T9020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.947605][ T9020] RIP: 0033:0x459829 [ 983.957323][ T9020] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.957328][ T9020] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 983.957335][ T9020] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 983.957340][ T9020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:47 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 983.957344][ T9020] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.957349][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 983.957354][ T9020] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 984.135365][ T9045] FAULT_INJECTION: forcing a failure. [ 984.135365][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 984.150687][ T9045] CPU: 0 PID: 9045 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 984.158664][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.168698][ T9045] Call Trace: [ 984.168713][ T9045] dump_stack+0x1d8/0x2f8 [ 984.168732][ T9045] should_fail+0x555/0x770 [ 984.168745][ T9045] __should_failslab+0x11a/0x160 [ 984.176300][ T9045] ? alloc_vfsmnt+0x27/0x470 [ 984.176310][ T9045] should_failslab+0x9/0x20 [ 984.176320][ T9045] kmem_cache_alloc+0x56/0x2e0 [ 984.176330][ T9045] alloc_vfsmnt+0x27/0x470 [ 984.176340][ T9045] clone_mnt+0x6b/0xbc0 [ 984.207850][ T9045] ? do_raw_spin_unlock+0x49/0x260 [ 984.212928][ T9045] copy_tree+0x4fc/0xd60 [ 984.217136][ T9045] ? copy_mnt_ns+0x131/0xd30 [ 984.221690][ T9045] copy_mnt_ns+0x131/0xd30 [ 984.226073][ T9045] ? create_new_namespaces+0x35/0x700 [ 984.231420][ T9045] ? kmem_cache_alloc+0x223/0x2e0 [ 984.236412][ T9045] create_new_namespaces+0xde/0x700 [ 984.241591][ T9045] ? security_capable+0xa2/0xd0 [ 984.246409][ T9045] ? ns_capable+0x91/0xf0 [ 984.250724][ T9045] copy_namespaces+0x2bb/0x300 [ 984.255457][ T9045] copy_process+0x2605/0x5ac0 [ 984.260099][ T9045] ? __kasan_check_write+0x14/0x20 [ 984.265175][ T9045] ? refcount_sub_and_test_checked+0x179/0x230 [ 984.271307][ T9045] _do_fork+0x13f/0x5b0 [ 984.275447][ T9045] ? debug_smp_processor_id+0x1c/0x20 [ 984.280803][ T9045] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 984.286835][ T9045] __x64_sys_clone+0x1ec/0x230 [ 984.291565][ T9045] do_syscall_64+0xfe/0x140 [ 984.296036][ T9045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.301905][ T9045] RIP: 0033:0x459829 [ 984.305768][ T9045] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.325335][ T9045] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 984.333712][ T9045] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 984.341651][ T9045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 984.350057][ T9045] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.358012][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 984.365953][ T9045] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000007428cbee3000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 5 (fault-call:7 fault-nth:24): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5358) 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 984.495641][ T9066] FAULT_INJECTION: forcing a failure. [ 984.495641][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 984.525611][ T9066] CPU: 1 PID: 9066 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 984.533583][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.543616][ T9066] Call Trace: [ 984.546885][ T9066] dump_stack+0x1d8/0x2f8 [ 984.551192][ T9066] should_fail+0x555/0x770 [ 984.555593][ T9066] __should_failslab+0x11a/0x160 [ 984.560507][ T9066] ? alloc_vfsmnt+0x27/0x470 [ 984.565074][ T9066] should_failslab+0x9/0x20 [ 984.569629][ T9066] kmem_cache_alloc+0x56/0x2e0 [ 984.574359][ T9066] alloc_vfsmnt+0x27/0x470 [ 984.578743][ T9066] clone_mnt+0x6b/0xbc0 [ 984.582866][ T9066] ? do_raw_spin_unlock+0x49/0x260 [ 984.587945][ T9066] copy_tree+0x4fc/0xd60 [ 984.592161][ T9066] ? copy_mnt_ns+0x131/0xd30 [ 984.596731][ T9066] copy_mnt_ns+0x131/0xd30 [ 984.601119][ T9066] ? create_new_namespaces+0x35/0x700 [ 984.606455][ T9066] ? kmem_cache_alloc+0x223/0x2e0 [ 984.611444][ T9066] create_new_namespaces+0xde/0x700 [ 984.616612][ T9066] ? security_capable+0xa2/0xd0 [ 984.621436][ T9066] ? ns_capable+0x91/0xf0 [ 984.625749][ T9066] copy_namespaces+0x2bb/0x300 [ 984.630486][ T9066] copy_process+0x2605/0x5ac0 [ 984.635128][ T9066] ? __kasan_check_write+0x14/0x20 [ 984.640209][ T9066] ? refcount_sub_and_test_checked+0x179/0x230 [ 984.646345][ T9066] _do_fork+0x13f/0x5b0 [ 984.650473][ T9066] ? debug_smp_processor_id+0x1c/0x20 [ 984.655820][ T9066] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 984.661858][ T9066] __x64_sys_clone+0x1ec/0x230 [ 984.666593][ T9066] do_syscall_64+0xfe/0x140 [ 984.671065][ T9066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.676923][ T9066] RIP: 0033:0x459829 [ 984.680790][ T9066] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.700378][ T9066] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 984.708753][ T9066] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 984.716710][ T9066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 984.724655][ T9066] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.732711][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:45:48 executing program 5 (fault-call:7 fault-nth:25): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 984.740665][ T9066] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 03:45:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 984.873181][ T9090] FAULT_INJECTION: forcing a failure. [ 984.873181][ T9090] name failslab, interval 1, probability 0, space 0, times 0 [ 984.890480][ T9090] CPU: 0 PID: 9090 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 984.898367][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.908405][ T9090] Call Trace: [ 984.911694][ T9090] dump_stack+0x1d8/0x2f8 [ 984.916016][ T9090] should_fail+0x555/0x770 [ 984.920430][ T9090] __should_failslab+0x11a/0x160 [ 984.925348][ T9090] ? alloc_vfsmnt+0xaa/0x470 [ 984.929905][ T9090] should_failslab+0x9/0x20 [ 984.934373][ T9090] __kmalloc_track_caller+0x79/0x340 [ 984.939636][ T9090] kstrdup_const+0x55/0x90 [ 984.944020][ T9090] alloc_vfsmnt+0xaa/0x470 [ 984.948401][ T9090] clone_mnt+0x6b/0xbc0 [ 984.952529][ T9090] ? do_raw_spin_unlock+0x49/0x260 [ 984.957605][ T9090] copy_tree+0x4fc/0xd60 [ 984.961808][ T9090] ? copy_mnt_ns+0x131/0xd30 [ 984.966366][ T9090] copy_mnt_ns+0x131/0xd30 [ 984.970746][ T9090] ? create_new_namespaces+0x35/0x700 [ 984.976213][ T9090] ? kmem_cache_alloc+0x223/0x2e0 [ 984.981203][ T9090] create_new_namespaces+0xde/0x700 [ 984.986366][ T9090] ? security_capable+0xa2/0xd0 [ 984.991182][ T9090] ? ns_capable+0x91/0xf0 [ 984.995475][ T9090] copy_namespaces+0x2bb/0x300 [ 985.000308][ T9090] copy_process+0x2605/0x5ac0 [ 985.004953][ T9090] ? __kasan_check_write+0x14/0x20 [ 985.010027][ T9090] ? refcount_sub_and_test_checked+0x179/0x230 [ 985.016149][ T9090] _do_fork+0x13f/0x5b0 [ 985.020273][ T9090] ? debug_smp_processor_id+0x1c/0x20 [ 985.025623][ T9090] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 985.025632][ T9090] __x64_sys_clone+0x1ec/0x230 [ 985.025650][ T9090] do_syscall_64+0xfe/0x140 [ 985.036412][ T9090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.036419][ T9090] RIP: 0033:0x459829 [ 985.036426][ T9090] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5370) [ 985.036430][ T9090] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 985.036441][ T9090] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 985.046760][ T9090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 985.046765][ T9090] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.046769][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 985.046773][ T9090] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:48 executing program 5 (fault-call:7 fault-nth:26): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 03:45:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 03:45:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 985.311836][ T9125] FAULT_INJECTION: forcing a failure. [ 985.311836][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 985.339592][ T9125] CPU: 0 PID: 9125 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 985.347517][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.357551][ T9125] Call Trace: [ 985.360836][ T9125] dump_stack+0x1d8/0x2f8 [ 985.365164][ T9125] should_fail+0x555/0x770 [ 985.369578][ T9125] __should_failslab+0x11a/0x160 [ 985.374516][ T9125] ? alloc_vfsmnt+0xaa/0x470 [ 985.379095][ T9125] should_failslab+0x9/0x20 [ 985.383587][ T9125] __kmalloc_track_caller+0x79/0x340 [ 985.388867][ T9125] kstrdup_const+0x55/0x90 [ 985.393273][ T9125] alloc_vfsmnt+0xaa/0x470 [ 985.397678][ T9125] clone_mnt+0x6b/0xbc0 [ 985.401820][ T9125] ? do_raw_spin_unlock+0x49/0x260 [ 985.406913][ T9125] copy_tree+0x4fc/0xd60 [ 985.411138][ T9125] ? copy_mnt_ns+0x131/0xd30 [ 985.415720][ T9125] copy_mnt_ns+0x131/0xd30 [ 985.420125][ T9125] ? create_new_namespaces+0x35/0x700 [ 985.425483][ T9125] ? kmem_cache_alloc+0x223/0x2e0 [ 985.430499][ T9125] create_new_namespaces+0xde/0x700 [ 985.435684][ T9125] ? security_capable+0xa2/0xd0 [ 985.440510][ T9125] ? ns_capable+0x91/0xf0 [ 985.444819][ T9125] copy_namespaces+0x2bb/0x300 [ 985.449556][ T9125] copy_process+0x2605/0x5ac0 [ 985.449564][ T9125] ? __kasan_check_write+0x14/0x20 03:45:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 03:45:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5388) [ 985.449576][ T9125] ? refcount_sub_and_test_checked+0x179/0x230 [ 985.459308][ T9125] _do_fork+0x13f/0x5b0 [ 985.459316][ T9125] ? __kasan_check_write+0x14/0x20 [ 985.459324][ T9125] ? __fpregs_load_activate+0x195/0x220 [ 985.459332][ T9125] ? switch_fpu_return+0xe/0x10 [ 985.459340][ T9125] __x64_sys_clone+0x1ec/0x230 [ 985.459352][ T9125] do_syscall_64+0xfe/0x140 [ 985.459364][ T9125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.469608][ T9125] RIP: 0033:0x459829 [ 985.469617][ T9125] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.469622][ T9125] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 985.469630][ T9125] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 985.469635][ T9125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 985.469639][ T9125] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:45:49 executing program 5 (fault-call:7 fault-nth:27): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) [ 985.469644][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 985.469649][ T9125] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 03:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 985.724725][ T9173] FAULT_INJECTION: forcing a failure. [ 985.724725][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 985.771831][ T9173] CPU: 1 PID: 9173 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 985.779721][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.789753][ T9173] Call Trace: [ 985.793025][ T9173] dump_stack+0x1d8/0x2f8 [ 985.797336][ T9173] should_fail+0x555/0x770 [ 985.797349][ T9173] __should_failslab+0x11a/0x160 [ 985.797358][ T9173] ? alloc_vfsmnt+0x27/0x470 [ 985.797368][ T9173] should_failslab+0x9/0x20 [ 985.797394][ T9173] kmem_cache_alloc+0x56/0x2e0 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 03:45:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 985.797405][ T9173] alloc_vfsmnt+0x27/0x470 [ 985.806702][ T9173] clone_mnt+0x6b/0xbc0 [ 985.806714][ T9173] ? do_raw_spin_unlock+0x49/0x260 [ 985.806722][ T9173] copy_tree+0x4fc/0xd60 [ 985.806733][ T9173] ? copy_mnt_ns+0x131/0xd30 [ 985.815759][ T9173] copy_mnt_ns+0x131/0xd30 [ 985.815769][ T9173] ? create_new_namespaces+0x35/0x700 [ 985.815777][ T9173] ? kmem_cache_alloc+0x223/0x2e0 [ 985.815786][ T9173] create_new_namespaces+0xde/0x700 [ 985.815794][ T9173] ? security_capable+0xa2/0xd0 [ 985.815804][ T9173] ? ns_capable+0x91/0xf0 03:45:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x53a0) [ 985.824912][ T9173] copy_namespaces+0x2bb/0x300 [ 985.834105][ T9173] copy_process+0x2605/0x5ac0 [ 985.847250][ T9173] ? __kasan_check_write+0x14/0x20 [ 985.847260][ T9173] ? refcount_sub_and_test_checked+0x179/0x230 [ 985.847281][ T9173] _do_fork+0x13f/0x5b0 [ 985.857610][ T9173] ? debug_smp_processor_id+0x1c/0x20 [ 985.857619][ T9173] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 985.857628][ T9173] __x64_sys_clone+0x1ec/0x230 [ 985.857641][ T9173] do_syscall_64+0xfe/0x140 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 985.857651][ T9173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.857659][ T9173] RIP: 0033:0x459829 [ 985.867639][ T9173] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.867644][ T9173] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 985.867652][ T9173] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 985.867656][ T9173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:49 executing program 5 (fault-call:7 fault-nth:28): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 985.867660][ T9173] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.867664][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 985.867668][ T9173] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 [ 986.048424][ T9208] FAULT_INJECTION: forcing a failure. [ 986.048424][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 986.073090][ T9208] CPU: 1 PID: 9208 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 986.080975][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.091018][ T9208] Call Trace: [ 986.094300][ T9208] dump_stack+0x1d8/0x2f8 03:45:49 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 986.098632][ T9208] should_fail+0x555/0x770 [ 986.103037][ T9208] __should_failslab+0x11a/0x160 [ 986.107965][ T9208] ? alloc_vfsmnt+0xaa/0x470 [ 986.107978][ T9208] should_failslab+0x9/0x20 [ 986.117001][ T9208] __kmalloc_track_caller+0x79/0x340 [ 986.117012][ T9208] kstrdup_const+0x55/0x90 [ 986.117020][ T9208] alloc_vfsmnt+0xaa/0x470 [ 986.117030][ T9208] clone_mnt+0x6b/0xbc0 [ 986.135187][ T9208] ? do_raw_spin_unlock+0x49/0x260 [ 986.135197][ T9208] copy_tree+0x4fc/0xd60 [ 986.135207][ T9208] ? copy_mnt_ns+0x131/0xd30 [ 986.144515][ T9208] copy_mnt_ns+0x131/0xd30 [ 986.144525][ T9208] ? create_new_namespaces+0x35/0x700 [ 986.144535][ T9208] ? kmem_cache_alloc+0x223/0x2e0 [ 986.153580][ T9208] create_new_namespaces+0xde/0x700 [ 986.153591][ T9208] ? security_capable+0xa2/0xd0 [ 986.153600][ T9208] ? ns_capable+0x91/0xf0 [ 986.153611][ T9208] copy_namespaces+0x2bb/0x300 [ 986.163947][ T9208] copy_process+0x2605/0x5ac0 [ 986.163956][ T9208] ? __kasan_check_write+0x14/0x20 [ 986.163967][ T9208] ? refcount_sub_and_test_checked+0x179/0x230 [ 986.173973][ T9208] _do_fork+0x13f/0x5b0 [ 986.173986][ T9208] ? debug_smp_processor_id+0x1c/0x20 [ 986.183005][ T9208] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 986.183015][ T9208] __x64_sys_clone+0x1ec/0x230 [ 986.183028][ T9208] do_syscall_64+0xfe/0x140 [ 986.192744][ T9208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.192751][ T9208] RIP: 0033:0x459829 03:45:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 986.192757][ T9208] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.192763][ T9208] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 986.202998][ T9208] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 986.203003][ T9208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 986.203008][ T9208] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 986.203012][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:49 executing program 5 (fault-call:7 fault-nth:29): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 986.203015][ T9208] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x53b8) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 986.419332][ T9230] FAULT_INJECTION: forcing a failure. [ 986.419332][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 986.456368][ T9230] CPU: 0 PID: 9230 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 986.464252][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.474289][ T9230] Call Trace: [ 986.477573][ T9230] dump_stack+0x1d8/0x2f8 [ 986.481916][ T9230] should_fail+0x555/0x770 [ 986.481932][ T9230] __should_failslab+0x11a/0x160 [ 986.491223][ T9230] ? alloc_vfsmnt+0xaa/0x470 [ 986.491233][ T9230] should_failslab+0x9/0x20 [ 986.491244][ T9230] __kmalloc_track_caller+0x79/0x340 [ 986.500274][ T9230] kstrdup_const+0x55/0x90 [ 986.500284][ T9230] alloc_vfsmnt+0xaa/0x470 [ 986.500292][ T9230] clone_mnt+0x6b/0xbc0 03:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 986.500303][ T9230] ? do_raw_spin_unlock+0x49/0x260 [ 986.518725][ T9230] copy_tree+0x4fc/0xd60 [ 986.518733][ T9230] ? copy_mnt_ns+0x131/0xd30 [ 986.518745][ T9230] copy_mnt_ns+0x131/0xd30 [ 986.518758][ T9230] ? create_new_namespaces+0x35/0x700 [ 986.532613][ T9230] ? kmem_cache_alloc+0x223/0x2e0 [ 986.532624][ T9230] create_new_namespaces+0xde/0x700 [ 986.532633][ T9230] ? security_capable+0xa2/0xd0 [ 986.532644][ T9230] ? ns_capable+0x91/0xf0 [ 986.547372][ T9230] copy_namespaces+0x2bb/0x300 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) [ 986.547383][ T9230] copy_process+0x2605/0x5ac0 [ 986.547393][ T9230] ? __kasan_check_write+0x14/0x20 [ 986.547400][ T9230] ? refcount_sub_and_test_checked+0x179/0x230 [ 986.547416][ T9230] _do_fork+0x13f/0x5b0 [ 986.557400][ T9230] ? debug_smp_processor_id+0x1c/0x20 [ 986.557408][ T9230] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 986.557418][ T9230] __x64_sys_clone+0x1ec/0x230 [ 986.557431][ T9230] do_syscall_64+0xfe/0x140 [ 986.557440][ T9230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.557449][ T9230] RIP: 0033:0x459829 [ 986.566465][ T9230] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.566470][ T9230] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 986.566477][ T9230] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 986.566482][ T9230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 986.566486][ T9230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 986.566491][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 986.566495][ T9230] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 03:45:50 executing program 5 (fault-call:7 fault-nth:30): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x53d0) 03:45:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 986.898438][ T9272] FAULT_INJECTION: forcing a failure. [ 986.898438][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 986.933748][ T9272] CPU: 0 PID: 9272 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 986.941638][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.941642][ T9272] Call Trace: [ 986.941658][ T9272] dump_stack+0x1d8/0x2f8 [ 986.941671][ T9272] should_fail+0x555/0x770 [ 986.941686][ T9272] __should_failslab+0x11a/0x160 [ 986.941698][ T9272] ? alloc_vfsmnt+0xaa/0x470 [ 986.941709][ T9272] should_failslab+0x9/0x20 [ 986.941724][ T9272] __kmalloc_track_caller+0x79/0x340 [ 986.959330][ T9272] kstrdup_const+0x55/0x90 [ 986.959342][ T9272] alloc_vfsmnt+0xaa/0x470 [ 986.973199][ T9272] clone_mnt+0x6b/0xbc0 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) [ 986.973212][ T9272] ? do_raw_spin_unlock+0x49/0x260 [ 986.973221][ T9272] copy_tree+0x4fc/0xd60 [ 986.973228][ T9272] ? copy_mnt_ns+0x131/0xd30 [ 986.973241][ T9272] copy_mnt_ns+0x131/0xd30 [ 986.973254][ T9272] ? create_new_namespaces+0x35/0x700 [ 987.000963][ T9272] ? kmem_cache_alloc+0x223/0x2e0 [ 987.000974][ T9272] create_new_namespaces+0xde/0x700 [ 987.000986][ T9272] ? security_capable+0xa2/0xd0 [ 987.009862][ T9272] ? ns_capable+0x91/0xf0 [ 987.009872][ T9272] copy_namespaces+0x2bb/0x300 [ 987.009882][ T9272] copy_process+0x2605/0x5ac0 [ 987.009892][ T9272] ? retint_kernel+0x2b/0x2b [ 987.009909][ T9272] _do_fork+0x13f/0x5b0 [ 987.009918][ T9272] ? debug_smp_processor_id+0x1c/0x20 [ 987.009927][ T9272] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 987.009936][ T9272] __x64_sys_clone+0x1ec/0x230 [ 987.009952][ T9272] do_syscall_64+0xfe/0x140 [ 987.019687][ T9272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.019694][ T9272] RIP: 0033:0x459829 [ 987.019702][ T9272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.019706][ T9272] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 987.019713][ T9272] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 987.019718][ T9272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 987.019722][ T9272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.019726][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:50 executing program 5 (fault-call:7 fault-nth:31): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) [ 987.019731][ T9272] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 03:45:50 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x53e8) 03:45:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000254769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) [ 987.390476][ T9318] FAULT_INJECTION: forcing a failure. [ 987.390476][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 987.407598][ T9318] CPU: 0 PID: 9318 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 987.415484][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.425517][ T9318] Call Trace: [ 987.425533][ T9318] dump_stack+0x1d8/0x2f8 [ 987.425549][ T9318] should_fail+0x555/0x770 [ 987.437535][ T9318] __should_failslab+0x11a/0x160 [ 987.442457][ T9318] ? alloc_vfsmnt+0xaa/0x470 [ 987.442468][ T9318] should_failslab+0x9/0x20 [ 987.442476][ T9318] __kmalloc_track_caller+0x79/0x340 [ 987.442488][ T9318] kstrdup_const+0x55/0x90 [ 987.442496][ T9318] alloc_vfsmnt+0xaa/0x470 [ 987.442505][ T9318] clone_mnt+0x6b/0xbc0 [ 987.442517][ T9318] ? do_raw_spin_unlock+0x49/0x260 [ 987.451548][ T9318] copy_tree+0x4fc/0xd60 [ 987.451556][ T9318] ? copy_mnt_ns+0x131/0xd30 [ 987.451570][ T9318] copy_mnt_ns+0x131/0xd30 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) [ 987.451581][ T9318] ? create_new_namespaces+0x35/0x700 [ 987.451590][ T9318] ? kmem_cache_alloc+0x223/0x2e0 [ 987.451600][ T9318] create_new_namespaces+0xde/0x700 [ 987.451610][ T9318] ? security_capable+0xa2/0xd0 [ 987.451621][ T9318] ? ns_capable+0x91/0xf0 [ 987.469926][ T9318] copy_namespaces+0x2bb/0x300 [ 987.469938][ T9318] copy_process+0x2605/0x5ac0 [ 987.469946][ T9318] ? __kasan_check_write+0x14/0x20 [ 987.469957][ T9318] ? refcount_sub_and_test_checked+0x179/0x230 [ 987.493545][ T9318] _do_fork+0x13f/0x5b0 [ 987.493556][ T9318] ? debug_smp_processor_id+0x1c/0x20 [ 987.493564][ T9318] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 987.493574][ T9318] __x64_sys_clone+0x1ec/0x230 [ 987.503751][ T9318] do_syscall_64+0xfe/0x140 [ 987.503762][ T9318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.503769][ T9318] RIP: 0033:0x459829 [ 987.503776][ T9318] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.503780][ T9318] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 987.503787][ T9318] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 987.503791][ T9318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 987.503796][ T9318] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.503800][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 987.503807][ T9318] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:51 executing program 5 (fault-call:7 fault-nth:32): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 03:45:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5400) 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) [ 987.785216][ T9359] FAULT_INJECTION: forcing a failure. [ 987.785216][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 987.810453][ T9359] CPU: 0 PID: 9359 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 987.818341][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.828373][ T9359] Call Trace: [ 987.828393][ T9359] dump_stack+0x1d8/0x2f8 [ 987.828407][ T9359] should_fail+0x555/0x770 [ 987.828421][ T9359] __should_failslab+0x11a/0x160 [ 987.845279][ T9359] ? alloc_vfsmnt+0x27/0x470 [ 987.849853][ T9359] should_failslab+0x9/0x20 [ 987.849863][ T9359] kmem_cache_alloc+0x56/0x2e0 [ 987.849875][ T9359] alloc_vfsmnt+0x27/0x470 [ 987.863474][ T9359] clone_mnt+0x6b/0xbc0 [ 987.863486][ T9359] ? do_raw_spin_unlock+0x49/0x260 [ 987.863500][ T9359] copy_tree+0x4fc/0xd60 [ 987.876920][ T9359] ? copy_mnt_ns+0x131/0xd30 03:45:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) [ 987.876933][ T9359] copy_mnt_ns+0x131/0xd30 [ 987.876944][ T9359] ? create_new_namespaces+0x35/0x700 [ 987.876953][ T9359] ? kmem_cache_alloc+0x223/0x2e0 [ 987.876962][ T9359] create_new_namespaces+0xde/0x700 [ 987.876971][ T9359] ? security_capable+0xa2/0xd0 [ 987.876982][ T9359] ? ns_capable+0x91/0xf0 [ 987.901426][ T9359] copy_namespaces+0x2bb/0x300 [ 987.901438][ T9359] copy_process+0x2605/0x5ac0 [ 987.910549][ T9359] ? retint_kernel+0x2b/0x2b [ 987.910567][ T9359] _do_fork+0x13f/0x5b0 [ 987.910575][ T9359] ? debug_smp_processor_id+0x1c/0x20 [ 987.910587][ T9359] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 987.919961][ T9359] __x64_sys_clone+0x1ec/0x230 [ 987.919976][ T9359] do_syscall_64+0xfe/0x140 [ 987.919985][ T9359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.919992][ T9359] RIP: 0033:0x459829 [ 987.920000][ T9359] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 5 (fault-call:7 fault-nth:33): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) [ 987.920004][ T9359] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 987.920012][ T9359] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 987.920016][ T9359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 987.920021][ T9359] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.920025][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 987.920033][ T9359] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5418) 03:45:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 988.137976][ T9394] FAULT_INJECTION: forcing a failure. [ 988.137976][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 988.159198][ T9394] CPU: 0 PID: 9394 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 988.167084][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.177129][ T9394] Call Trace: [ 988.180412][ T9394] dump_stack+0x1d8/0x2f8 [ 988.184731][ T9394] should_fail+0x555/0x770 [ 988.184745][ T9394] __should_failslab+0x11a/0x160 [ 988.184758][ T9394] ? alloc_vfsmnt+0x27/0x470 [ 988.198623][ T9394] should_failslab+0x9/0x20 [ 988.203110][ T9394] kmem_cache_alloc+0x56/0x2e0 [ 988.203122][ T9394] alloc_vfsmnt+0x27/0x470 [ 988.203132][ T9394] clone_mnt+0x6b/0xbc0 [ 988.203145][ T9394] ? do_raw_spin_unlock+0x49/0x260 [ 988.221479][ T9394] copy_tree+0x4fc/0xd60 [ 988.225708][ T9394] ? copy_mnt_ns+0x131/0xd30 [ 988.230282][ T9394] copy_mnt_ns+0x131/0xd30 [ 988.230292][ T9394] ? create_new_namespaces+0x35/0x700 [ 988.230299][ T9394] ? kmem_cache_alloc+0x223/0x2e0 [ 988.230310][ T9394] create_new_namespaces+0xde/0x700 [ 988.250232][ T9394] ? security_capable+0xa2/0xd0 [ 988.255070][ T9394] ? ns_capable+0x91/0xf0 [ 988.259379][ T9394] copy_namespaces+0x2bb/0x300 [ 988.259390][ T9394] copy_process+0x2605/0x5ac0 [ 988.259398][ T9394] ? __kasan_check_write+0x14/0x20 [ 988.259409][ T9394] ? refcount_sub_and_test_checked+0x179/0x230 [ 988.268795][ T9394] _do_fork+0x13f/0x5b0 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:51 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 988.268805][ T9394] ? debug_smp_processor_id+0x1c/0x20 [ 988.268812][ T9394] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 988.268822][ T9394] __x64_sys_clone+0x1ec/0x230 [ 988.300280][ T9394] do_syscall_64+0xfe/0x140 [ 988.304766][ T9394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.310636][ T9394] RIP: 0033:0x459829 [ 988.314520][ T9394] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 988.334105][ T9394] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 988.334113][ T9394] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 988.334118][ T9394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 988.334122][ T9394] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.334126][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 988.334130][ T9394] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xb000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 5 (fault-call:7 fault-nth:34): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:45:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5430) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 988.588443][ T9438] FAULT_INJECTION: forcing a failure. [ 988.588443][ T9438] name failslab, interval 1, probability 0, space 0, times 0 [ 988.612281][ T9438] CPU: 0 PID: 9438 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 988.620251][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.630281][ T9438] Call Trace: [ 988.630296][ T9438] dump_stack+0x1d8/0x2f8 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 988.630308][ T9438] should_fail+0x555/0x770 [ 988.630323][ T9438] __should_failslab+0x11a/0x160 [ 988.647182][ T9438] ? alloc_vfsmnt+0x27/0x470 [ 988.651766][ T9438] should_failslab+0x9/0x20 [ 988.656239][ T9438] kmem_cache_alloc+0x56/0x2e0 [ 988.656250][ T9438] alloc_vfsmnt+0x27/0x470 [ 988.656258][ T9438] clone_mnt+0x6b/0xbc0 [ 988.656269][ T9438] ? do_raw_spin_unlock+0x49/0x260 [ 988.656278][ T9438] copy_tree+0x4fc/0xd60 [ 988.656287][ T9438] ? copy_mnt_ns+0x131/0xd30 [ 988.678834][ T9438] copy_mnt_ns+0x131/0xd30 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 988.678846][ T9438] ? create_new_namespaces+0x35/0x700 [ 988.678854][ T9438] ? kmem_cache_alloc+0x223/0x2e0 [ 988.678864][ T9438] create_new_namespaces+0xde/0x700 [ 988.678872][ T9438] ? security_capable+0xa2/0xd0 [ 988.678884][ T9438] ? ns_capable+0x91/0xf0 [ 988.687827][ T9438] copy_namespaces+0x2bb/0x300 [ 988.687839][ T9438] copy_process+0x2605/0x5ac0 [ 988.687849][ T9438] ? __kasan_check_write+0x14/0x20 [ 988.687858][ T9438] ? refcount_sub_and_test_checked+0x179/0x230 [ 988.687875][ T9438] _do_fork+0x13f/0x5b0 [ 988.721883][ T9438] ? debug_smp_processor_id+0x1c/0x20 [ 988.721893][ T9438] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 988.721903][ T9438] __x64_sys_clone+0x1ec/0x230 [ 988.721919][ T9438] do_syscall_64+0xfe/0x140 [ 988.733117][ T9438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.733125][ T9438] RIP: 0033:0x459829 [ 988.733133][ T9438] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 03:45:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000027fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 5 (fault-call:7 fault-nth:35): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 988.733137][ T9438] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 988.733144][ T9438] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 988.733149][ T9438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 988.733153][ T9438] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.733158][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 988.733162][ T9438] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:45:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5448) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) [ 988.963093][ T9475] FAULT_INJECTION: forcing a failure. [ 988.963093][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 988.990319][ T9475] CPU: 0 PID: 9475 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 988.998214][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.008250][ T9475] Call Trace: 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 989.008265][ T9475] dump_stack+0x1d8/0x2f8 [ 989.008284][ T9475] should_fail+0x555/0x770 [ 989.008296][ T9475] __should_failslab+0x11a/0x160 [ 989.008308][ T9475] ? alloc_vfsmnt+0xaa/0x470 [ 989.008317][ T9475] should_failslab+0x9/0x20 [ 989.008327][ T9475] __kmalloc_track_caller+0x79/0x340 [ 989.008335][ T9475] ? strlen+0x3c/0x60 [ 989.008346][ T9475] kstrdup_const+0x55/0x90 [ 989.008357][ T9475] alloc_vfsmnt+0xaa/0x470 [ 989.015920][ T9475] clone_mnt+0x6b/0xbc0 [ 989.015932][ T9475] ? do_raw_spin_unlock+0x49/0x260 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) [ 989.015942][ T9475] copy_tree+0x4fc/0xd60 [ 989.015950][ T9475] ? copy_mnt_ns+0x131/0xd30 [ 989.015962][ T9475] copy_mnt_ns+0x131/0xd30 [ 989.015976][ T9475] ? create_new_namespaces+0x35/0x700 [ 989.056415][ T9475] ? kmem_cache_alloc+0x223/0x2e0 [ 989.056425][ T9475] create_new_namespaces+0xde/0x700 [ 989.056436][ T9475] ? security_capable+0xa2/0xd0 [ 989.070298][ T9475] ? ns_capable+0x91/0xf0 [ 989.070309][ T9475] copy_namespaces+0x2bb/0x300 [ 989.070320][ T9475] copy_process+0x2605/0x5ac0 [ 989.070329][ T9475] ? __kasan_check_write+0x14/0x20 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) [ 989.070338][ T9475] ? refcount_sub_and_test_checked+0x179/0x230 [ 989.070356][ T9475] _do_fork+0x13f/0x5b0 [ 989.070364][ T9475] ? trace_hardirqs_on_caller+0x74/0x80 [ 989.070373][ T9475] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 989.070380][ T9475] ? check_preemption_disabled+0xa9/0x2a0 [ 989.070391][ T9475] __x64_sys_clone+0x1ec/0x230 [ 989.145513][ T9475] do_syscall_64+0xfe/0x140 [ 989.150003][ T9475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.155879][ T9475] RIP: 0033:0x459829 [ 989.159752][ T9475] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.159756][ T9475] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 989.159764][ T9475] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 989.159768][ T9475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 989.159772][ T9475] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.159777][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 989.159781][ T9475] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200760c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 03:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000029effffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5460) 03:45:52 executing program 5 (fault-call:7 fault-nth:36): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:52 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 03:45:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002efffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 989.402253][ T9527] FAULT_INJECTION: forcing a failure. [ 989.402253][ T9527] name failslab, interval 1, probability 0, space 0, times 0 [ 989.437184][ T9527] CPU: 0 PID: 9527 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 989.445142][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.455180][ T9527] Call Trace: [ 989.458535][ T9527] dump_stack+0x1d8/0x2f8 [ 989.462854][ T9527] should_fail+0x555/0x770 [ 989.467245][ T9527] __should_failslab+0x11a/0x160 [ 989.472150][ T9527] ? alloc_vfsmnt+0x27/0x470 [ 989.476712][ T9527] should_failslab+0x9/0x20 [ 989.481188][ T9527] kmem_cache_alloc+0x56/0x2e0 [ 989.485932][ T9527] alloc_vfsmnt+0x27/0x470 [ 989.490319][ T9527] clone_mnt+0x6b/0xbc0 [ 989.494445][ T9527] ? do_raw_spin_unlock+0x49/0x260 [ 989.499523][ T9527] copy_tree+0x4fc/0xd60 [ 989.503733][ T9527] ? copy_mnt_ns+0x131/0xd30 [ 989.508298][ T9527] copy_mnt_ns+0x131/0xd30 [ 989.512681][ T9527] ? create_new_namespaces+0x35/0x700 [ 989.518025][ T9527] ? kmem_cache_alloc+0x223/0x2e0 [ 989.523033][ T9527] create_new_namespaces+0xde/0x700 [ 989.528210][ T9527] ? security_capable+0xa2/0xd0 [ 989.533045][ T9527] ? ns_capable+0x91/0xf0 [ 989.537339][ T9527] copy_namespaces+0x2bb/0x300 [ 989.542067][ T9527] copy_process+0x2605/0x5ac0 [ 989.546735][ T9527] ? __kasan_check_write+0x14/0x20 [ 989.551817][ T9527] ? refcount_sub_and_test_checked+0x179/0x230 [ 989.557945][ T9527] _do_fork+0x13f/0x5b0 [ 989.562070][ T9527] ? debug_smp_processor_id+0x1c/0x20 [ 989.567408][ T9527] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 989.573442][ T9527] __x64_sys_clone+0x1ec/0x230 [ 989.578176][ T9527] do_syscall_64+0xfe/0x140 [ 989.582649][ T9527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.588505][ T9527] RIP: 0033:0x459829 [ 989.592368][ T9527] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.611940][ T9527] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 989.620315][ T9527] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 989.628255][ T9527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 989.636194][ T9527] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.644129][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:53 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 989.652066][ T9527] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002f0ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:53 executing program 5 (fault-call:7 fault-nth:37): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:53 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 03:45:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5478) 03:45:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:45:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 989.916674][ T9577] FAULT_INJECTION: forcing a failure. [ 989.916674][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 989.955523][ T9577] CPU: 0 PID: 9577 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 989.963409][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.973445][ T9577] Call Trace: [ 989.973460][ T9577] dump_stack+0x1d8/0x2f8 [ 989.973473][ T9577] should_fail+0x555/0x770 [ 989.973486][ T9577] __should_failslab+0x11a/0x160 [ 989.985528][ T9577] ? alloc_vfsmnt+0x27/0x470 [ 989.985539][ T9577] should_failslab+0x9/0x20 [ 989.985547][ T9577] kmem_cache_alloc+0x56/0x2e0 [ 989.985557][ T9577] alloc_vfsmnt+0x27/0x470 [ 989.985566][ T9577] clone_mnt+0x6b/0xbc0 03:45:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) [ 989.985581][ T9577] ? do_raw_spin_unlock+0x49/0x260 [ 990.008649][ T9577] copy_tree+0x4fc/0xd60 [ 990.008656][ T9577] ? copy_mnt_ns+0x131/0xd30 [ 990.008669][ T9577] copy_mnt_ns+0x131/0xd30 [ 990.008678][ T9577] ? create_new_namespaces+0x35/0x700 [ 990.008689][ T9577] ? kmem_cache_alloc+0x223/0x2e0 [ 990.017905][ T9577] create_new_namespaces+0xde/0x700 [ 990.017915][ T9577] ? security_capable+0xa2/0xd0 [ 990.017925][ T9577] ? ns_capable+0x91/0xf0 [ 990.017934][ T9577] copy_namespaces+0x2bb/0x300 [ 990.017944][ T9577] copy_process+0x2605/0x5ac0 [ 990.017953][ T9577] ? __kasan_check_write+0x14/0x20 [ 990.017961][ T9577] ? refcount_sub_and_test_checked+0x179/0x230 [ 990.017977][ T9577] _do_fork+0x13f/0x5b0 [ 990.031137][ T9577] ? debug_smp_processor_id+0x1c/0x20 [ 990.031146][ T9577] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 990.031156][ T9577] __x64_sys_clone+0x1ec/0x230 [ 990.031170][ T9577] do_syscall_64+0xfe/0x140 [ 990.031201][ T9577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.031211][ T9577] RIP: 0033:0x459829 [ 990.046710][ T9577] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.046715][ T9577] RSP: 002b:00007fd819f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 990.046723][ T9577] RAX: ffffffffffffffda RBX: 00007fd819f24c90 RCX: 0000000000459829 [ 990.046728][ T9577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 990.046732][ T9577] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 03:45:53 executing program 5 (fault-call:7 fault-nth:38): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 03:45:53 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 990.046736][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f256d4 [ 990.046740][ T9577] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000009 03:45:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 990.307245][ T9607] FAULT_INJECTION: forcing a failure. [ 990.307245][ T9607] name failslab, interval 1, probability 0, space 0, times 0 [ 990.329924][ T9607] CPU: 0 PID: 9607 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 990.337893][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.337896][ T9607] Call Trace: [ 990.337910][ T9607] dump_stack+0x1d8/0x2f8 03:45:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5490) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) [ 990.337924][ T9607] should_fail+0x555/0x770 [ 990.360145][ T9607] __should_failslab+0x11a/0x160 [ 990.365068][ T9607] ? alloc_vfsmnt+0xaa/0x470 [ 990.365078][ T9607] should_failslab+0x9/0x20 [ 990.365090][ T9607] __kmalloc_track_caller+0x79/0x340 [ 990.379383][ T9607] kstrdup_const+0x55/0x90 [ 990.383786][ T9607] alloc_vfsmnt+0xaa/0x470 [ 990.388215][ T9607] clone_mnt+0x6b/0xbc0 [ 990.392444][ T9607] ? do_raw_spin_unlock+0x49/0x260 [ 990.397542][ T9607] copy_tree+0x4fc/0xd60 [ 990.401766][ T9607] ? copy_mnt_ns+0x131/0xd30 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 990.406344][ T9607] copy_mnt_ns+0x131/0xd30 [ 990.410743][ T9607] ? create_new_namespaces+0x35/0x700 [ 990.416087][ T9607] ? kmem_cache_alloc+0x223/0x2e0 [ 990.416096][ T9607] create_new_namespaces+0xde/0x700 [ 990.416104][ T9607] ? security_capable+0xa2/0xd0 [ 990.416115][ T9607] ? ns_capable+0x91/0xf0 [ 990.435406][ T9607] copy_namespaces+0x2bb/0x300 [ 990.440171][ T9607] copy_process+0x2605/0x5ac0 [ 990.444843][ T9607] _do_fork+0x13f/0x5b0 [ 990.448994][ T9607] ? debug_smp_processor_id+0x1c/0x20 [ 990.454373][ T9607] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 990.454385][ T9607] __x64_sys_clone+0x1ec/0x230 [ 990.454399][ T9607] do_syscall_64+0xfe/0x140 [ 990.465171][ T9607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.465178][ T9607] RIP: 0033:0x459829 [ 990.465188][ T9607] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.498970][ T9607] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 990.507350][ T9607] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 990.507354][ T9607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 990.507359][ T9607] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.507363][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 990.507367][ T9607] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x10000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002f24ea05e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 03:45:54 executing program 5 (fault-call:7 fault-nth:39): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 03:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 990.694814][ T9641] FAULT_INJECTION: forcing a failure. [ 990.694814][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 990.711959][ T9641] CPU: 0 PID: 9641 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 990.719859][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.729892][ T9641] Call Trace: [ 990.729907][ T9641] dump_stack+0x1d8/0x2f8 [ 990.729920][ T9641] should_fail+0x555/0x770 [ 990.729934][ T9641] __should_failslab+0x11a/0x160 [ 990.729944][ T9641] ? alloc_vfsmnt+0x27/0x470 [ 990.729957][ T9641] should_failslab+0x9/0x20 [ 990.737516][ T9641] kmem_cache_alloc+0x56/0x2e0 [ 990.737528][ T9641] alloc_vfsmnt+0x27/0x470 [ 990.737537][ T9641] clone_mnt+0x6b/0xbc0 [ 990.737549][ T9641] ? do_raw_spin_unlock+0x49/0x260 [ 990.737559][ T9641] copy_tree+0x4fc/0xd60 [ 990.737566][ T9641] ? copy_mnt_ns+0x131/0xd30 [ 990.737581][ T9641] copy_mnt_ns+0x131/0xd30 [ 990.746904][ T9641] ? create_new_namespaces+0x35/0x700 [ 990.746913][ T9641] ? kmem_cache_alloc+0x223/0x2e0 [ 990.746924][ T9641] create_new_namespaces+0xde/0x700 [ 990.746933][ T9641] ? security_capable+0xa2/0xd0 [ 990.746944][ T9641] ? ns_capable+0x91/0xf0 [ 990.812158][ T9641] copy_namespaces+0x2bb/0x300 [ 990.816905][ T9641] copy_process+0x2605/0x5ac0 [ 990.821565][ T9641] ? __kasan_check_write+0x14/0x20 [ 990.826654][ T9641] ? refcount_sub_and_test_checked+0x179/0x230 [ 990.826671][ T9641] _do_fork+0x13f/0x5b0 [ 990.836909][ T9641] ? debug_smp_processor_id+0x1c/0x20 [ 990.836918][ T9641] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 990.836928][ T9641] __x64_sys_clone+0x1ec/0x230 [ 990.836942][ T9641] do_syscall_64+0xfe/0x140 [ 990.836952][ T9641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.836959][ T9641] RIP: 0033:0x459829 [ 990.836967][ T9641] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.836971][ T9641] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:45:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x54a8) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 990.836977][ T9641] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 990.836985][ T9641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 990.853099][ T9641] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.853104][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 990.853117][ T9641] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x11000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:54 executing program 5 (fault-call:7 fault-nth:40): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) 03:45:54 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 991.128652][ T9677] FAULT_INJECTION: forcing a failure. [ 991.128652][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 991.156981][ T9677] CPU: 0 PID: 9677 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 991.165071][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.175120][ T9677] Call Trace: [ 991.178408][ T9677] dump_stack+0x1d8/0x2f8 [ 991.178441][ T9677] should_fail+0x555/0x770 [ 991.187126][ T9677] __should_failslab+0x11a/0x160 [ 991.187135][ T9677] ? alloc_vfsmnt+0xaa/0x470 [ 991.187144][ T9677] should_failslab+0x9/0x20 [ 991.187154][ T9677] __kmalloc_track_caller+0x79/0x340 [ 991.206380][ T9677] kstrdup_const+0x55/0x90 [ 991.206389][ T9677] alloc_vfsmnt+0xaa/0x470 [ 991.206400][ T9677] clone_mnt+0x6b/0xbc0 [ 991.215177][ T9677] copy_tree+0x4fc/0xd60 [ 991.215185][ T9677] ? copy_mnt_ns+0x131/0xd30 [ 991.215197][ T9677] copy_mnt_ns+0x131/0xd30 [ 991.215208][ T9677] ? create_new_namespaces+0x35/0x700 [ 991.215216][ T9677] ? kmem_cache_alloc+0x223/0x2e0 [ 991.215225][ T9677] create_new_namespaces+0xde/0x700 [ 991.215237][ T9677] ? security_capable+0xa2/0xd0 [ 991.248034][ T9677] ? ns_capable+0x91/0xf0 [ 991.248045][ T9677] copy_namespaces+0x2bb/0x300 [ 991.248058][ T9677] copy_process+0x2605/0x5ac0 [ 991.257171][ T9677] ? __kasan_check_write+0x14/0x20 [ 991.257180][ T9677] ? refcount_sub_and_test_checked+0x179/0x230 [ 991.257197][ T9677] _do_fork+0x13f/0x5b0 [ 991.281920][ T9677] ? debug_smp_processor_id+0x1c/0x20 [ 991.287280][ T9677] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 991.293330][ T9677] __x64_sys_clone+0x1ec/0x230 [ 991.298088][ T9677] do_syscall_64+0xfe/0x140 [ 991.302580][ T9677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.308458][ T9677] RIP: 0033:0x459829 [ 991.312338][ T9677] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.332142][ T9677] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 991.340632][ T9677] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 991.348571][ T9677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 991.356508][ T9677] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 991.364444][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:45:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x54c0) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x12000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 991.372380][ T9677] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:55 executing program 5 (fault-call:7 fault-nth:41): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 991.527023][ T9726] FAULT_INJECTION: forcing a failure. [ 991.527023][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 991.542558][ T9726] CPU: 1 PID: 9726 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 991.550453][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.560489][ T9726] Call Trace: [ 991.563759][ T9726] dump_stack+0x1d8/0x2f8 [ 991.568063][ T9726] should_fail+0x555/0x770 [ 991.572453][ T9726] __should_failslab+0x11a/0x160 [ 991.577365][ T9726] ? alloc_vfsmnt+0xaa/0x470 [ 991.581932][ T9726] should_failslab+0x9/0x20 [ 991.586408][ T9726] __kmalloc_track_caller+0x79/0x340 [ 991.591666][ T9726] kstrdup_const+0x55/0x90 [ 991.596055][ T9726] alloc_vfsmnt+0xaa/0x470 [ 991.600436][ T9726] clone_mnt+0x6b/0xbc0 [ 991.604555][ T9726] ? do_raw_spin_unlock+0x49/0x260 [ 991.609633][ T9726] copy_tree+0x4fc/0xd60 [ 991.613847][ T9726] ? copy_mnt_ns+0x131/0xd30 [ 991.618403][ T9726] copy_mnt_ns+0x131/0xd30 [ 991.622787][ T9726] ? create_new_namespaces+0x35/0x700 [ 991.628125][ T9726] ? kmem_cache_alloc+0x223/0x2e0 [ 991.633119][ T9726] create_new_namespaces+0xde/0x700 [ 991.638283][ T9726] ? security_capable+0xa2/0xd0 [ 991.643100][ T9726] ? ns_capable+0x91/0xf0 [ 991.647403][ T9726] copy_namespaces+0x2bb/0x300 [ 991.652153][ T9726] copy_process+0x2605/0x5ac0 [ 991.656797][ T9726] ? __kasan_check_write+0x14/0x20 [ 991.661876][ T9726] ? refcount_sub_and_test_checked+0x179/0x230 [ 991.668016][ T9726] _do_fork+0x13f/0x5b0 [ 991.672152][ T9726] ? debug_smp_processor_id+0x1c/0x20 [ 991.677489][ T9726] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 991.683522][ T9726] __x64_sys_clone+0x1ec/0x230 [ 991.688256][ T9726] do_syscall_64+0xfe/0x140 [ 991.692729][ T9726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.698588][ T9726] RIP: 0033:0x459829 [ 991.702453][ T9726] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 991.722026][ T9726] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 991.730405][ T9726] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 991.738348][ T9726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 991.746295][ T9726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 991.754240][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 991.762179][ T9726] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:45:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x54d8) 03:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 5 (fault-call:7 fault-nth:42): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x13000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 991.917807][ T9757] FAULT_INJECTION: forcing a failure. [ 991.917807][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 991.930919][ T9757] CPU: 1 PID: 9757 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 991.938802][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.948838][ T9757] Call Trace: [ 991.952099][ T9757] dump_stack+0x1d8/0x2f8 [ 991.956423][ T9757] should_fail+0x555/0x770 [ 991.960823][ T9757] __should_failslab+0x11a/0x160 [ 991.965749][ T9757] ? alloc_vfsmnt+0xaa/0x470 [ 991.970321][ T9757] should_failslab+0x9/0x20 [ 991.974800][ T9757] __kmalloc_track_caller+0x79/0x340 [ 991.980057][ T9757] kstrdup_const+0x55/0x90 [ 991.984444][ T9757] alloc_vfsmnt+0xaa/0x470 [ 991.988827][ T9757] clone_mnt+0x6b/0xbc0 [ 991.992957][ T9757] ? do_raw_spin_unlock+0x49/0x260 [ 991.998050][ T9757] copy_tree+0x4fc/0xd60 [ 992.002279][ T9757] ? copy_mnt_ns+0x131/0xd30 [ 992.006846][ T9757] copy_mnt_ns+0x131/0xd30 [ 992.011247][ T9757] ? create_new_namespaces+0x35/0x700 [ 992.016604][ T9757] ? kmem_cache_alloc+0x223/0x2e0 [ 992.021605][ T9757] create_new_namespaces+0xde/0x700 [ 992.026771][ T9757] ? security_capable+0xa2/0xd0 [ 992.031590][ T9757] ? ns_capable+0x91/0xf0 [ 992.035890][ T9757] copy_namespaces+0x2bb/0x300 [ 992.040627][ T9757] copy_process+0x2605/0x5ac0 [ 992.045274][ T9757] ? __kasan_check_write+0x14/0x20 [ 992.050348][ T9757] ? refcount_sub_and_test_checked+0x179/0x230 [ 992.056485][ T9757] _do_fork+0x13f/0x5b0 [ 992.060620][ T9757] ? debug_smp_processor_id+0x1c/0x20 [ 992.065959][ T9757] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 992.072003][ T9757] __x64_sys_clone+0x1ec/0x230 [ 992.076745][ T9757] do_syscall_64+0xfe/0x140 [ 992.081222][ T9757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.087082][ T9757] RIP: 0033:0x459829 [ 992.090941][ T9757] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.110508][ T9757] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.118882][ T9757] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 992.126819][ T9757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 992.134756][ T9757] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.142693][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 992.150627][ T9757] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 5 (fault-call:7 fault-nth:43): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x19000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x54f0) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 03:45:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 03:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:55 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 992.354555][ T9785] FAULT_INJECTION: forcing a failure. [ 992.354555][ T9785] name failslab, interval 1, probability 0, space 0, times 0 [ 992.368344][ T9785] CPU: 1 PID: 9785 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 992.376228][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.386255][ T9785] Call Trace: [ 992.389513][ T9785] dump_stack+0x1d8/0x2f8 [ 992.393820][ T9785] should_fail+0x555/0x770 [ 992.398213][ T9785] __should_failslab+0x11a/0x160 [ 992.403119][ T9785] ? alloc_vfsmnt+0x27/0x470 [ 992.407672][ T9785] should_failslab+0x9/0x20 [ 992.412140][ T9785] kmem_cache_alloc+0x56/0x2e0 [ 992.416890][ T9785] alloc_vfsmnt+0x27/0x470 [ 992.421276][ T9785] clone_mnt+0x6b/0xbc0 [ 992.425400][ T9785] ? do_raw_spin_unlock+0x49/0x260 [ 992.430564][ T9785] copy_tree+0x4fc/0xd60 [ 992.434774][ T9785] ? copy_mnt_ns+0x131/0xd30 [ 992.439333][ T9785] copy_mnt_ns+0x131/0xd30 [ 992.443727][ T9785] ? create_new_namespaces+0x35/0x700 [ 992.449076][ T9785] ? kmem_cache_alloc+0x223/0x2e0 [ 992.454076][ T9785] create_new_namespaces+0xde/0x700 [ 992.459242][ T9785] ? security_capable+0xa2/0xd0 [ 992.464063][ T9785] ? ns_capable+0x91/0xf0 [ 992.468361][ T9785] copy_namespaces+0x2bb/0x300 [ 992.473095][ T9785] copy_process+0x2605/0x5ac0 [ 992.477740][ T9785] ? __kasan_check_write+0x14/0x20 [ 992.482816][ T9785] ? refcount_sub_and_test_checked+0x179/0x230 [ 992.488938][ T9785] _do_fork+0x13f/0x5b0 [ 992.493065][ T9785] ? debug_smp_processor_id+0x1c/0x20 [ 992.498402][ T9785] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 992.504435][ T9785] __x64_sys_clone+0x1ec/0x230 [ 992.509188][ T9785] do_syscall_64+0xfe/0x140 [ 992.514120][ T9785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.519979][ T9785] RIP: 0033:0x459829 [ 992.523840][ T9785] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.543408][ T9785] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.551781][ T9785] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 992.559721][ T9785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 992.567658][ T9785] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.575606][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 992.583541][ T9785] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 03:45:56 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1f000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:56 executing program 5 (fault-call:7 fault-nth:44): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5508) 03:45:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:45:56 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 992.768689][ T9822] FAULT_INJECTION: forcing a failure. [ 992.768689][ T9822] name failslab, interval 1, probability 0, space 0, times 0 [ 992.789699][ T9822] CPU: 0 PID: 9822 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 992.797606][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.807640][ T9822] Call Trace: [ 992.807656][ T9822] dump_stack+0x1d8/0x2f8 [ 992.807668][ T9822] should_fail+0x555/0x770 [ 992.807681][ T9822] __should_failslab+0x11a/0x160 [ 992.807694][ T9822] ? alloc_vfsmnt+0xaa/0x470 [ 992.829078][ T9822] should_failslab+0x9/0x20 [ 992.833546][ T9822] __kmalloc_track_caller+0x79/0x340 [ 992.838812][ T9822] kstrdup_const+0x55/0x90 [ 992.843195][ T9822] alloc_vfsmnt+0xaa/0x470 [ 992.847578][ T9822] clone_mnt+0x6b/0xbc0 [ 992.851700][ T9822] ? do_raw_spin_unlock+0x49/0x260 [ 992.856777][ T9822] copy_tree+0x4fc/0xd60 [ 992.860987][ T9822] ? copy_mnt_ns+0x131/0xd30 [ 992.865545][ T9822] copy_mnt_ns+0x131/0xd30 [ 992.869931][ T9822] ? create_new_namespaces+0x35/0x700 [ 992.875274][ T9822] ? kmem_cache_alloc+0x223/0x2e0 [ 992.880262][ T9822] create_new_namespaces+0xde/0x700 [ 992.885424][ T9822] ? security_capable+0xa2/0xd0 [ 992.890255][ T9822] ? ns_capable+0x91/0xf0 [ 992.894549][ T9822] copy_namespaces+0x2bb/0x300 [ 992.899280][ T9822] copy_process+0x2605/0x5ac0 [ 992.903934][ T9822] ? __kasan_check_write+0x14/0x20 [ 992.909012][ T9822] ? refcount_sub_and_test_checked+0x179/0x230 [ 992.915137][ T9822] _do_fork+0x13f/0x5b0 [ 992.919260][ T9822] ? debug_smp_processor_id+0x1c/0x20 [ 992.924610][ T9822] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 992.930645][ T9822] __x64_sys_clone+0x1ec/0x230 [ 992.935382][ T9822] do_syscall_64+0xfe/0x140 [ 992.939854][ T9822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.945710][ T9822] RIP: 0033:0x459829 [ 992.949568][ T9822] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.969136][ T9822] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.977512][ T9822] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 992.985461][ T9822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 992.993400][ T9822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.001342][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 993.009282][ T9822] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 03:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:56 executing program 5 (fault-call:7 fault-nth:45): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:56 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5520) 03:45:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 03:45:56 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 993.205883][ T9848] FAULT_INJECTION: forcing a failure. [ 993.205883][ T9848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 993.219233][ T9848] CPU: 1 PID: 9848 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 993.227114][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.237157][ T9848] Call Trace: [ 993.240428][ T9848] dump_stack+0x1d8/0x2f8 [ 993.244752][ T9848] should_fail+0x555/0x770 [ 993.249139][ T9848] should_fail_alloc_page+0x55/0x60 [ 993.254299][ T9848] prepare_alloc_pages+0x283/0x470 [ 993.259377][ T9848] __alloc_pages_nodemask+0xb2/0x5d0 [ 993.264633][ T9848] kmem_getpages+0x56/0xa20 [ 993.269102][ T9848] ? trace_lock_release+0x135/0x1a0 [ 993.274265][ T9848] cache_grow_begin+0x7e/0x2c0 [ 993.279023][ T9848] cache_alloc_refill+0x311/0x3f0 [ 993.284024][ T9848] ? check_preemption_disabled+0xb7/0x2a0 [ 993.289707][ T9848] kmem_cache_alloc+0x2b9/0x2e0 [ 993.294523][ T9848] ? alloc_vfsmnt+0x27/0x470 [ 993.299087][ T9848] alloc_vfsmnt+0x27/0x470 [ 993.303475][ T9848] clone_mnt+0x6b/0xbc0 [ 993.307597][ T9848] ? do_raw_spin_unlock+0x49/0x260 [ 993.312685][ T9848] copy_tree+0x4fc/0xd60 [ 993.316907][ T9848] ? copy_mnt_ns+0x131/0xd30 [ 993.321469][ T9848] copy_mnt_ns+0x131/0xd30 [ 993.325850][ T9848] ? create_new_namespaces+0x35/0x700 [ 993.331185][ T9848] ? kmem_cache_alloc+0x223/0x2e0 [ 993.336180][ T9848] create_new_namespaces+0xde/0x700 [ 993.341351][ T9848] ? security_capable+0xa2/0xd0 [ 993.346171][ T9848] ? ns_capable+0x91/0xf0 [ 993.350472][ T9848] copy_namespaces+0x2bb/0x300 [ 993.355209][ T9848] copy_process+0x2605/0x5ac0 [ 993.359868][ T9848] ? __kasan_check_write+0x14/0x20 [ 993.364954][ T9848] ? refcount_sub_and_test_checked+0x179/0x230 [ 993.371081][ T9848] _do_fork+0x13f/0x5b0 [ 993.375203][ T9848] ? debug_smp_processor_id+0x1c/0x20 [ 993.380537][ T9848] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 993.386566][ T9848] __x64_sys_clone+0x1ec/0x230 [ 993.391298][ T9848] do_syscall_64+0xfe/0x140 [ 993.395773][ T9848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.401636][ T9848] RIP: 0033:0x459829 [ 993.405507][ T9848] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.425075][ T9848] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 993.433451][ T9848] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 993.441387][ T9848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 993.449325][ T9848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 03:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 993.457270][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 993.465217][ T9848] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 03:45:57 executing program 5 (fault-call:7 fault-nth:46): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:57 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5538) 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) [ 993.634522][ T9880] FAULT_INJECTION: forcing a failure. [ 993.634522][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 993.690946][ T9880] CPU: 1 PID: 9880 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 993.698837][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.708861][ T9880] Call Trace: [ 993.712121][ T9880] dump_stack+0x1d8/0x2f8 [ 993.716420][ T9880] should_fail+0x555/0x770 [ 993.720804][ T9880] __should_failslab+0x11a/0x160 [ 993.725709][ T9880] ? alloc_vfsmnt+0x27/0x470 [ 993.730277][ T9880] should_failslab+0x9/0x20 [ 993.734746][ T9880] kmem_cache_alloc+0x56/0x2e0 [ 993.739480][ T9880] alloc_vfsmnt+0x27/0x470 [ 993.743870][ T9880] clone_mnt+0x6b/0xbc0 [ 993.747994][ T9880] ? do_raw_spin_unlock+0x49/0x260 [ 993.753081][ T9880] copy_tree+0x4fc/0xd60 [ 993.757297][ T9880] ? copy_mnt_ns+0x131/0xd30 [ 993.761857][ T9880] copy_mnt_ns+0x131/0xd30 [ 993.766242][ T9880] ? create_new_namespaces+0x35/0x700 [ 993.771584][ T9880] ? kmem_cache_alloc+0x223/0x2e0 [ 993.776576][ T9880] create_new_namespaces+0xde/0x700 [ 993.781738][ T9880] ? security_capable+0xa2/0xd0 [ 993.786556][ T9880] ? ns_capable+0x91/0xf0 [ 993.790853][ T9880] copy_namespaces+0x2bb/0x300 [ 993.795613][ T9880] copy_process+0x2605/0x5ac0 [ 993.800259][ T9880] ? __kasan_check_write+0x14/0x20 [ 993.805344][ T9880] ? refcount_sub_and_test_checked+0x179/0x230 [ 993.811468][ T9880] _do_fork+0x13f/0x5b0 [ 993.815592][ T9880] ? debug_smp_processor_id+0x1c/0x20 [ 993.820931][ T9880] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 993.826962][ T9880] __x64_sys_clone+0x1ec/0x230 [ 993.831695][ T9880] do_syscall_64+0xfe/0x140 [ 993.836172][ T9880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.842044][ T9880] RIP: 0033:0x459829 [ 993.845912][ T9880] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.865492][ T9880] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 993.873867][ T9880] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 993.881824][ T9880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x24000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:57 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 03:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 993.889763][ T9880] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.897701][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 993.905639][ T9880] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:57 executing program 5 (fault-call:7 fault-nth:47): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 03:45:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5550) 03:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:57 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 994.098075][ T9922] FAULT_INJECTION: forcing a failure. [ 994.098075][ T9922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 994.111280][ T9922] CPU: 1 PID: 9922 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 994.119152][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.129184][ T9922] Call Trace: [ 994.132444][ T9922] dump_stack+0x1d8/0x2f8 [ 994.136750][ T9922] should_fail+0x555/0x770 [ 994.141141][ T9922] should_fail_alloc_page+0x55/0x60 [ 994.146311][ T9922] prepare_alloc_pages+0x283/0x470 [ 994.151390][ T9922] __alloc_pages_nodemask+0xb2/0x5d0 [ 994.156649][ T9922] kmem_getpages+0x56/0xa20 [ 994.161127][ T9922] ? trace_lock_release+0x135/0x1a0 [ 994.166296][ T9922] cache_grow_begin+0x7e/0x2c0 [ 994.171029][ T9922] cache_alloc_refill+0x311/0x3f0 [ 994.176022][ T9922] ? check_preemption_disabled+0xb7/0x2a0 [ 994.181714][ T9922] kmem_cache_alloc+0x2b9/0x2e0 [ 994.186528][ T9922] ? alloc_vfsmnt+0x27/0x470 [ 994.191082][ T9922] alloc_vfsmnt+0x27/0x470 [ 994.195465][ T9922] clone_mnt+0x6b/0xbc0 [ 994.199602][ T9922] ? do_raw_spin_unlock+0x49/0x260 [ 994.204689][ T9922] copy_tree+0x4fc/0xd60 [ 994.208902][ T9922] ? copy_mnt_ns+0x131/0xd30 [ 994.213461][ T9922] copy_mnt_ns+0x131/0xd30 [ 994.217849][ T9922] ? create_new_namespaces+0x35/0x700 [ 994.223183][ T9922] ? kmem_cache_alloc+0x223/0x2e0 [ 994.228172][ T9922] create_new_namespaces+0xde/0x700 [ 994.233354][ T9922] ? security_capable+0xa2/0xd0 [ 994.238181][ T9922] ? ns_capable+0x91/0xf0 [ 994.242474][ T9922] copy_namespaces+0x2bb/0x300 [ 994.247204][ T9922] copy_process+0x2605/0x5ac0 [ 994.251854][ T9922] ? __kasan_check_write+0x14/0x20 [ 994.256943][ T9922] ? refcount_sub_and_test_checked+0x179/0x230 [ 994.263072][ T9922] _do_fork+0x13f/0x5b0 [ 994.267202][ T9922] ? debug_smp_processor_id+0x1c/0x20 [ 994.272537][ T9922] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 994.278570][ T9922] __x64_sys_clone+0x1ec/0x230 [ 994.283304][ T9922] do_syscall_64+0xfe/0x140 [ 994.287773][ T9922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.293629][ T9922] RIP: 0033:0x459829 [ 994.297493][ T9922] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.317078][ T9922] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 994.325460][ T9922] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 994.333398][ T9922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 03:45:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 994.341337][ T9922] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.349562][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 994.357503][ T9922] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x25000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 03:45:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 5 (fault-call:7 fault-nth:48): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 03:45:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5568) [ 994.529845][ T9952] FAULT_INJECTION: forcing a failure. [ 994.529845][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 994.542630][ T9952] CPU: 1 PID: 9952 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 994.550511][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.560544][ T9952] Call Trace: [ 994.563802][ T9952] dump_stack+0x1d8/0x2f8 [ 994.568120][ T9952] should_fail+0x555/0x770 [ 994.572507][ T9952] __should_failslab+0x11a/0x160 [ 994.577422][ T9952] ? alloc_vfsmnt+0x27/0x470 [ 994.581990][ T9952] should_failslab+0x9/0x20 [ 994.586467][ T9952] kmem_cache_alloc+0x56/0x2e0 [ 994.591202][ T9952] alloc_vfsmnt+0x27/0x470 [ 994.595583][ T9952] clone_mnt+0x6b/0xbc0 [ 994.599712][ T9952] ? do_raw_spin_unlock+0x49/0x260 [ 994.604786][ T9952] copy_tree+0x4fc/0xd60 [ 994.608992][ T9952] ? copy_mnt_ns+0x131/0xd30 [ 994.613549][ T9952] copy_mnt_ns+0x131/0xd30 [ 994.617930][ T9952] ? create_new_namespaces+0x35/0x700 [ 994.623267][ T9952] ? kmem_cache_alloc+0x223/0x2e0 [ 994.628258][ T9952] create_new_namespaces+0xde/0x700 [ 994.633420][ T9952] ? security_capable+0xa2/0xd0 [ 994.638236][ T9952] ? ns_capable+0x91/0xf0 [ 994.642529][ T9952] copy_namespaces+0x2bb/0x300 [ 994.647271][ T9952] copy_process+0x2605/0x5ac0 [ 994.651920][ T9952] ? __kasan_check_write+0x14/0x20 [ 994.656997][ T9952] ? refcount_sub_and_test_checked+0x179/0x230 [ 994.663139][ T9952] _do_fork+0x13f/0x5b0 [ 994.667279][ T9952] ? debug_smp_processor_id+0x1c/0x20 [ 994.672622][ T9952] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 994.678739][ T9952] __x64_sys_clone+0x1ec/0x230 [ 994.683491][ T9952] do_syscall_64+0xfe/0x140 [ 994.687959][ T9952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.693813][ T9952] RIP: 0033:0x459829 [ 994.697670][ T9952] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.717325][ T9952] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 994.725703][ T9952] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 994.733649][ T9952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 994.741584][ T9952] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.749520][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 994.757479][ T9952] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 03:45:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 5 (fault-call:7 fault-nth:49): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2f000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:45:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5580) 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 994.955154][ T9977] FAULT_INJECTION: forcing a failure. [ 994.955154][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 994.999928][ T9977] CPU: 0 PID: 9977 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 995.007911][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.017947][ T9977] Call Trace: [ 995.017962][ T9977] dump_stack+0x1d8/0x2f8 [ 995.017987][ T9977] should_fail+0x555/0x770 [ 995.017999][ T9977] __should_failslab+0x11a/0x160 [ 995.034948][ T9977] ? alloc_vfsmnt+0xaa/0x470 [ 995.039519][ T9977] should_failslab+0x9/0x20 [ 995.039529][ T9977] __kmalloc_track_caller+0x79/0x340 [ 995.039542][ T9977] kstrdup_const+0x55/0x90 [ 995.039552][ T9977] alloc_vfsmnt+0xaa/0x470 [ 995.058074][ T9977] clone_mnt+0x6b/0xbc0 [ 995.062219][ T9977] ? do_raw_spin_unlock+0x49/0x260 [ 995.067315][ T9977] copy_tree+0x4fc/0xd60 [ 995.071537][ T9977] ? copy_mnt_ns+0x131/0xd30 [ 995.071553][ T9977] copy_mnt_ns+0x131/0xd30 [ 995.080489][ T9977] ? create_new_namespaces+0x35/0x700 [ 995.080497][ T9977] ? kmem_cache_alloc+0x223/0x2e0 [ 995.080507][ T9977] create_new_namespaces+0xde/0x700 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 995.080515][ T9977] ? security_capable+0xa2/0xd0 [ 995.080525][ T9977] ? ns_capable+0x91/0xf0 [ 995.105156][ T9977] copy_namespaces+0x2bb/0x300 [ 995.109910][ T9977] copy_process+0x2605/0x5ac0 [ 995.114573][ T9977] ? __kasan_check_write+0x14/0x20 [ 995.119700][ T9977] ? refcount_sub_and_test_checked+0x179/0x230 [ 995.125847][ T9977] _do_fork+0x13f/0x5b0 [ 995.129989][ T9977] ? debug_smp_processor_id+0x1c/0x20 [ 995.135343][ T9977] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 995.141395][ T9977] __x64_sys_clone+0x1ec/0x230 [ 995.146134][ T9977] do_syscall_64+0xfe/0x140 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 995.146144][ T9977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.146153][ T9977] RIP: 0033:0x459829 [ 995.160362][ T9977] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.180126][ T9977] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.188520][ T9977] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 03:45:58 executing program 5 (fault-call:7 fault-nth:50): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3a000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 995.196485][ T9977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 995.204438][ T9977] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.212471][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 995.212476][ T9977] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 995.309453][T10022] FAULT_INJECTION: forcing a failure. [ 995.309453][T10022] name failslab, interval 1, probability 0, space 0, times 0 03:45:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5598) [ 995.382314][T10022] CPU: 1 PID: 10022 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 995.390302][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.400330][T10022] Call Trace: [ 995.403587][T10022] dump_stack+0x1d8/0x2f8 [ 995.407889][T10022] should_fail+0x555/0x770 [ 995.412272][T10022] __should_failslab+0x11a/0x160 [ 995.417183][T10022] ? alloc_vfsmnt+0xaa/0x470 [ 995.421753][T10022] should_failslab+0x9/0x20 [ 995.426221][T10022] __kmalloc_track_caller+0x79/0x340 [ 995.431474][T10022] kstrdup_const+0x55/0x90 [ 995.435861][T10022] alloc_vfsmnt+0xaa/0x470 [ 995.440265][T10022] clone_mnt+0x6b/0xbc0 [ 995.444386][T10022] ? do_raw_spin_unlock+0x49/0x260 [ 995.449464][T10022] copy_tree+0x4fc/0xd60 [ 995.453671][T10022] ? copy_mnt_ns+0x131/0xd30 [ 995.458232][T10022] copy_mnt_ns+0x131/0xd30 [ 995.462615][T10022] ? create_new_namespaces+0x35/0x700 [ 995.467955][T10022] ? kmem_cache_alloc+0x223/0x2e0 [ 995.472955][T10022] create_new_namespaces+0xde/0x700 [ 995.478117][T10022] ? security_capable+0xa2/0xd0 [ 995.482956][T10022] ? ns_capable+0x91/0xf0 [ 995.487254][T10022] copy_namespaces+0x2bb/0x300 [ 995.491982][T10022] copy_process+0x2605/0x5ac0 [ 995.496632][T10022] ? __kasan_check_write+0x14/0x20 [ 995.501717][T10022] ? refcount_sub_and_test_checked+0x179/0x230 [ 995.507848][T10022] _do_fork+0x13f/0x5b0 [ 995.511971][T10022] ? debug_smp_processor_id+0x1c/0x20 [ 995.517312][T10022] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 995.523350][T10022] __x64_sys_clone+0x1ec/0x230 [ 995.528081][T10022] do_syscall_64+0xfe/0x140 [ 995.532549][T10022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.538412][T10022] RIP: 0033:0x459829 [ 995.542280][T10022] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.561848][T10022] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.570224][T10022] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:45:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:45:59 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020054769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3f000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 995.578180][T10022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 995.586120][T10022] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.594096][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 995.602034][T10022] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:59 executing program 5 (fault-call:7 fault-nth:51): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:59 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:45:59 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x55b0) [ 995.765819][T10061] FAULT_INJECTION: forcing a failure. [ 995.765819][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 995.782770][T10061] CPU: 1 PID: 10061 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 995.790757][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.800801][T10061] Call Trace: [ 995.804068][T10061] dump_stack+0x1d8/0x2f8 [ 995.808368][T10061] should_fail+0x555/0x770 [ 995.812754][T10061] __should_failslab+0x11a/0x160 [ 995.817660][T10061] ? alloc_vfsmnt+0xaa/0x470 [ 995.822215][T10061] should_failslab+0x9/0x20 [ 995.826683][T10061] __kmalloc_track_caller+0x79/0x340 [ 995.831945][T10061] kstrdup_const+0x55/0x90 [ 995.836330][T10061] alloc_vfsmnt+0xaa/0x470 [ 995.840722][T10061] clone_mnt+0x6b/0xbc0 [ 995.844856][T10061] ? do_raw_spin_unlock+0x49/0x260 [ 995.849946][T10061] copy_tree+0x4fc/0xd60 [ 995.854154][T10061] ? copy_mnt_ns+0x131/0xd30 [ 995.858730][T10061] copy_mnt_ns+0x131/0xd30 [ 995.863108][T10061] ? create_new_namespaces+0x35/0x700 [ 995.868442][T10061] ? kmem_cache_alloc+0x223/0x2e0 [ 995.873430][T10061] create_new_namespaces+0xde/0x700 [ 995.878594][T10061] ? security_capable+0xa2/0xd0 [ 995.883407][T10061] ? ns_capable+0x91/0xf0 [ 995.887717][T10061] copy_namespaces+0x2bb/0x300 [ 995.892447][T10061] copy_process+0x2605/0x5ac0 [ 995.897095][T10061] ? __kasan_check_write+0x14/0x20 [ 995.902176][T10061] ? refcount_sub_and_test_checked+0x179/0x230 [ 995.908300][T10061] _do_fork+0x13f/0x5b0 [ 995.912436][T10061] ? debug_smp_processor_id+0x1c/0x20 [ 995.917775][T10061] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 995.923804][T10061] __x64_sys_clone+0x1ec/0x230 [ 995.928533][T10061] do_syscall_64+0xfe/0x140 [ 995.933007][T10061] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.938865][T10061] RIP: 0033:0x459829 [ 995.942725][T10061] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.962320][T10061] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.970701][T10061] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 995.978642][T10061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 995.986577][T10061] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.994513][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 996.002455][T10061] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:45:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 03:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 5 (fault-call:7 fault-nth:52): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:45:59 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:45:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 03:45:59 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:45:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x55c8) [ 996.210158][T10081] FAULT_INJECTION: forcing a failure. [ 996.210158][T10081] name failslab, interval 1, probability 0, space 0, times 0 03:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 996.265885][T10081] CPU: 1 PID: 10081 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 996.273872][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.283908][T10081] Call Trace: [ 996.287188][T10081] dump_stack+0x1d8/0x2f8 [ 996.291553][T10081] should_fail+0x555/0x770 [ 996.295953][T10081] __should_failslab+0x11a/0x160 [ 996.300860][T10081] ? copy_pid_ns+0x1c1/0x7b0 [ 996.305522][T10081] should_failslab+0x9/0x20 [ 996.310016][T10081] kmem_cache_alloc+0x56/0x2e0 [ 996.314745][T10081] copy_pid_ns+0x1c1/0x7b0 [ 996.319127][T10081] ? refcount_inc_checked+0x1e/0x50 [ 996.324290][T10081] ? copy_ipcs+0x4f/0x3d0 [ 996.328593][T10081] create_new_namespaces+0x33c/0x700 [ 996.333855][T10081] copy_namespaces+0x2bb/0x300 [ 996.338583][T10081] copy_process+0x2605/0x5ac0 [ 996.343400][T10081] ? __kasan_check_write+0x14/0x20 [ 996.348481][T10081] ? refcount_sub_and_test_checked+0x179/0x230 [ 996.354605][T10081] _do_fork+0x13f/0x5b0 [ 996.358737][T10081] ? __kasan_check_write+0x14/0x20 [ 996.363813][T10081] ? __fpregs_load_activate+0x195/0x220 [ 996.369322][T10081] ? switch_fpu_return+0xe/0x10 [ 996.374141][T10081] __x64_sys_clone+0x1ec/0x230 [ 996.378876][T10081] do_syscall_64+0xfe/0x140 [ 996.383346][T10081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.389214][T10081] RIP: 0033:0x459829 [ 996.393074][T10081] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 996.412645][T10081] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 996.421018][T10081] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 996.428956][T10081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 996.436896][T10081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 996.444938][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 996.452878][T10081] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x410f0000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:00 executing program 5 (fault-call:7 fault-nth:53): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 03:46:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x55e0) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002009effffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 996.587841][T10125] FAULT_INJECTION: forcing a failure. [ 996.587841][T10125] name failslab, interval 1, probability 0, space 0, times 0 [ 996.601146][T10125] CPU: 1 PID: 10125 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 996.609109][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.619130][T10125] Call Trace: [ 996.622395][T10125] dump_stack+0x1d8/0x2f8 [ 996.626702][T10125] should_fail+0x555/0x770 [ 996.631098][T10125] __should_failslab+0x11a/0x160 [ 996.636007][T10125] ? alloc_pid+0x4b/0x880 [ 996.640302][T10125] should_failslab+0x9/0x20 [ 996.644772][T10125] kmem_cache_alloc+0x56/0x2e0 [ 996.649503][T10125] alloc_pid+0x4b/0x880 [ 996.653623][T10125] ? copy_thread_tls+0x362/0x620 [ 996.658527][T10125] copy_process+0x29f5/0x5ac0 [ 996.663181][T10125] ? __kasan_check_write+0x14/0x20 [ 996.668266][T10125] ? refcount_sub_and_test_checked+0x179/0x230 [ 996.674399][T10125] _do_fork+0x13f/0x5b0 [ 996.678552][T10125] ? debug_smp_processor_id+0x1c/0x20 [ 996.683890][T10125] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 996.689918][T10125] __x64_sys_clone+0x1ec/0x230 [ 996.694651][T10125] do_syscall_64+0xfe/0x140 [ 996.699120][T10125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.704976][T10125] RIP: 0033:0x459829 [ 996.708836][T10125] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 996.728404][T10125] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) [ 996.736778][T10125] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 996.744740][T10125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 996.752684][T10125] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 996.760624][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 996.768558][T10125] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:00 executing program 5 (fault-call:7 fault-nth:54): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200efffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:46:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x55f8) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200f0ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 996.969207][T10161] FAULT_INJECTION: forcing a failure. [ 996.969207][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 996.987640][T10161] CPU: 1 PID: 10161 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 996.995611][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.995615][T10161] Call Trace: [ 996.995629][T10161] dump_stack+0x1d8/0x2f8 [ 996.995644][T10161] should_fail+0x555/0x770 [ 997.008978][T10161] __should_failslab+0x11a/0x160 [ 997.008990][T10161] ? alloc_pid+0x4b/0x880 [ 997.017667][T10161] should_failslab+0x9/0x20 [ 997.017677][T10161] kmem_cache_alloc+0x56/0x2e0 [ 997.017685][T10161] alloc_pid+0x4b/0x880 [ 997.017692][T10161] ? copy_thread_tls+0x362/0x620 [ 997.017702][T10161] copy_process+0x29f5/0x5ac0 [ 997.026902][T10161] ? __kasan_check_write+0x14/0x20 [ 997.026911][T10161] ? refcount_sub_and_test_checked+0x179/0x230 [ 997.026930][T10161] _do_fork+0x13f/0x5b0 [ 997.026939][T10161] ? debug_smp_processor_id+0x1c/0x20 [ 997.026948][T10161] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 997.026961][T10161] __x64_sys_clone+0x1ec/0x230 [ 997.036181][T10161] do_syscall_64+0xfe/0x140 [ 997.036192][T10161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.036199][T10161] RIP: 0033:0x459829 [ 997.036205][T10161] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000755ea04ef200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 997.036213][T10161] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.045234][T10161] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 997.045239][T10161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 997.045244][T10161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.045248][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 997.045256][T10161] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:00 executing program 5 (fault-call:7 fault-nth:55): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 03:46:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4a000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5610) 03:46:00 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) [ 997.353328][T10186] FAULT_INJECTION: forcing a failure. [ 997.353328][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 997.410897][T10186] CPU: 0 PID: 10186 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 997.418878][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.418883][T10186] Call Trace: [ 997.418899][T10186] dump_stack+0x1d8/0x2f8 [ 997.418916][T10186] should_fail+0x555/0x770 [ 997.418931][T10186] __should_failslab+0x11a/0x160 [ 997.418943][T10186] should_failslab+0x9/0x20 [ 997.418952][T10186] kmem_cache_alloc_trace+0x5d/0x2f0 [ 997.418961][T10186] ? alloc_fs_context+0x65/0x5f0 03:46:01 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020030eecb287400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 997.418971][T10186] alloc_fs_context+0x65/0x5f0 [ 997.418980][T10186] ? trace_lock_release+0x135/0x1a0 [ 997.418988][T10186] ? alloc_pid+0x190/0x880 [ 997.418999][T10186] fs_context_for_mount+0x24/0x30 [ 997.419008][T10186] pid_ns_prepare_proc+0x2a/0x280 [ 997.419018][T10186] alloc_pid+0x714/0x880 [ 997.419029][T10186] copy_process+0x29f5/0x5ac0 [ 997.419041][T10186] ? __kasan_check_write+0x14/0x20 [ 997.436642][T10186] ? refcount_sub_and_test_checked+0x179/0x230 [ 997.436662][T10186] _do_fork+0x13f/0x5b0 [ 997.436673][T10186] ? debug_smp_processor_id+0x1c/0x20 [ 997.445956][T10186] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 997.445966][T10186] __x64_sys_clone+0x1ec/0x230 [ 997.445978][T10186] do_syscall_64+0xfe/0x140 [ 997.445989][T10186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.455703][T10186] RIP: 0033:0x459829 [ 997.455711][T10186] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:01 executing program 5 (fault-call:7 fault-nth:56): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) [ 997.455715][T10186] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.455722][T10186] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 997.455726][T10186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 997.455733][T10186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.465355][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 997.465359][T10186] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5628) 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:46:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:01 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 997.767190][T10225] FAULT_INJECTION: forcing a failure. [ 997.767190][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 997.797372][T10225] CPU: 0 PID: 10225 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 997.805347][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.815378][T10225] Call Trace: [ 997.818656][T10225] dump_stack+0x1d8/0x2f8 [ 997.818671][T10225] should_fail+0x555/0x770 [ 997.818689][T10225] __should_failslab+0x11a/0x160 [ 997.832292][T10225] should_failslab+0x9/0x20 [ 997.836782][T10225] kmem_cache_alloc_trace+0x5d/0x2f0 [ 997.836791][T10225] ? alloc_fs_context+0x65/0x5f0 [ 997.836803][T10225] alloc_fs_context+0x65/0x5f0 [ 997.846957][T10225] ? trace_lock_release+0x135/0x1a0 [ 997.846965][T10225] ? alloc_pid+0x190/0x880 [ 997.846976][T10225] fs_context_for_mount+0x24/0x30 [ 997.866263][T10225] pid_ns_prepare_proc+0x2a/0x280 [ 997.871276][T10225] alloc_pid+0x714/0x880 [ 997.875526][T10225] copy_process+0x29f5/0x5ac0 [ 997.880192][T10225] ? __kasan_check_write+0x14/0x20 [ 997.885281][T10225] ? refcount_sub_and_test_checked+0x179/0x230 [ 997.891431][T10225] _do_fork+0x13f/0x5b0 [ 997.895574][T10225] ? trace_hardirqs_on_caller+0x74/0x80 [ 997.901216][T10225] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 997.906640][T10225] ? check_preemption_disabled+0xa9/0x2a0 [ 997.912339][T10225] __x64_sys_clone+0x1ec/0x230 [ 997.917076][T10225] do_syscall_64+0xfe/0x140 [ 997.921544][T10225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.927400][T10225] RIP: 0033:0x459829 [ 997.931260][T10225] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.950829][T10225] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.959219][T10225] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4c000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:01 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 03:46:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 997.967173][T10225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 997.975111][T10225] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.983046][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 997.990982][T10225] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 03:46:01 executing program 5 (fault-call:7 fault-nth:57): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:01 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 03:46:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5640) 03:46:01 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 998.122463][T10262] FAULT_INJECTION: forcing a failure. [ 998.122463][T10262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 998.135771][T10262] CPU: 1 PID: 10262 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 998.143721][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.153743][T10262] Call Trace: [ 998.157002][T10262] dump_stack+0x1d8/0x2f8 [ 998.161305][T10262] should_fail+0x555/0x770 [ 998.165692][T10262] should_fail_alloc_page+0x55/0x60 [ 998.170875][T10262] prepare_alloc_pages+0x283/0x470 [ 998.175963][T10262] __alloc_pages_nodemask+0xb2/0x5d0 [ 998.181215][T10262] ? alloc_fs_context+0x4e3/0x5f0 [ 998.186213][T10262] ? fs_context_for_mount+0x24/0x30 [ 998.191381][T10262] ? alloc_pid+0x714/0x880 [ 998.195778][T10262] kmem_getpages+0x56/0xa20 [ 998.200256][T10262] ? trace_lock_release+0x135/0x1a0 [ 998.205421][T10262] cache_grow_begin+0x7e/0x2c0 [ 998.210151][T10262] cache_alloc_refill+0x311/0x3f0 [ 998.215142][T10262] ? check_preemption_disabled+0xb7/0x2a0 [ 998.220827][T10262] kmem_cache_alloc_trace+0x2d0/0x2f0 [ 998.226165][T10262] ? alloc_super+0x5d/0x740 [ 998.230638][T10262] alloc_super+0x5d/0x740 [ 998.234936][T10262] ? test_single_super+0x10/0x10 [ 998.239842][T10262] sget_fc+0x1ea/0x640 [ 998.243874][T10262] ? kill_litter_super+0xa0/0xa0 [ 998.248778][T10262] ? proc_reconfigure+0x2d0/0x2d0 [ 998.253766][T10262] vfs_get_super+0x6b/0x1b0 [ 998.258235][T10262] proc_get_tree+0x89/0x90 [ 998.262616][T10262] vfs_get_tree+0x8f/0x380 [ 998.267007][T10262] ? __kasan_check_write+0x14/0x20 [ 998.272091][T10262] fc_mount+0x1b/0xa0 [ 998.276040][T10262] pid_ns_prepare_proc+0x208/0x280 [ 998.281114][T10262] alloc_pid+0x714/0x880 [ 998.285328][T10262] copy_process+0x29f5/0x5ac0 [ 998.289979][T10262] ? __kasan_check_write+0x14/0x20 [ 998.295054][T10262] ? refcount_sub_and_test_checked+0x179/0x230 [ 998.301182][T10262] _do_fork+0x13f/0x5b0 [ 998.305303][T10262] ? debug_smp_processor_id+0x1c/0x20 [ 998.310759][T10262] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 998.316801][T10262] __x64_sys_clone+0x1ec/0x230 [ 998.321542][T10262] do_syscall_64+0xfe/0x140 [ 998.326103][T10262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.331966][T10262] RIP: 0033:0x459829 [ 998.335832][T10262] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.355570][T10262] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 998.363948][T10262] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 998.371894][T10262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 998.379843][T10262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.387812][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 998.395779][T10262] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x56020000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:02 executing program 5 (fault-call:7 fault-nth:58): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:02 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 03:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 998.525478][T10290] FAULT_INJECTION: forcing a failure. [ 998.525478][T10290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 998.538683][T10290] CPU: 1 PID: 10290 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 998.546653][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.556677][T10290] Call Trace: [ 998.559932][T10290] dump_stack+0x1d8/0x2f8 [ 998.564227][T10290] should_fail+0x555/0x770 [ 998.568622][T10290] should_fail_alloc_page+0x55/0x60 [ 998.573783][T10290] prepare_alloc_pages+0x283/0x470 [ 998.578859][T10290] __alloc_pages_nodemask+0xb2/0x5d0 [ 998.584104][T10290] ? alloc_fs_context+0x4e3/0x5f0 [ 998.589108][T10290] ? fs_context_for_mount+0x24/0x30 [ 998.594267][T10290] ? alloc_pid+0x714/0x880 [ 998.598649][T10290] kmem_getpages+0x56/0xa20 [ 998.603113][T10290] ? trace_lock_release+0x135/0x1a0 [ 998.608272][T10290] cache_grow_begin+0x7e/0x2c0 [ 998.613013][T10290] cache_alloc_refill+0x311/0x3f0 [ 998.617999][T10290] ? check_preemption_disabled+0xb7/0x2a0 [ 998.623679][T10290] kmem_cache_alloc_trace+0x2d0/0x2f0 [ 998.629009][T10290] ? alloc_super+0x5d/0x740 [ 998.633479][T10290] alloc_super+0x5d/0x740 [ 998.637772][T10290] ? test_single_super+0x10/0x10 [ 998.642670][T10290] sget_fc+0x1ea/0x640 [ 998.646701][T10290] ? kill_litter_super+0xa0/0xa0 [ 998.651601][T10290] ? proc_reconfigure+0x2d0/0x2d0 [ 998.656586][T10290] vfs_get_super+0x6b/0x1b0 [ 998.661053][T10290] proc_get_tree+0x89/0x90 [ 998.665442][T10290] vfs_get_tree+0x8f/0x380 [ 998.669821][T10290] ? __kasan_check_write+0x14/0x20 [ 998.674898][T10290] fc_mount+0x1b/0xa0 [ 998.678844][T10290] pid_ns_prepare_proc+0x208/0x280 [ 998.683918][T10290] alloc_pid+0x714/0x880 [ 998.688123][T10290] copy_process+0x29f5/0x5ac0 [ 998.692764][T10290] ? __kasan_check_write+0x14/0x20 [ 998.697838][T10290] ? refcount_sub_and_test_checked+0x179/0x230 [ 998.703959][T10290] _do_fork+0x13f/0x5b0 [ 998.708076][T10290] ? debug_smp_processor_id+0x1c/0x20 [ 998.713413][T10290] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 998.719441][T10290] __x64_sys_clone+0x1ec/0x230 [ 998.724169][T10290] do_syscall_64+0xfe/0x140 [ 998.728640][T10290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.734494][T10290] RIP: 0033:0x459829 [ 998.738352][T10290] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.757917][T10290] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 998.766292][T10290] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 998.774230][T10290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 998.782165][T10290] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.790099][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 998.798033][T10290] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 03:46:02 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:02 executing program 5 (fault-call:7 fault-nth:59): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5658) 03:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 03:46:02 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 998.982480][T10318] FAULT_INJECTION: forcing a failure. [ 998.982480][T10318] name failslab, interval 1, probability 0, space 0, times 0 [ 999.000093][T10318] CPU: 1 PID: 10318 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 999.008060][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.018083][T10318] Call Trace: [ 999.021338][T10318] dump_stack+0x1d8/0x2f8 [ 999.025634][T10318] should_fail+0x555/0x770 [ 999.030019][T10318] __should_failslab+0x11a/0x160 [ 999.034926][T10318] should_failslab+0x9/0x20 [ 999.039393][T10318] kmem_cache_alloc_trace+0x5d/0x2f0 [ 999.044641][T10318] ? smack_sb_alloc_security+0x51/0x130 [ 999.050154][T10318] smack_sb_alloc_security+0x51/0x130 [ 999.055490][T10318] security_sb_alloc+0x55/0xb0 [ 999.060217][T10318] alloc_super+0x167/0x740 [ 999.064597][T10318] ? test_single_super+0x10/0x10 [ 999.069495][T10318] sget_fc+0x1ea/0x640 [ 999.073526][T10318] ? kill_litter_super+0xa0/0xa0 [ 999.078431][T10318] ? proc_reconfigure+0x2d0/0x2d0 [ 999.083416][T10318] vfs_get_super+0x6b/0x1b0 [ 999.087890][T10318] proc_get_tree+0x89/0x90 [ 999.092268][T10318] vfs_get_tree+0x8f/0x380 [ 999.096648][T10318] ? __kasan_check_write+0x14/0x20 [ 999.101723][T10318] fc_mount+0x1b/0xa0 [ 999.105682][T10318] pid_ns_prepare_proc+0x208/0x280 [ 999.110765][T10318] alloc_pid+0x714/0x880 [ 999.114972][T10318] copy_process+0x29f5/0x5ac0 [ 999.119611][T10318] ? __kasan_check_write+0x14/0x20 [ 999.124687][T10318] ? refcount_sub_and_test_checked+0x179/0x230 [ 999.130825][T10318] _do_fork+0x13f/0x5b0 [ 999.134949][T10318] ? debug_smp_processor_id+0x1c/0x20 [ 999.140285][T10318] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 999.146321][T10318] __x64_sys_clone+0x1ec/0x230 [ 999.151060][T10318] do_syscall_64+0xfe/0x140 [ 999.155530][T10318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.161385][T10318] RIP: 0033:0x459829 [ 999.165240][T10318] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.184805][T10318] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.193179][T10318] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 999.201115][T10318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 999.209051][T10318] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.216990][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 999.224925][T10318] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:02 executing program 5 (fault-call:7 fault-nth:60): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 03:46:02 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5670) [ 999.358324][T10345] FAULT_INJECTION: forcing a failure. [ 999.358324][T10345] name failslab, interval 1, probability 0, space 0, times 0 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 999.399316][T10345] CPU: 1 PID: 10345 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 999.407296][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.417326][T10345] Call Trace: [ 999.420584][T10345] dump_stack+0x1d8/0x2f8 [ 999.424882][T10345] should_fail+0x555/0x770 [ 999.429296][T10345] __should_failslab+0x11a/0x160 [ 999.434215][T10345] ? prealloc_shrinker+0x97/0x2e0 [ 999.439213][T10345] should_failslab+0x9/0x20 [ 999.443680][T10345] __kmalloc+0x7a/0x340 [ 999.447801][T10345] prealloc_shrinker+0x97/0x2e0 [ 999.452629][T10345] alloc_super+0x609/0x740 [ 999.457013][T10345] ? test_single_super+0x10/0x10 [ 999.461925][T10345] sget_fc+0x1ea/0x640 [ 999.465964][T10345] ? kill_litter_super+0xa0/0xa0 [ 999.470881][T10345] ? proc_reconfigure+0x2d0/0x2d0 [ 999.475873][T10345] vfs_get_super+0x6b/0x1b0 [ 999.480342][T10345] proc_get_tree+0x89/0x90 [ 999.484724][T10345] vfs_get_tree+0x8f/0x380 [ 999.489107][T10345] ? __kasan_check_write+0x14/0x20 [ 999.494184][T10345] fc_mount+0x1b/0xa0 [ 999.498129][T10345] pid_ns_prepare_proc+0x208/0x280 [ 999.503204][T10345] alloc_pid+0x714/0x880 [ 999.507421][T10345] copy_process+0x29f5/0x5ac0 [ 999.512073][T10345] ? __kasan_check_write+0x14/0x20 [ 999.517163][T10345] ? refcount_sub_and_test_checked+0x179/0x230 [ 999.523499][T10345] _do_fork+0x13f/0x5b0 [ 999.527621][T10345] ? debug_smp_processor_id+0x1c/0x20 [ 999.532956][T10345] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 999.538990][T10345] __x64_sys_clone+0x1ec/0x230 [ 999.543718][T10345] do_syscall_64+0xfe/0x140 [ 999.548188][T10345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.554046][T10345] RIP: 0033:0x459829 [ 999.557905][T10345] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.577475][T10345] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.585856][T10345] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 999.593819][T10345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 999.601759][T10345] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.609696][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 999.617630][T10345] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x65580000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) 03:46:03 executing program 5 (fault-call:7 fault-nth:61): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 999.787177][T10381] FAULT_INJECTION: forcing a failure. [ 999.787177][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 999.802687][T10381] CPU: 0 PID: 10381 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 999.810660][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.820702][T10381] Call Trace: [ 999.823974][T10381] dump_stack+0x1d8/0x2f8 [ 999.828278][T10381] should_fail+0x555/0x770 [ 999.828308][T10381] __should_failslab+0x11a/0x160 [ 999.837594][T10381] ? __list_lru_init+0xbe/0x900 [ 999.842412][T10381] should_failslab+0x9/0x20 [ 999.846884][T10381] __kmalloc+0x7a/0x340 [ 999.851006][T10381] __list_lru_init+0xbe/0x900 [ 999.855648][T10381] ? prealloc_shrinker+0x249/0x2e0 [ 999.860724][T10381] alloc_super+0x635/0x740 [ 999.865104][T10381] ? test_single_super+0x10/0x10 [ 999.870007][T10381] sget_fc+0x1ea/0x640 [ 999.874039][T10381] ? kill_litter_super+0xa0/0xa0 [ 999.878952][T10381] ? proc_reconfigure+0x2d0/0x2d0 [ 999.883941][T10381] vfs_get_super+0x6b/0x1b0 [ 999.888423][T10381] proc_get_tree+0x89/0x90 [ 999.892802][T10381] vfs_get_tree+0x8f/0x380 [ 999.897185][T10381] ? __kasan_check_write+0x14/0x20 [ 999.902265][T10381] fc_mount+0x1b/0xa0 [ 999.906217][T10381] pid_ns_prepare_proc+0x208/0x280 [ 999.911294][T10381] alloc_pid+0x714/0x880 [ 999.915506][T10381] copy_process+0x29f5/0x5ac0 [ 999.920146][T10381] ? __kasan_check_write+0x14/0x20 [ 999.925224][T10381] ? refcount_sub_and_test_checked+0x179/0x230 [ 999.931356][T10381] _do_fork+0x13f/0x5b0 [ 999.935477][T10381] ? debug_smp_processor_id+0x1c/0x20 [ 999.940813][T10381] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 999.946844][T10381] __x64_sys_clone+0x1ec/0x230 [ 999.951576][T10381] do_syscall_64+0xfe/0x140 [ 999.956045][T10381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.961906][T10381] RIP: 0033:0x459829 [ 999.965766][T10381] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 999.985339][T10381] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.993712][T10381] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1000.001647][T10381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1000.009586][T10381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1000.017522][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1000.025459][T10381] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5688) 03:46:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x68000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 03:46:03 executing program 5 (fault-call:7 fault-nth:62): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 03:46:03 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1000.268367][T10427] FAULT_INJECTION: forcing a failure. [ 1000.268367][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.284448][T10427] CPU: 0 PID: 10427 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1000.292439][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.302480][T10427] Call Trace: [ 1000.305772][T10427] dump_stack+0x1d8/0x2f8 [ 1000.310096][T10427] should_fail+0x555/0x770 [ 1000.314486][T10427] __should_failslab+0x11a/0x160 [ 1000.319404][T10427] should_failslab+0x9/0x20 [ 1000.323873][T10427] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 1000.329554][T10427] ? __kmalloc_node+0x3c/0x60 [ 1000.334202][T10427] ? memset+0x31/0x40 [ 1000.338151][T10427] __kmalloc_node+0x3c/0x60 [ 1000.342621][T10427] kvmalloc_node+0xcc/0x130 [ 1000.347623][T10427] __list_lru_init+0x35b/0x900 [ 1000.352358][T10427] alloc_super+0x635/0x740 [ 1000.356741][T10427] ? test_single_super+0x10/0x10 [ 1000.361659][T10427] sget_fc+0x1ea/0x640 [ 1000.365692][T10427] ? kill_litter_super+0xa0/0xa0 [ 1000.370601][T10427] ? proc_reconfigure+0x2d0/0x2d0 [ 1000.375592][T10427] vfs_get_super+0x6b/0x1b0 [ 1000.380064][T10427] proc_get_tree+0x89/0x90 [ 1000.384449][T10427] vfs_get_tree+0x8f/0x380 [ 1000.388930][T10427] ? __kasan_check_write+0x14/0x20 [ 1000.394007][T10427] fc_mount+0x1b/0xa0 [ 1000.397958][T10427] pid_ns_prepare_proc+0x208/0x280 [ 1000.403039][T10427] alloc_pid+0x714/0x880 [ 1000.407249][T10427] copy_process+0x29f5/0x5ac0 [ 1000.411897][T10427] ? __kasan_check_write+0x14/0x20 [ 1000.416976][T10427] ? refcount_sub_and_test_checked+0x179/0x230 [ 1000.423101][T10427] _do_fork+0x13f/0x5b0 [ 1000.427222][T10427] ? debug_smp_processor_id+0x1c/0x20 [ 1000.432561][T10427] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1000.438710][T10427] __x64_sys_clone+0x1ec/0x230 [ 1000.443533][T10427] do_syscall_64+0xfe/0x140 [ 1000.448006][T10427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.453861][T10427] RIP: 0033:0x459829 [ 1000.457724][T10427] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.477297][T10427] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.485672][T10427] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1000.493611][T10427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1000.501551][T10427] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1000.509489][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 03:46:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x56a0) 03:46:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6c000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 1000.517746][T10427] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 03:46:04 executing program 5 (fault-call:7 fault-nth:63): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:04 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 03:46:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x56b8) 03:46:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x74000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:04 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) [ 1000.774938][T10463] FAULT_INJECTION: forcing a failure. [ 1000.774938][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.815955][T10463] CPU: 0 PID: 10463 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1000.823935][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.823938][T10463] Call Trace: [ 1000.823953][T10463] dump_stack+0x1d8/0x2f8 [ 1000.823966][T10463] should_fail+0x555/0x770 [ 1000.845944][T10463] __should_failslab+0x11a/0x160 [ 1000.845956][T10463] should_failslab+0x9/0x20 [ 1000.845965][T10463] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1000.845971][T10463] ? __list_lru_init+0x3e3/0x900 [ 1000.845980][T10463] __list_lru_init+0x3e3/0x900 [ 1000.865526][T10463] alloc_super+0x635/0x740 [ 1000.865540][T10463] ? test_single_super+0x10/0x10 [ 1000.874673][T10463] sget_fc+0x1ea/0x640 [ 1000.874681][T10463] ? kill_litter_super+0xa0/0xa0 [ 1000.874691][T10463] ? proc_reconfigure+0x2d0/0x2d0 [ 1000.874698][T10463] vfs_get_super+0x6b/0x1b0 [ 1000.874706][T10463] proc_get_tree+0x89/0x90 [ 1000.874713][T10463] vfs_get_tree+0x8f/0x380 [ 1000.874721][T10463] ? __kasan_check_write+0x14/0x20 [ 1000.874730][T10463] fc_mount+0x1b/0xa0 [ 1000.874740][T10463] pid_ns_prepare_proc+0x208/0x280 [ 1000.883689][T10463] alloc_pid+0x714/0x880 [ 1000.883700][T10463] copy_process+0x29f5/0x5ac0 [ 1000.883710][T10463] ? __kasan_check_write+0x14/0x20 [ 1000.883719][T10463] ? refcount_sub_and_test_checked+0x179/0x230 [ 1000.883736][T10463] _do_fork+0x13f/0x5b0 [ 1000.883745][T10463] ? __x64_sys_clone+0x1c7/0x230 [ 1000.883750][T10463] ? __x64_sys_clone+0x1e3/0x230 [ 1000.883760][T10463] __x64_sys_clone+0x1ec/0x230 [ 1000.893662][T10463] do_syscall_64+0xfe/0x140 [ 1000.893673][T10463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.902521][T10463] RIP: 0033:0x459829 [ 1000.902528][T10463] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.902533][T10463] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.902540][T10463] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:04 executing program 5 (fault-call:7 fault-nth:64): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) [ 1000.902544][T10463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1000.902551][T10463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1000.912006][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1000.912011][T10463] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:04 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1001.105384][T10497] FAULT_INJECTION: forcing a failure. [ 1001.105384][T10497] name failslab, interval 1, probability 0, space 0, times 0 03:46:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 03:46:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x56d0) [ 1001.151196][T10497] CPU: 1 PID: 10497 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1001.159174][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.169209][T10497] Call Trace: [ 1001.172494][T10497] dump_stack+0x1d8/0x2f8 [ 1001.176805][T10497] should_fail+0x555/0x770 [ 1001.181188][T10497] __should_failslab+0x11a/0x160 [ 1001.186107][T10497] should_failslab+0x9/0x20 [ 1001.190588][T10497] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1001.195952][T10497] ? __list_lru_init+0x3e3/0x900 [ 1001.200961][T10497] __list_lru_init+0x3e3/0x900 [ 1001.205697][T10497] alloc_super+0x635/0x740 [ 1001.210087][T10497] ? test_single_super+0x10/0x10 [ 1001.214986][T10497] sget_fc+0x1ea/0x640 [ 1001.219018][T10497] ? kill_litter_super+0xa0/0xa0 [ 1001.223921][T10497] ? proc_reconfigure+0x2d0/0x2d0 [ 1001.229008][T10497] vfs_get_super+0x6b/0x1b0 [ 1001.233478][T10497] proc_get_tree+0x89/0x90 [ 1001.237858][T10497] vfs_get_tree+0x8f/0x380 [ 1001.242255][T10497] ? __kasan_check_write+0x14/0x20 [ 1001.247334][T10497] fc_mount+0x1b/0xa0 [ 1001.251284][T10497] pid_ns_prepare_proc+0x208/0x280 [ 1001.256360][T10497] alloc_pid+0x714/0x880 [ 1001.260677][T10497] copy_process+0x29f5/0x5ac0 [ 1001.265318][T10497] ? __kasan_check_write+0x14/0x20 [ 1001.270398][T10497] ? refcount_sub_and_test_checked+0x179/0x230 [ 1001.276523][T10497] _do_fork+0x13f/0x5b0 [ 1001.280642][T10497] ? debug_smp_processor_id+0x1c/0x20 [ 1001.285978][T10497] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1001.292011][T10497] __x64_sys_clone+0x1ec/0x230 [ 1001.296746][T10497] do_syscall_64+0xfe/0x140 [ 1001.301220][T10497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.307077][T10497] RIP: 0033:0x459829 [ 1001.310940][T10497] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1001.330530][T10497] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1001.338910][T10497] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:05 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000007428cbee3000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1001.346852][T10497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1001.354789][T10497] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1001.362724][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1001.370664][T10497] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7a000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:05 executing program 5 (fault-call:7 fault-nth:65): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 03:46:05 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1001.489365][T10524] FAULT_INJECTION: forcing a failure. [ 1001.489365][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.506332][T10524] CPU: 0 PID: 10524 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1001.514309][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.524345][T10524] Call Trace: [ 1001.527614][T10524] dump_stack+0x1d8/0x2f8 [ 1001.527627][T10524] should_fail+0x555/0x770 [ 1001.527638][T10524] __should_failslab+0x11a/0x160 [ 1001.527649][T10524] should_failslab+0x9/0x20 [ 1001.527658][T10524] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1001.527665][T10524] ? __list_lru_init+0x3e3/0x900 [ 1001.527673][T10524] __list_lru_init+0x3e3/0x900 [ 1001.527683][T10524] alloc_super+0x635/0x740 [ 1001.527691][T10524] ? test_single_super+0x10/0x10 [ 1001.527696][T10524] sget_fc+0x1ea/0x640 [ 1001.527703][T10524] ? kill_litter_super+0xa0/0xa0 [ 1001.527711][T10524] ? proc_reconfigure+0x2d0/0x2d0 [ 1001.527718][T10524] vfs_get_super+0x6b/0x1b0 [ 1001.527725][T10524] proc_get_tree+0x89/0x90 [ 1001.527735][T10524] vfs_get_tree+0x8f/0x380 [ 1001.597094][T10524] ? __kasan_check_write+0x14/0x20 [ 1001.602179][T10524] fc_mount+0x1b/0xa0 [ 1001.606134][T10524] pid_ns_prepare_proc+0x208/0x280 [ 1001.611211][T10524] alloc_pid+0x714/0x880 [ 1001.615419][T10524] copy_process+0x29f5/0x5ac0 [ 1001.620061][T10524] ? __kasan_check_write+0x14/0x20 [ 1001.625141][T10524] ? refcount_sub_and_test_checked+0x179/0x230 [ 1001.631271][T10524] _do_fork+0x13f/0x5b0 [ 1001.635392][T10524] ? debug_smp_processor_id+0x1c/0x20 [ 1001.640742][T10524] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1001.646779][T10524] __x64_sys_clone+0x1ec/0x230 [ 1001.651511][T10524] do_syscall_64+0xfe/0x140 [ 1001.655982][T10524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.661842][T10524] RIP: 0033:0x459829 [ 1001.665706][T10524] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1001.685275][T10524] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1001.693647][T10524] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1001.701584][T10524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1001.709536][T10524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1001.717476][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1001.725412][T10524] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:46:05 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:05 executing program 5 (fault-call:7 fault-nth:66): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x56e8) 03:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x81000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:05 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1001.907527][T10548] FAULT_INJECTION: forcing a failure. [ 1001.907527][T10548] name failslab, interval 1, probability 0, space 0, times 0 03:46:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1001.970379][T10548] CPU: 0 PID: 10548 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1001.978367][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.988404][T10548] Call Trace: [ 1001.991669][T10548] dump_stack+0x1d8/0x2f8 [ 1001.995971][T10548] should_fail+0x555/0x770 [ 1002.000358][T10548] __should_failslab+0x11a/0x160 [ 1002.005265][T10548] should_failslab+0x9/0x20 [ 1002.009734][T10548] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1002.014985][T10548] ? __list_lru_init+0x3e3/0x900 [ 1002.019888][T10548] __list_lru_init+0x3e3/0x900 [ 1002.024623][T10548] alloc_super+0x635/0x740 [ 1002.029005][T10548] ? test_single_super+0x10/0x10 [ 1002.033911][T10548] sget_fc+0x1ea/0x640 [ 1002.037942][T10548] ? kill_litter_super+0xa0/0xa0 [ 1002.042863][T10548] ? proc_reconfigure+0x2d0/0x2d0 [ 1002.047854][T10548] vfs_get_super+0x6b/0x1b0 [ 1002.052323][T10548] proc_get_tree+0x89/0x90 [ 1002.056705][T10548] vfs_get_tree+0x8f/0x380 [ 1002.061087][T10548] ? __kasan_check_write+0x14/0x20 [ 1002.066166][T10548] fc_mount+0x1b/0xa0 [ 1002.070134][T10548] pid_ns_prepare_proc+0x208/0x280 [ 1002.075214][T10548] alloc_pid+0x714/0x880 [ 1002.079423][T10548] copy_process+0x29f5/0x5ac0 [ 1002.084063][T10548] ? __kasan_check_write+0x14/0x20 [ 1002.089155][T10548] ? refcount_sub_and_test_checked+0x179/0x230 [ 1002.095278][T10548] _do_fork+0x13f/0x5b0 [ 1002.099403][T10548] ? debug_smp_processor_id+0x1c/0x20 [ 1002.104748][T10548] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1002.110791][T10548] __x64_sys_clone+0x1ec/0x230 [ 1002.115525][T10548] do_syscall_64+0xfe/0x140 [ 1002.120008][T10548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.125863][T10548] RIP: 0033:0x459829 [ 1002.129723][T10548] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.149288][T10548] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1002.157662][T10548] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 1002.165600][T10548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1002.173535][T10548] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.181480][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1002.189421][T10548] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:05 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:05 executing program 5 (fault-call:7 fault-nth:67): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:46:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5700) 03:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x88470000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1002.366574][T10594] FAULT_INJECTION: forcing a failure. [ 1002.366574][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.406841][T10594] CPU: 0 PID: 10594 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1002.414823][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.414826][T10594] Call Trace: [ 1002.414842][T10594] dump_stack+0x1d8/0x2f8 [ 1002.414854][T10594] should_fail+0x555/0x770 [ 1002.414867][T10594] __should_failslab+0x11a/0x160 [ 1002.414879][T10594] should_failslab+0x9/0x20 [ 1002.414888][T10594] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1002.414895][T10594] ? __list_lru_init+0x3e3/0x900 [ 1002.414906][T10594] __list_lru_init+0x3e3/0x900 [ 1002.461116][T10594] alloc_super+0x635/0x740 [ 1002.465510][T10594] ? test_single_super+0x10/0x10 [ 1002.470413][T10594] sget_fc+0x1ea/0x640 [ 1002.474445][T10594] ? kill_litter_super+0xa0/0xa0 [ 1002.479347][T10594] ? proc_reconfigure+0x2d0/0x2d0 [ 1002.484335][T10594] vfs_get_super+0x6b/0x1b0 [ 1002.488825][T10594] proc_get_tree+0x89/0x90 [ 1002.493211][T10594] vfs_get_tree+0x8f/0x380 [ 1002.497609][T10594] ? __kasan_check_write+0x14/0x20 [ 1002.502686][T10594] fc_mount+0x1b/0xa0 [ 1002.506634][T10594] pid_ns_prepare_proc+0x208/0x280 [ 1002.511945][T10594] alloc_pid+0x714/0x880 [ 1002.516156][T10594] copy_process+0x29f5/0x5ac0 [ 1002.520800][T10594] ? __kasan_check_write+0x14/0x20 [ 1002.525878][T10594] ? refcount_sub_and_test_checked+0x179/0x230 [ 1002.532002][T10594] _do_fork+0x13f/0x5b0 [ 1002.536127][T10594] ? debug_smp_processor_id+0x1c/0x20 [ 1002.541465][T10594] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1002.547499][T10594] __x64_sys_clone+0x1ec/0x230 [ 1002.552231][T10594] do_syscall_64+0xfe/0x140 [ 1002.556701][T10594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.562567][T10594] RIP: 0033:0x459829 [ 1002.566532][T10594] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.586120][T10594] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1002.594501][T10594] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 1002.602454][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1002.610391][T10594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.618331][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1002.626270][T10594] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200810800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 5 (fault-call:7 fault-nth:68): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5718) 03:46:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x88480000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1002.900655][T10635] FAULT_INJECTION: forcing a failure. [ 1002.900655][T10635] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.936134][T10635] CPU: 0 PID: 10635 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1002.944221][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.954380][T10635] Call Trace: [ 1002.957657][T10635] dump_stack+0x1d8/0x2f8 [ 1002.961974][T10635] should_fail+0x555/0x770 [ 1002.966393][T10635] __should_failslab+0x11a/0x160 [ 1002.971312][T10635] should_failslab+0x9/0x20 [ 1002.975793][T10635] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1002.975802][T10635] ? __list_lru_init+0x3e3/0x900 [ 1002.975813][T10635] __list_lru_init+0x3e3/0x900 [ 1002.975824][T10635] alloc_super+0x635/0x740 [ 1002.975838][T10635] ? test_single_super+0x10/0x10 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1002.986004][T10635] sget_fc+0x1ea/0x640 [ 1002.986013][T10635] ? kill_litter_super+0xa0/0xa0 [ 1002.986041][T10635] ? proc_reconfigure+0x2d0/0x2d0 [ 1002.986048][T10635] vfs_get_super+0x6b/0x1b0 [ 1002.986056][T10635] proc_get_tree+0x89/0x90 [ 1002.986062][T10635] vfs_get_tree+0x8f/0x380 [ 1002.986073][T10635] fc_mount+0x1b/0xa0 [ 1002.986081][T10635] pid_ns_prepare_proc+0x208/0x280 [ 1002.986091][T10635] alloc_pid+0x714/0x880 [ 1002.986102][T10635] copy_process+0x29f5/0x5ac0 [ 1002.986109][T10635] ? __kasan_check_write+0x14/0x20 03:46:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5730) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) [ 1002.986120][T10635] ? refcount_sub_and_test_checked+0x179/0x230 [ 1003.056381][T10635] _do_fork+0x13f/0x5b0 [ 1003.056392][T10635] ? debug_smp_processor_id+0x1c/0x20 [ 1003.056412][T10635] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1003.056421][T10635] __x64_sys_clone+0x1ec/0x230 [ 1003.056434][T10635] do_syscall_64+0xfe/0x140 [ 1003.056444][T10635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.056451][T10635] RIP: 0033:0x459829 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1003.056461][T10635] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.065915][T10635] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1003.065923][T10635] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1003.065928][T10635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1003.065932][T10635] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.065936][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1003.065941][T10635] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:06 executing program 5 (fault-call:7 fault-nth:69): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:46:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x88a8ffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 03:46:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x96000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5748) 03:46:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) [ 1003.382134][T10697] FAULT_INJECTION: forcing a failure. [ 1003.382134][T10697] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.410382][T10697] CPU: 0 PID: 10697 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1003.418354][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.418358][T10697] Call Trace: [ 1003.418372][T10697] dump_stack+0x1d8/0x2f8 [ 1003.418386][T10697] should_fail+0x555/0x770 [ 1003.418401][T10697] __should_failslab+0x11a/0x160 [ 1003.418411][T10697] should_failslab+0x9/0x20 [ 1003.418420][T10697] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1003.418428][T10697] ? __list_lru_init+0x3e3/0x900 [ 1003.418436][T10697] __list_lru_init+0x3e3/0x900 [ 1003.418446][T10697] alloc_super+0x635/0x740 [ 1003.418454][T10697] ? test_single_super+0x10/0x10 [ 1003.418463][T10697] sget_fc+0x1ea/0x640 03:46:07 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1003.455121][T10697] ? kill_litter_super+0xa0/0xa0 [ 1003.455134][T10697] ? proc_reconfigure+0x2d0/0x2d0 [ 1003.455141][T10697] vfs_get_super+0x6b/0x1b0 [ 1003.455150][T10697] proc_get_tree+0x89/0x90 [ 1003.455157][T10697] vfs_get_tree+0x8f/0x380 [ 1003.455165][T10697] ? __kasan_check_write+0x14/0x20 [ 1003.455176][T10697] fc_mount+0x1b/0xa0 [ 1003.455187][T10697] pid_ns_prepare_proc+0x208/0x280 [ 1003.478170][T10697] alloc_pid+0x714/0x880 [ 1003.478184][T10697] copy_process+0x29f5/0x5ac0 [ 1003.478194][T10697] ? __kasan_check_write+0x14/0x20 [ 1003.478204][T10697] ? refcount_sub_and_test_checked+0x179/0x230 [ 1003.478223][T10697] _do_fork+0x13f/0x5b0 [ 1003.478231][T10697] ? trace_hardirqs_on_caller+0x74/0x80 [ 1003.478241][T10697] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1003.478252][T10697] ? check_preemption_disabled+0xa9/0x2a0 [ 1003.488173][T10697] __x64_sys_clone+0x1ec/0x230 [ 1003.506497][T10697] do_syscall_64+0xfe/0x140 [ 1003.506509][T10697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.506514][T10697] RIP: 0033:0x459829 [ 1003.506523][T10697] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.515547][T10697] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1003.515555][T10697] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1003.515560][T10697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1003.515565][T10697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:46:07 executing program 5 (fault-call:7 fault-nth:70): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:07 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 1003.515569][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1003.515574][T10697] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:07 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1003.734594][T10739] FAULT_INJECTION: forcing a failure. [ 1003.734594][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.752588][T10739] CPU: 1 PID: 10739 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1003.760688][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.770823][T10739] Call Trace: [ 1003.774084][T10739] dump_stack+0x1d8/0x2f8 [ 1003.778504][T10739] should_fail+0x555/0x770 [ 1003.782896][T10739] __should_failslab+0x11a/0x160 [ 1003.787804][T10739] should_failslab+0x9/0x20 [ 1003.792273][T10739] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1003.797520][T10739] ? __list_lru_init+0x3e3/0x900 [ 1003.802425][T10739] __list_lru_init+0x3e3/0x900 [ 1003.807157][T10739] alloc_super+0x635/0x740 [ 1003.811537][T10739] ? test_single_super+0x10/0x10 [ 1003.816436][T10739] sget_fc+0x1ea/0x640 [ 1003.820467][T10739] ? kill_litter_super+0xa0/0xa0 [ 1003.825371][T10739] ? proc_reconfigure+0x2d0/0x2d0 [ 1003.830361][T10739] vfs_get_super+0x6b/0x1b0 [ 1003.834831][T10739] proc_get_tree+0x89/0x90 [ 1003.839213][T10739] vfs_get_tree+0x8f/0x380 [ 1003.843595][T10739] ? __kasan_check_write+0x14/0x20 [ 1003.848673][T10739] fc_mount+0x1b/0xa0 [ 1003.852622][T10739] pid_ns_prepare_proc+0x208/0x280 [ 1003.857697][T10739] alloc_pid+0x714/0x880 [ 1003.861907][T10739] copy_process+0x29f5/0x5ac0 [ 1003.866551][T10739] ? __kasan_check_write+0x14/0x20 [ 1003.871628][T10739] ? refcount_sub_and_test_checked+0x179/0x230 [ 1003.877751][T10739] _do_fork+0x13f/0x5b0 [ 1003.881873][T10739] ? debug_smp_processor_id+0x1c/0x20 [ 1003.887209][T10739] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1003.893252][T10739] __x64_sys_clone+0x1ec/0x230 [ 1003.897985][T10739] do_syscall_64+0xfe/0x140 [ 1003.902457][T10739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.908314][T10739] RIP: 0033:0x459829 [ 1003.912175][T10739] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) [ 1003.931745][T10739] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1003.940122][T10739] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1003.948057][T10739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1003.956083][T10739] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.964027][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1003.971966][T10739] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:46:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5760) 03:46:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9e030000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:07 executing program 5 (fault-call:7 fault-nth:71): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:07 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) [ 1004.151918][T10768] FAULT_INJECTION: forcing a failure. [ 1004.151918][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.165574][T10768] CPU: 1 PID: 10768 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1004.173544][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.183571][T10768] Call Trace: [ 1004.186833][T10768] dump_stack+0x1d8/0x2f8 [ 1004.191133][T10768] should_fail+0x555/0x770 [ 1004.195520][T10768] __should_failslab+0x11a/0x160 [ 1004.200425][T10768] should_failslab+0x9/0x20 [ 1004.204902][T10768] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1004.210153][T10768] ? __list_lru_init+0x3e3/0x900 [ 1004.215054][T10768] __list_lru_init+0x3e3/0x900 [ 1004.219784][T10768] alloc_super+0x635/0x740 [ 1004.224176][T10768] ? test_single_super+0x10/0x10 [ 1004.229079][T10768] sget_fc+0x1ea/0x640 [ 1004.233112][T10768] ? kill_litter_super+0xa0/0xa0 [ 1004.238015][T10768] ? proc_reconfigure+0x2d0/0x2d0 [ 1004.243006][T10768] vfs_get_super+0x6b/0x1b0 [ 1004.247478][T10768] proc_get_tree+0x89/0x90 [ 1004.251863][T10768] vfs_get_tree+0x8f/0x380 [ 1004.256250][T10768] ? __kasan_check_write+0x14/0x20 [ 1004.261335][T10768] fc_mount+0x1b/0xa0 [ 1004.265286][T10768] pid_ns_prepare_proc+0x208/0x280 [ 1004.270364][T10768] alloc_pid+0x714/0x880 [ 1004.274587][T10768] copy_process+0x29f5/0x5ac0 [ 1004.279236][T10768] ? __kasan_check_write+0x14/0x20 [ 1004.284312][T10768] ? refcount_sub_and_test_checked+0x179/0x230 [ 1004.290436][T10768] _do_fork+0x13f/0x5b0 [ 1004.294560][T10768] ? debug_smp_processor_id+0x1c/0x20 [ 1004.299906][T10768] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1004.305950][T10768] __x64_sys_clone+0x1ec/0x230 [ 1004.310692][T10768] do_syscall_64+0xfe/0x140 [ 1004.315175][T10768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.321040][T10768] RIP: 0033:0x459829 [ 1004.324900][T10768] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1004.344787][T10768] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1004.353160][T10768] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1004.361096][T10768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1004.369032][T10768] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.376968][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1004.384918][T10768] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 5 (fault-call:7 fault-nth:72): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5778) 03:46:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1004.535353][T10794] FAULT_INJECTION: forcing a failure. [ 1004.535353][T10794] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.598670][T10794] CPU: 0 PID: 10794 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1004.606759][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.616784][T10794] Call Trace: [ 1004.620059][T10794] dump_stack+0x1d8/0x2f8 [ 1004.624357][T10794] should_fail+0x555/0x770 [ 1004.628750][T10794] __should_failslab+0x11a/0x160 [ 1004.633654][T10794] should_failslab+0x9/0x20 [ 1004.638121][T10794] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1004.643370][T10794] ? __list_lru_init+0x3e3/0x900 [ 1004.648274][T10794] __list_lru_init+0x3e3/0x900 [ 1004.653005][T10794] alloc_super+0x635/0x740 [ 1004.657399][T10794] ? test_single_super+0x10/0x10 [ 1004.662324][T10794] sget_fc+0x1ea/0x640 [ 1004.666359][T10794] ? kill_litter_super+0xa0/0xa0 [ 1004.671265][T10794] ? proc_reconfigure+0x2d0/0x2d0 [ 1004.676252][T10794] vfs_get_super+0x6b/0x1b0 [ 1004.680817][T10794] proc_get_tree+0x89/0x90 [ 1004.685207][T10794] vfs_get_tree+0x8f/0x380 [ 1004.689588][T10794] ? __kasan_check_write+0x14/0x20 [ 1004.694668][T10794] fc_mount+0x1b/0xa0 [ 1004.698619][T10794] pid_ns_prepare_proc+0x208/0x280 [ 1004.703700][T10794] alloc_pid+0x714/0x880 [ 1004.707935][T10794] copy_process+0x29f5/0x5ac0 [ 1004.712576][T10794] ? __kasan_check_write+0x14/0x20 [ 1004.717653][T10794] ? refcount_sub_and_test_checked+0x179/0x230 [ 1004.723779][T10794] _do_fork+0x13f/0x5b0 [ 1004.727917][T10794] ? debug_smp_processor_id+0x1c/0x20 [ 1004.733254][T10794] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1004.739377][T10794] __x64_sys_clone+0x1ec/0x230 [ 1004.744110][T10794] do_syscall_64+0xfe/0x140 [ 1004.748583][T10794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.754441][T10794] RIP: 0033:0x459829 [ 1004.758301][T10794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.777958][T10794] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1004.786332][T10794] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1004.794272][T10794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1004.802309][T10794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.810258][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1004.818210][T10794] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 03:46:08 executing program 5 (fault-call:7 fault-nth:73): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xac010000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5790) 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1005.031067][T10832] FAULT_INJECTION: forcing a failure. [ 1005.031067][T10832] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.044797][T10832] CPU: 0 PID: 10832 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1005.052774][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.062821][T10832] Call Trace: [ 1005.066118][T10832] dump_stack+0x1d8/0x2f8 [ 1005.070436][T10832] should_fail+0x555/0x770 [ 1005.074833][T10832] __should_failslab+0x11a/0x160 [ 1005.074845][T10832] should_failslab+0x9/0x20 [ 1005.074859][T10832] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 1005.084381][T10832] ? __kmalloc_node+0x3c/0x60 [ 1005.084392][T10832] __kmalloc_node+0x3c/0x60 [ 1005.084403][T10832] kvmalloc_node+0xcc/0x130 [ 1005.084412][T10832] __list_lru_init+0x35b/0x900 [ 1005.084424][T10832] alloc_super+0x635/0x740 [ 1005.084433][T10832] ? test_single_super+0x10/0x10 [ 1005.084440][T10832] sget_fc+0x1ea/0x640 [ 1005.084446][T10832] ? kill_litter_super+0xa0/0xa0 [ 1005.084460][T10832] ? proc_reconfigure+0x2d0/0x2d0 03:46:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1005.131826][T10832] vfs_get_super+0x6b/0x1b0 [ 1005.136343][T10832] proc_get_tree+0x89/0x90 [ 1005.140759][T10832] vfs_get_tree+0x8f/0x380 [ 1005.145171][T10832] ? __kasan_check_write+0x14/0x20 [ 1005.150269][T10832] fc_mount+0x1b/0xa0 [ 1005.150282][T10832] pid_ns_prepare_proc+0x208/0x280 [ 1005.150293][T10832] alloc_pid+0x714/0x880 [ 1005.150305][T10832] copy_process+0x29f5/0x5ac0 [ 1005.159334][T10832] ? __kasan_check_write+0x14/0x20 [ 1005.159344][T10832] ? refcount_sub_and_test_checked+0x179/0x230 [ 1005.159362][T10832] _do_fork+0x13f/0x5b0 [ 1005.159373][T10832] ? debug_smp_processor_id+0x1c/0x20 [ 1005.179451][T10832] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1005.179463][T10832] __x64_sys_clone+0x1ec/0x230 [ 1005.179482][T10832] do_syscall_64+0xfe/0x140 [ 1005.195008][T10832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.195016][T10832] RIP: 0033:0x459829 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 1005.195025][T10832] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.195029][T10832] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1005.195037][T10832] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1005.195043][T10832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1005.195048][T10832] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.195053][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1005.195057][T10832] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:46:08 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:08 executing program 5 (fault-call:7 fault-nth:74): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc7030000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) 03:46:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x57a8) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1005.476832][T10878] FAULT_INJECTION: forcing a failure. [ 1005.476832][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.501175][T10878] CPU: 0 PID: 10878 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1005.509150][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.519189][T10878] Call Trace: [ 1005.522466][T10878] dump_stack+0x1d8/0x2f8 [ 1005.526794][T10878] should_fail+0x555/0x770 [ 1005.531201][T10878] __should_failslab+0x11a/0x160 [ 1005.536129][T10878] should_failslab+0x9/0x20 [ 1005.540611][T10878] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1005.545873][T10878] ? __list_lru_init+0x3e3/0x900 [ 1005.550802][T10878] __list_lru_init+0x3e3/0x900 [ 1005.555551][T10878] alloc_super+0x635/0x740 [ 1005.559953][T10878] ? test_single_super+0x10/0x10 [ 1005.564873][T10878] sget_fc+0x1ea/0x640 [ 1005.568920][T10878] ? kill_litter_super+0xa0/0xa0 [ 1005.573871][T10878] ? proc_reconfigure+0x2d0/0x2d0 [ 1005.578878][T10878] vfs_get_super+0x6b/0x1b0 [ 1005.583365][T10878] proc_get_tree+0x89/0x90 [ 1005.587769][T10878] vfs_get_tree+0x8f/0x380 [ 1005.592177][T10878] ? __kasan_check_write+0x14/0x20 [ 1005.597275][T10878] fc_mount+0x1b/0xa0 [ 1005.601238][T10878] pid_ns_prepare_proc+0x208/0x280 [ 1005.606324][T10878] alloc_pid+0x714/0x880 [ 1005.610541][T10878] copy_process+0x29f5/0x5ac0 [ 1005.615216][T10878] ? refcount_sub_and_test_checked+0x179/0x230 [ 1005.621362][T10878] _do_fork+0x13f/0x5b0 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1005.625499][T10878] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1005.630938][T10878] ? check_preemption_disabled+0xa9/0x2a0 [ 1005.636636][T10878] __x64_sys_clone+0x1ec/0x230 [ 1005.641377][T10878] do_syscall_64+0xfe/0x140 [ 1005.645938][T10878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.645944][T10878] RIP: 0033:0x459829 [ 1005.645951][T10878] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:09 executing program 5 (fault-call:7 fault-nth:75): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1005.645958][T10878] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1005.675256][T10878] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1005.675261][T10878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1005.675266][T10878] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.675270][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1005.675274][T10878] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x57c0) 03:46:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xda030000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 1005.862721][T10930] FAULT_INJECTION: forcing a failure. [ 1005.862721][T10930] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.891042][T10930] CPU: 0 PID: 10930 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1005.899052][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.909190][T10930] Call Trace: [ 1005.909206][T10930] dump_stack+0x1d8/0x2f8 [ 1005.909220][T10930] should_fail+0x555/0x770 [ 1005.909235][T10930] __should_failslab+0x11a/0x160 [ 1005.909249][T10930] should_failslab+0x9/0x20 [ 1005.926118][T10930] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1005.926126][T10930] ? __list_lru_init+0x3e3/0x900 [ 1005.926135][T10930] __list_lru_init+0x3e3/0x900 [ 1005.926147][T10930] alloc_super+0x635/0x740 [ 1005.940792][T10930] ? test_single_super+0x10/0x10 [ 1005.940799][T10930] sget_fc+0x1ea/0x640 [ 1005.940806][T10930] ? kill_litter_super+0xa0/0xa0 [ 1005.940816][T10930] ? proc_reconfigure+0x2d0/0x2d0 [ 1005.940823][T10930] vfs_get_super+0x6b/0x1b0 [ 1005.940831][T10930] proc_get_tree+0x89/0x90 [ 1005.940837][T10930] vfs_get_tree+0x8f/0x380 [ 1005.940848][T10930] ? __kasan_check_write+0x14/0x20 [ 1005.958932][T10930] fc_mount+0x1b/0xa0 [ 1005.958942][T10930] pid_ns_prepare_proc+0x208/0x280 [ 1005.958953][T10930] alloc_pid+0x714/0x880 [ 1005.968859][T10930] copy_process+0x29f5/0x5ac0 [ 1005.968874][T10930] ? __kasan_check_write+0x14/0x20 [ 1005.996243][T10930] ? refcount_sub_and_test_checked+0x179/0x230 [ 1005.996262][T10930] _do_fork+0x13f/0x5b0 [ 1005.996275][T10930] ? do_syscall_64+0xc0/0x140 [ 1006.005122][T10930] __x64_sys_clone+0x1ec/0x230 [ 1006.029837][T10930] do_syscall_64+0xfe/0x140 [ 1006.034325][T10930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.040207][T10930] RIP: 0033:0x459829 [ 1006.044085][T10930] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xefffffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1006.063669][T10930] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.072066][T10930] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1006.080028][T10930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1006.080034][T10930] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.080039][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1006.080043][T10930] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:09 executing program 5 (fault-call:7 fault-nth:76): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x57d8) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 03:46:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:09 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1006.298244][T11104] FAULT_INJECTION: forcing a failure. [ 1006.298244][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.346507][T11104] CPU: 0 PID: 11104 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1006.354483][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.354487][T11104] Call Trace: [ 1006.354502][T11104] dump_stack+0x1d8/0x2f8 [ 1006.354516][T11104] should_fail+0x555/0x770 [ 1006.354529][T11104] __should_failslab+0x11a/0x160 [ 1006.354541][T11104] should_failslab+0x9/0x20 [ 1006.354554][T11104] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1006.372142][T11104] ? __list_lru_init+0x3e3/0x900 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 1006.372153][T11104] __list_lru_init+0x3e3/0x900 [ 1006.372164][T11104] alloc_super+0x635/0x740 [ 1006.372174][T11104] ? test_single_super+0x10/0x10 [ 1006.372180][T11104] sget_fc+0x1ea/0x640 [ 1006.372186][T11104] ? kill_litter_super+0xa0/0xa0 [ 1006.372197][T11104] ? proc_reconfigure+0x2d0/0x2d0 [ 1006.372204][T11104] vfs_get_super+0x6b/0x1b0 [ 1006.372214][T11104] proc_get_tree+0x89/0x90 [ 1006.381511][T11104] vfs_get_tree+0x8f/0x380 [ 1006.381521][T11104] ? __kasan_check_write+0x14/0x20 [ 1006.381532][T11104] fc_mount+0x1b/0xa0 [ 1006.381543][T11104] pid_ns_prepare_proc+0x208/0x280 [ 1006.381554][T11104] alloc_pid+0x714/0x880 [ 1006.381567][T11104] copy_process+0x29f5/0x5ac0 [ 1006.381577][T11104] ? __kasan_check_write+0x14/0x20 [ 1006.381585][T11104] ? refcount_sub_and_test_checked+0x179/0x230 [ 1006.381602][T11104] _do_fork+0x13f/0x5b0 [ 1006.391329][T11104] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1006.391338][T11104] ? check_preemption_disabled+0xa9/0x2a0 [ 1006.391347][T11104] __x64_sys_clone+0x1ec/0x230 [ 1006.391359][T11104] do_syscall_64+0xfe/0x140 [ 1006.391370][T11104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.391376][T11104] RIP: 0033:0x459829 [ 1006.391384][T11104] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.391389][T11104] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.405431][T11104] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 03:46:10 executing program 5 (fault-call:7 fault-nth:77): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1006.405436][T11104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1006.405441][T11104] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.405446][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1006.405450][T11104] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfeff0000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x57f0) 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000760c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfeffffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) [ 1006.829878][T11160] FAULT_INJECTION: forcing a failure. [ 1006.829878][T11160] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.849824][T11160] CPU: 0 PID: 11160 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1006.857817][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.857821][T11160] Call Trace: [ 1006.857836][T11160] dump_stack+0x1d8/0x2f8 [ 1006.857851][T11160] should_fail+0x555/0x770 [ 1006.857866][T11160] __should_failslab+0x11a/0x160 [ 1006.857875][T11160] should_failslab+0x9/0x20 [ 1006.857887][T11160] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1006.889249][T11160] ? __list_lru_init+0x3e3/0x900 [ 1006.889260][T11160] __list_lru_init+0x3e3/0x900 [ 1006.889272][T11160] alloc_super+0x635/0x740 [ 1006.889291][T11160] ? test_single_super+0x10/0x10 [ 1006.889300][T11160] sget_fc+0x1ea/0x640 [ 1006.899459][T11160] ? kill_litter_super+0xa0/0xa0 [ 1006.899471][T11160] ? proc_reconfigure+0x2d0/0x2d0 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) [ 1006.899479][T11160] vfs_get_super+0x6b/0x1b0 [ 1006.899490][T11160] proc_get_tree+0x89/0x90 [ 1006.936350][T11160] vfs_get_tree+0x8f/0x380 [ 1006.940755][T11160] fc_mount+0x1b/0xa0 [ 1006.944718][T11160] pid_ns_prepare_proc+0x208/0x280 [ 1006.949819][T11160] alloc_pid+0x714/0x880 [ 1006.954044][T11160] copy_process+0x29f5/0x5ac0 [ 1006.958696][T11160] ? __kasan_check_write+0x14/0x20 [ 1006.958705][T11160] ? refcount_sub_and_test_checked+0x179/0x230 [ 1006.958725][T11160] _do_fork+0x13f/0x5b0 [ 1006.969931][T11160] ? debug_smp_processor_id+0x1c/0x20 [ 1006.969941][T11160] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1006.969951][T11160] __x64_sys_clone+0x1ec/0x230 [ 1006.969964][T11160] do_syscall_64+0xfe/0x140 [ 1006.969976][T11160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.969983][T11160] RIP: 0033:0x459829 [ 1006.969994][T11160] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:10 executing program 5 (fault-call:7 fault-nth:78): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1006.985502][T11160] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.985510][T11160] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1006.985515][T11160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1006.985519][T11160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.985524][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1006.985528][T11160] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5808) 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1007.168357][T11209] FAULT_INJECTION: forcing a failure. [ 1007.168357][T11209] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.181386][T11209] CPU: 1 PID: 11209 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1007.189344][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.189347][T11209] Call Trace: [ 1007.189361][T11209] dump_stack+0x1d8/0x2f8 [ 1007.189373][T11209] should_fail+0x555/0x770 [ 1007.189386][T11209] __should_failslab+0x11a/0x160 [ 1007.216259][T11209] should_failslab+0x9/0x20 [ 1007.216268][T11209] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1007.216276][T11209] ? __list_lru_init+0x3e3/0x900 [ 1007.216284][T11209] __list_lru_init+0x3e3/0x900 [ 1007.216294][T11209] alloc_super+0x635/0x740 [ 1007.216302][T11209] ? test_single_super+0x10/0x10 [ 1007.216309][T11209] sget_fc+0x1ea/0x640 [ 1007.216314][T11209] ? kill_litter_super+0xa0/0xa0 [ 1007.216324][T11209] ? proc_reconfigure+0x2d0/0x2d0 [ 1007.216331][T11209] vfs_get_super+0x6b/0x1b0 03:46:10 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) [ 1007.216339][T11209] proc_get_tree+0x89/0x90 [ 1007.216346][T11209] vfs_get_tree+0x8f/0x380 [ 1007.216353][T11209] ? __kasan_check_write+0x14/0x20 [ 1007.216364][T11209] fc_mount+0x1b/0xa0 [ 1007.216373][T11209] pid_ns_prepare_proc+0x208/0x280 [ 1007.216383][T11209] alloc_pid+0x714/0x880 [ 1007.216394][T11209] copy_process+0x29f5/0x5ac0 [ 1007.216403][T11209] ? __kasan_check_write+0x14/0x20 [ 1007.216412][T11209] ? refcount_sub_and_test_checked+0x179/0x230 [ 1007.216430][T11209] _do_fork+0x13f/0x5b0 03:46:10 executing program 5 (fault-call:7 fault-nth:79): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 1007.216441][T11209] ? debug_smp_processor_id+0x1c/0x20 [ 1007.226174][T11209] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1007.226185][T11209] __x64_sys_clone+0x1ec/0x230 [ 1007.226199][T11209] do_syscall_64+0xfe/0x140 [ 1007.226211][T11209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.237484][T11209] RIP: 0033:0x459829 [ 1007.237492][T11209] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1007.237496][T11209] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1007.237503][T11209] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1007.237508][T11209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1007.237512][T11209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.237516][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1007.237521][T11209] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff0f0000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:46:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1007.487876][T11233] FAULT_INJECTION: forcing a failure. [ 1007.487876][T11233] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.501407][T11233] CPU: 1 PID: 11233 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1007.509363][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.519385][T11233] Call Trace: [ 1007.522643][T11233] dump_stack+0x1d8/0x2f8 [ 1007.526941][T11233] should_fail+0x555/0x770 [ 1007.531328][T11233] __should_failslab+0x11a/0x160 [ 1007.536232][T11233] should_failslab+0x9/0x20 [ 1007.540701][T11233] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1007.545954][T11233] ? __list_lru_init+0x3e3/0x900 [ 1007.550853][T11233] __list_lru_init+0x3e3/0x900 [ 1007.555582][T11233] alloc_super+0x635/0x740 [ 1007.559965][T11233] ? test_single_super+0x10/0x10 [ 1007.564882][T11233] sget_fc+0x1ea/0x640 [ 1007.568915][T11233] ? kill_litter_super+0xa0/0xa0 [ 1007.573819][T11233] ? proc_reconfigure+0x2d0/0x2d0 [ 1007.578805][T11233] vfs_get_super+0x6b/0x1b0 [ 1007.583271][T11233] proc_get_tree+0x89/0x90 [ 1007.587650][T11233] vfs_get_tree+0x8f/0x380 [ 1007.592030][T11233] ? __kasan_check_write+0x14/0x20 [ 1007.597106][T11233] fc_mount+0x1b/0xa0 [ 1007.601054][T11233] pid_ns_prepare_proc+0x208/0x280 [ 1007.606133][T11233] alloc_pid+0x714/0x880 [ 1007.610344][T11233] copy_process+0x29f5/0x5ac0 [ 1007.614985][T11233] ? __kasan_check_write+0x14/0x20 [ 1007.620059][T11233] ? refcount_sub_and_test_checked+0x179/0x230 [ 1007.626188][T11233] _do_fork+0x13f/0x5b0 [ 1007.630307][T11233] ? debug_smp_processor_id+0x1c/0x20 [ 1007.635646][T11233] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1007.641676][T11233] __x64_sys_clone+0x1ec/0x230 [ 1007.646408][T11233] do_syscall_64+0xfe/0x140 [ 1007.650876][T11233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.656731][T11233] RIP: 0033:0x459829 [ 1007.660591][T11233] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1007.680157][T11233] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) [ 1007.688529][T11233] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1007.696465][T11233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1007.704399][T11233] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.712336][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1007.720270][T11233] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5820) 03:46:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 03:46:11 executing program 5 (fault-call:7 fault-nth:80): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 03:46:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff7f0000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) [ 1007.913354][T11275] FAULT_INJECTION: forcing a failure. [ 1007.913354][T11275] name failslab, interval 1, probability 0, space 0, times 0 03:46:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5838) 03:46:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1008.009220][T11275] CPU: 1 PID: 11275 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1008.017212][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.027240][T11275] Call Trace: [ 1008.030515][T11275] dump_stack+0x1d8/0x2f8 [ 1008.034836][T11275] should_fail+0x555/0x770 [ 1008.039238][T11275] __should_failslab+0x11a/0x160 [ 1008.044145][T11275] should_failslab+0x9/0x20 [ 1008.048627][T11275] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1008.053900][T11275] ? __list_lru_init+0x3e3/0x900 [ 1008.058798][T11275] __list_lru_init+0x3e3/0x900 [ 1008.063530][T11275] alloc_super+0x635/0x740 [ 1008.067914][T11275] ? test_single_super+0x10/0x10 [ 1008.072816][T11275] sget_fc+0x1ea/0x640 [ 1008.076850][T11275] ? kill_litter_super+0xa0/0xa0 [ 1008.081757][T11275] ? proc_reconfigure+0x2d0/0x2d0 [ 1008.086755][T11275] vfs_get_super+0x6b/0x1b0 [ 1008.091235][T11275] proc_get_tree+0x89/0x90 [ 1008.095620][T11275] vfs_get_tree+0x8f/0x380 [ 1008.100005][T11275] ? __kasan_check_write+0x14/0x20 [ 1008.105088][T11275] fc_mount+0x1b/0xa0 [ 1008.109043][T11275] pid_ns_prepare_proc+0x208/0x280 [ 1008.114122][T11275] alloc_pid+0x714/0x880 [ 1008.118338][T11275] copy_process+0x29f5/0x5ac0 [ 1008.122982][T11275] ? __kasan_check_write+0x14/0x20 [ 1008.128072][T11275] ? refcount_sub_and_test_checked+0x179/0x230 [ 1008.134206][T11275] _do_fork+0x13f/0x5b0 [ 1008.138333][T11275] ? debug_smp_processor_id+0x1c/0x20 [ 1008.143676][T11275] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1008.149711][T11275] __x64_sys_clone+0x1ec/0x230 [ 1008.154447][T11275] do_syscall_64+0xfe/0x140 [ 1008.158920][T11275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.164782][T11275] RIP: 0033:0x459829 [ 1008.168651][T11275] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.188223][T11275] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1008.196610][T11275] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) [ 1008.204552][T11275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1008.212491][T11275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.220430][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1008.228373][T11275] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:11 executing program 5 (fault-call:7 fault-nth:81): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:11 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) [ 1008.353399][T11320] FAULT_INJECTION: forcing a failure. [ 1008.353399][T11320] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.366626][T11320] CPU: 1 PID: 11320 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1008.374597][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.384631][T11320] Call Trace: [ 1008.387889][T11320] dump_stack+0x1d8/0x2f8 [ 1008.392185][T11320] should_fail+0x555/0x770 [ 1008.396591][T11320] __should_failslab+0x11a/0x160 [ 1008.401518][T11320] should_failslab+0x9/0x20 [ 1008.405998][T11320] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1008.411251][T11320] ? __list_lru_init+0x3e3/0x900 [ 1008.416158][T11320] __list_lru_init+0x3e3/0x900 [ 1008.420895][T11320] alloc_super+0x635/0x740 [ 1008.425274][T11320] ? test_single_super+0x10/0x10 [ 1008.430173][T11320] sget_fc+0x1ea/0x640 [ 1008.434204][T11320] ? kill_litter_super+0xa0/0xa0 [ 1008.439107][T11320] ? proc_reconfigure+0x2d0/0x2d0 [ 1008.444092][T11320] vfs_get_super+0x6b/0x1b0 [ 1008.448562][T11320] proc_get_tree+0x89/0x90 [ 1008.452945][T11320] vfs_get_tree+0x8f/0x380 [ 1008.457329][T11320] ? __kasan_check_write+0x14/0x20 [ 1008.462409][T11320] fc_mount+0x1b/0xa0 [ 1008.466363][T11320] pid_ns_prepare_proc+0x208/0x280 [ 1008.471443][T11320] alloc_pid+0x714/0x880 [ 1008.475650][T11320] copy_process+0x29f5/0x5ac0 [ 1008.480293][T11320] ? __kasan_check_write+0x14/0x20 [ 1008.485367][T11320] ? refcount_sub_and_test_checked+0x179/0x230 [ 1008.491490][T11320] _do_fork+0x13f/0x5b0 [ 1008.495607][T11320] ? debug_smp_processor_id+0x1c/0x20 [ 1008.500941][T11320] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1008.506971][T11320] __x64_sys_clone+0x1ec/0x230 [ 1008.511709][T11320] do_syscall_64+0xfe/0x140 [ 1008.516183][T11320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.522068][T11320] RIP: 0033:0x459829 [ 1008.525948][T11320] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.545520][T11320] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffff0300, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:12 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1008.553891][T11320] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1008.561826][T11320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1008.569760][T11320] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.577694][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1008.585627][T11320] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5850) 03:46:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:12 executing program 5 (fault-call:7 fault-nth:82): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:12 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1008.733238][T11349] FAULT_INJECTION: forcing a failure. [ 1008.733238][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.765330][T11349] CPU: 1 PID: 11349 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1008.773312][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.783337][T11349] Call Trace: [ 1008.786601][T11349] dump_stack+0x1d8/0x2f8 [ 1008.790908][T11349] should_fail+0x555/0x770 [ 1008.795290][T11349] __should_failslab+0x11a/0x160 [ 1008.800195][T11349] should_failslab+0x9/0x20 [ 1008.804661][T11349] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1008.809926][T11349] ? __list_lru_init+0x3e3/0x900 [ 1008.814825][T11349] __list_lru_init+0x3e3/0x900 [ 1008.819554][T11349] alloc_super+0x635/0x740 [ 1008.823932][T11349] ? test_single_super+0x10/0x10 [ 1008.828840][T11349] sget_fc+0x1ea/0x640 [ 1008.832881][T11349] ? kill_litter_super+0xa0/0xa0 [ 1008.837784][T11349] ? proc_reconfigure+0x2d0/0x2d0 [ 1008.842771][T11349] vfs_get_super+0x6b/0x1b0 [ 1008.847246][T11349] proc_get_tree+0x89/0x90 [ 1008.851649][T11349] vfs_get_tree+0x8f/0x380 [ 1008.856029][T11349] ? __kasan_check_write+0x14/0x20 [ 1008.861104][T11349] fc_mount+0x1b/0xa0 [ 1008.865051][T11349] pid_ns_prepare_proc+0x208/0x280 [ 1008.870130][T11349] alloc_pid+0x714/0x880 [ 1008.874338][T11349] copy_process+0x29f5/0x5ac0 [ 1008.878977][T11349] ? __kasan_check_write+0x14/0x20 [ 1008.884050][T11349] ? refcount_sub_and_test_checked+0x179/0x230 [ 1008.890173][T11349] _do_fork+0x13f/0x5b0 [ 1008.894294][T11349] ? debug_smp_processor_id+0x1c/0x20 [ 1008.899627][T11349] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1008.905656][T11349] __x64_sys_clone+0x1ec/0x230 [ 1008.910388][T11349] do_syscall_64+0xfe/0x140 [ 1008.914879][T11349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.920733][T11349] RIP: 0033:0x459829 [ 1008.924590][T11349] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.944162][T11349] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1008.952550][T11349] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1008.960488][T11349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1008.968429][T11349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.976369][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:46:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 1008.984311][T11349] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:12 executing program 5 (fault-call:7 fault-nth:83): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:12 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 03:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffff0f00, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5868) 03:46:12 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1009.173784][T11375] FAULT_INJECTION: forcing a failure. [ 1009.173784][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.209014][T11375] CPU: 0 PID: 11375 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1009.216992][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.216997][T11375] Call Trace: [ 1009.217015][T11375] dump_stack+0x1d8/0x2f8 [ 1009.217030][T11375] should_fail+0x555/0x770 [ 1009.217045][T11375] __should_failslab+0x11a/0x160 [ 1009.217057][T11375] should_failslab+0x9/0x20 [ 1009.217068][T11375] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 1009.217076][T11375] ? __kmalloc_node+0x3c/0x60 [ 1009.217085][T11375] ? memset+0x31/0x40 [ 1009.217096][T11375] __kmalloc_node+0x3c/0x60 [ 1009.217106][T11375] kvmalloc_node+0xcc/0x130 [ 1009.217118][T11375] __list_lru_init+0x35b/0x900 [ 1009.230426][T11375] alloc_super+0x664/0x740 [ 1009.230438][T11375] ? test_single_super+0x10/0x10 [ 1009.244035][T11375] sget_fc+0x1ea/0x640 [ 1009.244043][T11375] ? kill_litter_super+0xa0/0xa0 [ 1009.244057][T11375] ? proc_reconfigure+0x2d0/0x2d0 [ 1009.254218][T11375] vfs_get_super+0x6b/0x1b0 [ 1009.254230][T11375] proc_get_tree+0x89/0x90 [ 1009.254238][T11375] vfs_get_tree+0x8f/0x380 [ 1009.254251][T11375] ? __kasan_check_write+0x14/0x20 [ 1009.262854][T11375] fc_mount+0x1b/0xa0 [ 1009.262865][T11375] pid_ns_prepare_proc+0x208/0x280 [ 1009.262877][T11375] alloc_pid+0x714/0x880 [ 1009.262892][T11375] copy_process+0x29f5/0x5ac0 [ 1009.271839][T11375] ? __kasan_check_write+0x14/0x20 [ 1009.271850][T11375] ? refcount_sub_and_test_checked+0x179/0x230 [ 1009.271869][T11375] _do_fork+0x13f/0x5b0 [ 1009.280978][T11375] ? debug_smp_processor_id+0x1c/0x20 [ 1009.280987][T11375] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1009.280999][T11375] __x64_sys_clone+0x1ec/0x230 [ 1009.281016][T11375] do_syscall_64+0xfe/0x140 [ 1009.299867][T11375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.299875][T11375] RIP: 0033:0x459829 [ 1009.299884][T11375] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.299893][T11375] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1009.308755][T11375] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1009.308772][T11375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1009.308777][T11375] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.308783][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1009.308788][T11375] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:13 executing program 5 (fault-call:7 fault-nth:84): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:46:13 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5880) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 1009.562730][T11412] FAULT_INJECTION: forcing a failure. [ 1009.562730][T11412] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.592965][T11412] CPU: 1 PID: 11412 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1009.600944][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:46:13 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1009.610982][T11412] Call Trace: [ 1009.614252][T11412] dump_stack+0x1d8/0x2f8 [ 1009.618556][T11412] should_fail+0x555/0x770 [ 1009.622935][T11412] __should_failslab+0x11a/0x160 [ 1009.627839][T11412] should_failslab+0x9/0x20 [ 1009.632305][T11412] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1009.637551][T11412] ? __list_lru_init+0x3e3/0x900 [ 1009.642448][T11412] __list_lru_init+0x3e3/0x900 [ 1009.647183][T11412] alloc_super+0x664/0x740 [ 1009.651569][T11412] ? test_single_super+0x10/0x10 [ 1009.656473][T11412] sget_fc+0x1ea/0x640 [ 1009.660509][T11412] ? kill_litter_super+0xa0/0xa0 [ 1009.665410][T11412] ? proc_reconfigure+0x2d0/0x2d0 [ 1009.670399][T11412] vfs_get_super+0x6b/0x1b0 [ 1009.674866][T11412] proc_get_tree+0x89/0x90 [ 1009.679245][T11412] vfs_get_tree+0x8f/0x380 [ 1009.683620][T11412] ? __kasan_check_write+0x14/0x20 [ 1009.688692][T11412] fc_mount+0x1b/0xa0 [ 1009.692636][T11412] pid_ns_prepare_proc+0x208/0x280 [ 1009.697712][T11412] alloc_pid+0x714/0x880 [ 1009.701917][T11412] copy_process+0x29f5/0x5ac0 [ 1009.706561][T11412] ? __kasan_check_write+0x14/0x20 [ 1009.711642][T11412] ? refcount_sub_and_test_checked+0x179/0x230 [ 1009.717780][T11412] _do_fork+0x13f/0x5b0 [ 1009.721904][T11412] ? debug_smp_processor_id+0x1c/0x20 [ 1009.727242][T11412] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1009.733276][T11412] __x64_sys_clone+0x1ec/0x230 [ 1009.738003][T11412] do_syscall_64+0xfe/0x140 [ 1009.742468][T11412] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.748320][T11412] RIP: 0033:0x459829 [ 1009.752179][T11412] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.771833][T11412] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1009.780204][T11412] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1009.788140][T11412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1009.796075][T11412] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.804012][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 03:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffa888, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1009.811948][T11412] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:13 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 03:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 5 (fault-call:7 fault-nth:85): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:46:13 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5898) 03:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:13 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 1010.136499][T11450] FAULT_INJECTION: forcing a failure. [ 1010.136499][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.154332][T11450] CPU: 0 PID: 11450 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1010.162293][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.172320][T11450] Call Trace: [ 1010.172340][T11450] dump_stack+0x1d8/0x2f8 [ 1010.172354][T11450] should_fail+0x555/0x770 [ 1010.172368][T11450] __should_failslab+0x11a/0x160 [ 1010.189239][T11450] should_failslab+0x9/0x20 [ 1010.193734][T11450] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1010.198998][T11450] ? __list_lru_init+0x3e3/0x900 [ 1010.203927][T11450] __list_lru_init+0x3e3/0x900 [ 1010.208684][T11450] alloc_super+0x664/0x740 [ 1010.213088][T11450] ? test_single_super+0x10/0x10 [ 1010.218008][T11450] sget_fc+0x1ea/0x640 [ 1010.222064][T11450] ? kill_litter_super+0xa0/0xa0 [ 1010.226977][T11450] ? proc_reconfigure+0x2d0/0x2d0 [ 1010.231975][T11450] vfs_get_super+0x6b/0x1b0 [ 1010.236454][T11450] proc_get_tree+0x89/0x90 [ 1010.240852][T11450] vfs_get_tree+0x8f/0x380 [ 1010.245249][T11450] ? __kasan_check_write+0x14/0x20 [ 1010.250349][T11450] fc_mount+0x1b/0xa0 [ 1010.254312][T11450] pid_ns_prepare_proc+0x208/0x280 [ 1010.259415][T11450] alloc_pid+0x714/0x880 [ 1010.263642][T11450] copy_process+0x29f5/0x5ac0 [ 1010.268313][T11450] ? retint_kernel+0x2b/0x2b [ 1010.272904][T11450] _do_fork+0x13f/0x5b0 [ 1010.277042][T11450] ? debug_smp_processor_id+0x1c/0x20 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:46:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) [ 1010.282388][T11450] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1010.288434][T11450] __x64_sys_clone+0x1ec/0x230 [ 1010.293180][T11450] do_syscall_64+0xfe/0x140 [ 1010.297669][T11450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.303545][T11450] RIP: 0033:0x459829 [ 1010.307423][T11450] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.327000][T11450] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:46:14 executing program 5 (fault-call:7 fault-nth:86): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1010.335372][T11450] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1010.343306][T11450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1010.351252][T11450] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.359200][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1010.367151][T11450] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1010.455478][T11500] FAULT_INJECTION: forcing a failure. [ 1010.455478][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.473727][T11500] CPU: 1 PID: 11500 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1010.481694][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.481698][T11500] Call Trace: [ 1010.481712][T11500] dump_stack+0x1d8/0x2f8 [ 1010.481726][T11500] should_fail+0x555/0x770 [ 1010.481740][T11500] __should_failslab+0x11a/0x160 [ 1010.481753][T11500] should_failslab+0x9/0x20 [ 1010.481763][T11500] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1010.481771][T11500] ? __list_lru_init+0x3e3/0x900 [ 1010.481780][T11500] __list_lru_init+0x3e3/0x900 [ 1010.481791][T11500] alloc_super+0x664/0x740 [ 1010.481806][T11500] ? test_single_super+0x10/0x10 [ 1010.481812][T11500] sget_fc+0x1ea/0x640 [ 1010.481820][T11500] ? kill_litter_super+0xa0/0xa0 [ 1010.481833][T11500] ? proc_reconfigure+0x2d0/0x2d0 [ 1010.551708][T11500] vfs_get_super+0x6b/0x1b0 [ 1010.556179][T11500] proc_get_tree+0x89/0x90 [ 1010.560561][T11500] vfs_get_tree+0x8f/0x380 [ 1010.564940][T11500] ? __kasan_check_write+0x14/0x20 [ 1010.570015][T11500] fc_mount+0x1b/0xa0 [ 1010.573961][T11500] pid_ns_prepare_proc+0x208/0x280 [ 1010.579038][T11500] alloc_pid+0x714/0x880 [ 1010.583256][T11500] copy_process+0x29f5/0x5ac0 [ 1010.587895][T11500] ? __kasan_check_write+0x14/0x20 [ 1010.592972][T11500] ? refcount_sub_and_test_checked+0x179/0x230 [ 1010.599094][T11500] _do_fork+0x13f/0x5b0 [ 1010.603212][T11500] ? debug_smp_processor_id+0x1c/0x20 [ 1010.608547][T11500] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1010.614578][T11500] __x64_sys_clone+0x1ec/0x230 [ 1010.619312][T11500] do_syscall_64+0xfe/0x140 [ 1010.623780][T11500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.629638][T11500] RIP: 0033:0x459829 [ 1010.633498][T11500] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x58b0) 03:46:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) [ 1010.653063][T11500] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1010.661447][T11500] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1010.669389][T11500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1010.677354][T11500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.685293][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1010.693229][T11500] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 03:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 5 (fault-call:7 fault-nth:87): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 03:46:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x58c8) 03:46:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffef, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020054769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1010.983235][T11546] FAULT_INJECTION: forcing a failure. [ 1010.983235][T11546] name failslab, interval 1, probability 0, space 0, times 0 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1011.032028][T11546] CPU: 0 PID: 11546 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1011.040006][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.050054][T11546] Call Trace: [ 1011.050070][T11546] dump_stack+0x1d8/0x2f8 [ 1011.050084][T11546] should_fail+0x555/0x770 [ 1011.050096][T11546] __should_failslab+0x11a/0x160 [ 1011.050108][T11546] should_failslab+0x9/0x20 [ 1011.050118][T11546] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1011.050129][T11546] ? __list_lru_init+0x3e3/0x900 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1011.057685][T11546] __list_lru_init+0x3e3/0x900 [ 1011.057696][T11546] alloc_super+0x664/0x740 [ 1011.057705][T11546] ? test_single_super+0x10/0x10 [ 1011.057711][T11546] sget_fc+0x1ea/0x640 [ 1011.057717][T11546] ? kill_litter_super+0xa0/0xa0 [ 1011.057727][T11546] ? proc_reconfigure+0x2d0/0x2d0 [ 1011.057734][T11546] vfs_get_super+0x6b/0x1b0 [ 1011.057742][T11546] proc_get_tree+0x89/0x90 [ 1011.057749][T11546] vfs_get_tree+0x8f/0x380 [ 1011.057756][T11546] ? __kasan_check_write+0x14/0x20 [ 1011.057766][T11546] fc_mount+0x1b/0xa0 [ 1011.067058][T11546] pid_ns_prepare_proc+0x208/0x280 [ 1011.067069][T11546] alloc_pid+0x714/0x880 [ 1011.067081][T11546] copy_process+0x29f5/0x5ac0 [ 1011.067090][T11546] ? __kasan_check_write+0x14/0x20 [ 1011.067098][T11546] ? refcount_sub_and_test_checked+0x179/0x230 [ 1011.067115][T11546] _do_fork+0x13f/0x5b0 [ 1011.067124][T11546] ? debug_smp_processor_id+0x1c/0x20 [ 1011.067132][T11546] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1011.067142][T11546] __x64_sys_clone+0x1ec/0x230 [ 1011.067155][T11546] do_syscall_64+0xfe/0x140 [ 1011.067164][T11546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.067174][T11546] RIP: 0033:0x459829 [ 1011.076892][T11546] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.076897][T11546] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1011.076905][T11546] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:14 executing program 5 (fault-call:7 fault-nth:88): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) [ 1011.076910][T11546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1011.076915][T11546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1011.076919][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1011.076924][T11546] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 03:46:14 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x58e0) 03:46:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1011.421499][T11605] FAULT_INJECTION: forcing a failure. [ 1011.421499][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.454873][T11605] CPU: 1 PID: 11605 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1011.462851][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.472886][T11605] Call Trace: [ 1011.472903][T11605] dump_stack+0x1d8/0x2f8 [ 1011.472916][T11605] should_fail+0x555/0x770 [ 1011.472926][T11605] __should_failslab+0x11a/0x160 [ 1011.472940][T11605] should_failslab+0x9/0x20 [ 1011.484904][T11605] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1011.484916][T11605] ? __list_lru_init+0x3e3/0x900 [ 1011.494289][T11605] __list_lru_init+0x3e3/0x900 [ 1011.494299][T11605] alloc_super+0x664/0x740 [ 1011.494309][T11605] ? test_single_super+0x10/0x10 03:46:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 03:46:15 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1011.504458][T11605] sget_fc+0x1ea/0x640 [ 1011.504466][T11605] ? kill_litter_super+0xa0/0xa0 [ 1011.504475][T11605] ? proc_reconfigure+0x2d0/0x2d0 [ 1011.504484][T11605] vfs_get_super+0x6b/0x1b0 [ 1011.514028][T11605] proc_get_tree+0x89/0x90 [ 1011.514037][T11605] vfs_get_tree+0x8f/0x380 [ 1011.514044][T11605] ? __kasan_check_write+0x14/0x20 [ 1011.514055][T11605] fc_mount+0x1b/0xa0 [ 1011.522989][T11605] pid_ns_prepare_proc+0x208/0x280 [ 1011.523000][T11605] alloc_pid+0x714/0x880 [ 1011.523013][T11605] copy_process+0x29f5/0x5ac0 [ 1011.532915][T11605] ? __kasan_check_write+0x14/0x20 [ 1011.532924][T11605] ? refcount_sub_and_test_checked+0x179/0x230 [ 1011.532941][T11605] _do_fork+0x13f/0x5b0 [ 1011.584403][T11605] ? debug_smp_processor_id+0x1c/0x20 [ 1011.589768][T11605] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1011.595818][T11605] __x64_sys_clone+0x1ec/0x230 [ 1011.600557][T11605] do_syscall_64+0xfe/0x140 [ 1011.605027][T11605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.610899][T11605] RIP: 0033:0x459829 [ 1011.614760][T11605] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.634330][T11605] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1011.642708][T11605] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1011.650646][T11605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1011.658585][T11605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:46:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 1011.666527][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1011.674466][T11605] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:15 executing program 5 (fault-call:7 fault-nth:89): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:15 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffe, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 03:46:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x58f8) 03:46:15 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1011.829618][T11642] FAULT_INJECTION: forcing a failure. [ 1011.829618][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.906382][T11642] CPU: 0 PID: 11642 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1011.914362][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.914366][T11642] Call Trace: [ 1011.914382][T11642] dump_stack+0x1d8/0x2f8 [ 1011.914397][T11642] should_fail+0x555/0x770 [ 1011.914410][T11642] __should_failslab+0x11a/0x160 [ 1011.914419][T11642] should_failslab+0x9/0x20 [ 1011.914430][T11642] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1011.936416][T11642] ? __list_lru_init+0x3e3/0x900 [ 1011.936428][T11642] __list_lru_init+0x3e3/0x900 [ 1011.936458][T11642] alloc_super+0x664/0x740 [ 1011.936468][T11642] ? test_single_super+0x10/0x10 [ 1011.936474][T11642] sget_fc+0x1ea/0x640 [ 1011.936481][T11642] ? kill_litter_super+0xa0/0xa0 [ 1011.936492][T11642] ? proc_reconfigure+0x2d0/0x2d0 [ 1011.936501][T11642] vfs_get_super+0x6b/0x1b0 [ 1011.936510][T11642] proc_get_tree+0x89/0x90 [ 1011.936529][T11642] vfs_get_tree+0x8f/0x380 [ 1011.936542][T11642] ? __kasan_check_write+0x14/0x20 [ 1011.945925][T11642] fc_mount+0x1b/0xa0 03:46:15 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 1011.945937][T11642] pid_ns_prepare_proc+0x208/0x280 [ 1011.945947][T11642] alloc_pid+0x714/0x880 [ 1011.945959][T11642] copy_process+0x29f5/0x5ac0 [ 1011.945967][T11642] ? __kasan_check_write+0x14/0x20 [ 1011.945977][T11642] ? refcount_sub_and_test_checked+0x179/0x230 [ 1011.945994][T11642] _do_fork+0x13f/0x5b0 [ 1011.956153][T11642] ? debug_smp_processor_id+0x1c/0x20 [ 1011.956167][T11642] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1011.956178][T11642] __x64_sys_clone+0x1ec/0x230 [ 1011.956193][T11642] do_syscall_64+0xfe/0x140 [ 1011.956204][T11642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.956212][T11642] RIP: 0033:0x459829 [ 1011.956220][T11642] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.956227][T11642] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1011.965338][T11642] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:15 executing program 5 (fault-call:7 fault-nth:90): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 1011.965344][T11642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1011.965349][T11642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1011.965354][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1011.965359][T11642] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:15 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) [ 1012.215471][T11675] FAULT_INJECTION: forcing a failure. [ 1012.215471][T11675] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.229790][T11675] CPU: 1 PID: 11675 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1012.237754][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.247793][T11675] Call Trace: [ 1012.247808][T11675] dump_stack+0x1d8/0x2f8 [ 1012.247823][T11675] should_fail+0x555/0x770 [ 1012.247837][T11675] __should_failslab+0x11a/0x160 03:46:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5910) [ 1012.247851][T11675] should_failslab+0x9/0x20 [ 1012.247860][T11675] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1012.247883][T11675] ? __list_lru_init+0x3e3/0x900 [ 1012.255438][T11675] __list_lru_init+0x3e3/0x900 [ 1012.255450][T11675] alloc_super+0x664/0x740 [ 1012.255459][T11675] ? test_single_super+0x10/0x10 [ 1012.255465][T11675] sget_fc+0x1ea/0x640 [ 1012.255475][T11675] ? kill_litter_super+0xa0/0xa0 [ 1012.264760][T11675] ? proc_reconfigure+0x2d0/0x2d0 [ 1012.264770][T11675] vfs_get_super+0x6b/0x1b0 [ 1012.264781][T11675] proc_get_tree+0x89/0x90 [ 1012.264788][T11675] vfs_get_tree+0x8f/0x380 [ 1012.264799][T11675] ? __kasan_check_write+0x14/0x20 [ 1012.277323][T11675] fc_mount+0x1b/0xa0 [ 1012.277334][T11675] pid_ns_prepare_proc+0x208/0x280 [ 1012.277346][T11675] alloc_pid+0x714/0x880 [ 1012.277358][T11675] copy_process+0x29f5/0x5ac0 [ 1012.277367][T11675] ? __kasan_check_write+0x14/0x20 [ 1012.277377][T11675] ? refcount_sub_and_test_checked+0x179/0x230 [ 1012.277396][T11675] _do_fork+0x13f/0x5b0 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1012.287032][T11675] ? debug_smp_processor_id+0x1c/0x20 [ 1012.287041][T11675] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1012.287051][T11675] __x64_sys_clone+0x1ec/0x230 [ 1012.287065][T11675] do_syscall_64+0xfe/0x140 [ 1012.287077][T11675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.287083][T11675] RIP: 0033:0x459829 [ 1012.287094][T11675] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.296371][T11675] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1012.296379][T11675] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1012.296384][T11675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1012.296388][T11675] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1012.296393][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1012.296397][T11675] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 03:46:16 executing program 5 (fault-call:7 fault-nth:91): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5928) 03:46:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000054769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1012.620109][T11701] FAULT_INJECTION: forcing a failure. [ 1012.620109][T11701] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.634593][T11701] CPU: 0 PID: 11701 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1012.642557][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.642561][T11701] Call Trace: [ 1012.642576][T11701] dump_stack+0x1d8/0x2f8 [ 1012.642588][T11701] should_fail+0x555/0x770 [ 1012.642601][T11701] __should_failslab+0x11a/0x160 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1012.669501][T11701] should_failslab+0x9/0x20 [ 1012.673985][T11701] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1012.679251][T11701] ? __list_lru_init+0x3e3/0x900 [ 1012.684167][T11701] __list_lru_init+0x3e3/0x900 [ 1012.684179][T11701] alloc_super+0x664/0x740 [ 1012.684187][T11701] ? test_single_super+0x10/0x10 [ 1012.684193][T11701] sget_fc+0x1ea/0x640 [ 1012.684198][T11701] ? kill_litter_super+0xa0/0xa0 [ 1012.684210][T11701] ? proc_reconfigure+0x2d0/0x2d0 [ 1012.693324][T11701] vfs_get_super+0x6b/0x1b0 [ 1012.693337][T11701] proc_get_tree+0x89/0x90 [ 1012.693344][T11701] vfs_get_tree+0x8f/0x380 [ 1012.693353][T11701] ? __kasan_check_write+0x14/0x20 [ 1012.693363][T11701] fc_mount+0x1b/0xa0 [ 1012.693372][T11701] pid_ns_prepare_proc+0x208/0x280 [ 1012.693383][T11701] alloc_pid+0x714/0x880 [ 1012.693394][T11701] copy_process+0x29f5/0x5ac0 [ 1012.693403][T11701] ? __kasan_check_write+0x14/0x20 [ 1012.693412][T11701] ? refcount_sub_and_test_checked+0x179/0x230 [ 1012.693428][T11701] _do_fork+0x13f/0x5b0 [ 1012.763702][T11701] ? debug_smp_processor_id+0x1c/0x20 [ 1012.769037][T11701] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1012.775066][T11701] __x64_sys_clone+0x1ec/0x230 [ 1012.779795][T11701] do_syscall_64+0xfe/0x140 [ 1012.784265][T11701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.790138][T11701] RIP: 0033:0x459829 [ 1012.794004][T11701] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:16 executing program 5 (fault-call:7 fault-nth:92): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 1012.813572][T11701] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1012.821955][T11701] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1012.829891][T11701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1012.837826][T11701] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1012.845766][T11701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1012.853710][T11701] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002009effffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5940) 03:46:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1013.066330][T11731] FAULT_INJECTION: forcing a failure. [ 1013.066330][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.086715][T11731] CPU: 1 PID: 11731 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1013.094695][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.104727][T11731] Call Trace: [ 1013.107989][T11731] dump_stack+0x1d8/0x2f8 [ 1013.112289][T11731] should_fail+0x555/0x770 [ 1013.116784][T11731] __should_failslab+0x11a/0x160 [ 1013.121704][T11731] should_failslab+0x9/0x20 [ 1013.126172][T11731] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1013.131420][T11731] ? __list_lru_init+0x3e3/0x900 [ 1013.136324][T11731] __list_lru_init+0x3e3/0x900 [ 1013.141054][T11731] alloc_super+0x664/0x740 [ 1013.145435][T11731] ? test_single_super+0x10/0x10 [ 1013.150336][T11731] sget_fc+0x1ea/0x640 [ 1013.154371][T11731] ? kill_litter_super+0xa0/0xa0 [ 1013.159272][T11731] ? proc_reconfigure+0x2d0/0x2d0 [ 1013.164259][T11731] vfs_get_super+0x6b/0x1b0 [ 1013.168725][T11731] proc_get_tree+0x89/0x90 [ 1013.173102][T11731] vfs_get_tree+0x8f/0x380 [ 1013.177481][T11731] ? __kasan_check_write+0x14/0x20 [ 1013.182570][T11731] fc_mount+0x1b/0xa0 [ 1013.186515][T11731] pid_ns_prepare_proc+0x208/0x280 [ 1013.191590][T11731] alloc_pid+0x714/0x880 [ 1013.195799][T11731] copy_process+0x29f5/0x5ac0 [ 1013.200441][T11731] ? __kasan_check_write+0x14/0x20 [ 1013.205559][T11731] ? refcount_sub_and_test_checked+0x179/0x230 [ 1013.211681][T11731] _do_fork+0x13f/0x5b0 [ 1013.215804][T11731] ? debug_smp_processor_id+0x1c/0x20 [ 1013.221140][T11731] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1013.227171][T11731] __x64_sys_clone+0x1ec/0x230 [ 1013.231903][T11731] do_syscall_64+0xfe/0x140 [ 1013.236372][T11731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1013.242225][T11731] RIP: 0033:0x459829 [ 1013.246085][T11731] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 03:46:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200efffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1013.265655][T11731] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1013.274029][T11731] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1013.281964][T11731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1013.289901][T11731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1013.297840][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1013.305773][T11731] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:16 executing program 5 (fault-call:7 fault-nth:93): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:16 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200f0ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5958) 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200009effffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1013.580894][T11777] FAULT_INJECTION: forcing a failure. [ 1013.580894][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.593923][T11777] CPU: 0 PID: 11777 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1013.601886][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.611911][T11777] Call Trace: [ 1013.611925][T11777] dump_stack+0x1d8/0x2f8 [ 1013.611938][T11777] should_fail+0x555/0x770 [ 1013.611951][T11777] __should_failslab+0x11a/0x160 [ 1013.628811][T11777] should_failslab+0x9/0x20 [ 1013.633318][T11777] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1013.638584][T11777] ? __list_lru_init+0x3e3/0x900 [ 1013.638594][T11777] __list_lru_init+0x3e3/0x900 [ 1013.638606][T11777] alloc_super+0x664/0x740 [ 1013.638616][T11777] ? test_single_super+0x10/0x10 [ 1013.652655][T11777] sget_fc+0x1ea/0x640 [ 1013.652663][T11777] ? kill_litter_super+0xa0/0xa0 [ 1013.652673][T11777] ? proc_reconfigure+0x2d0/0x2d0 [ 1013.652680][T11777] vfs_get_super+0x6b/0x1b0 [ 1013.652689][T11777] proc_get_tree+0x89/0x90 [ 1013.652696][T11777] vfs_get_tree+0x8f/0x380 [ 1013.652703][T11777] ? __kasan_check_write+0x14/0x20 [ 1013.652733][T11777] fc_mount+0x1b/0xa0 [ 1013.680455][T11777] pid_ns_prepare_proc+0x208/0x280 [ 1013.680467][T11777] alloc_pid+0x714/0x880 [ 1013.680480][T11777] copy_process+0x29f5/0x5ac0 [ 1013.693895][T11777] ? __kasan_check_write+0x14/0x20 [ 1013.693906][T11777] ? refcount_sub_and_test_checked+0x179/0x230 [ 1013.693924][T11777] _do_fork+0x13f/0x5b0 [ 1013.723258][T11777] ? debug_smp_processor_id+0x1c/0x20 [ 1013.723268][T11777] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1013.723278][T11777] __x64_sys_clone+0x1ec/0x230 [ 1013.723292][T11777] do_syscall_64+0xfe/0x140 [ 1013.739397][T11777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1013.739404][T11777] RIP: 0033:0x459829 [ 1013.739413][T11777] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1013.739417][T11777] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1013.739425][T11777] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1013.739430][T11777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1013.739438][T11777] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1013.797576][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1013.797581][T11777] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:17 executing program 5 (fault-call:7 fault-nth:94): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000efffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200f24ea05e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5970) 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000f0ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1013.972448][T11830] FAULT_INJECTION: forcing a failure. [ 1013.972448][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.004323][T11830] CPU: 0 PID: 11830 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1014.012296][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.012300][T11830] Call Trace: [ 1014.012314][T11830] dump_stack+0x1d8/0x2f8 [ 1014.012328][T11830] should_fail+0x555/0x770 [ 1014.029912][T11830] __should_failslab+0x11a/0x160 [ 1014.029923][T11830] should_failslab+0x9/0x20 [ 1014.029931][T11830] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1014.029939][T11830] ? __list_lru_init+0x3e3/0x900 [ 1014.029947][T11830] __list_lru_init+0x3e3/0x900 [ 1014.029957][T11830] alloc_super+0x664/0x740 [ 1014.029966][T11830] ? test_single_super+0x10/0x10 [ 1014.029992][T11830] sget_fc+0x1ea/0x640 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1014.030001][T11830] ? kill_litter_super+0xa0/0xa0 [ 1014.039292][T11830] ? proc_reconfigure+0x2d0/0x2d0 [ 1014.039299][T11830] vfs_get_super+0x6b/0x1b0 [ 1014.039308][T11830] proc_get_tree+0x89/0x90 [ 1014.039315][T11830] vfs_get_tree+0x8f/0x380 [ 1014.039324][T11830] ? __kasan_check_write+0x14/0x20 [ 1014.049059][T11830] fc_mount+0x1b/0xa0 [ 1014.049071][T11830] pid_ns_prepare_proc+0x208/0x280 [ 1014.049082][T11830] alloc_pid+0x714/0x880 [ 1014.049093][T11830] copy_process+0x29f5/0x5ac0 [ 1014.049102][T11830] ? __kasan_check_write+0x14/0x20 [ 1014.049111][T11830] ? refcount_sub_and_test_checked+0x179/0x230 [ 1014.049129][T11830] _do_fork+0x13f/0x5b0 [ 1014.049138][T11830] ? debug_smp_processor_id+0x1c/0x20 [ 1014.049149][T11830] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1014.058784][T11830] __x64_sys_clone+0x1ec/0x230 [ 1014.058798][T11830] do_syscall_64+0xfe/0x140 [ 1014.058808][T11830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.058814][T11830] RIP: 0033:0x459829 [ 1014.058821][T11830] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.058825][T11830] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1014.058832][T11830] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1014.058836][T11830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1014.058843][T11830] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:46:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) [ 1014.068128][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1014.068134][T11830] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:17 executing program 5 (fault-call:7 fault-nth:95): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x40000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:17 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5988) 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000030eecb287400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1014.398378][T11867] FAULT_INJECTION: forcing a failure. [ 1014.398378][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.411228][T11867] CPU: 1 PID: 11867 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1014.419186][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.429209][T11867] Call Trace: [ 1014.432472][T11867] dump_stack+0x1d8/0x2f8 [ 1014.436771][T11867] should_fail+0x555/0x770 [ 1014.441245][T11867] __should_failslab+0x11a/0x160 [ 1014.446172][T11867] should_failslab+0x9/0x20 [ 1014.450659][T11867] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 1014.456352][T11867] ? __kmalloc_node+0x3c/0x60 [ 1014.461097][T11867] __kmalloc_node+0x3c/0x60 [ 1014.465658][T11867] kvmalloc_node+0xcc/0x130 [ 1014.470136][T11867] __list_lru_init+0x35b/0x900 [ 1014.474872][T11867] alloc_super+0x664/0x740 [ 1014.479253][T11867] ? test_single_super+0x10/0x10 [ 1014.484151][T11867] sget_fc+0x1ea/0x640 [ 1014.488187][T11867] ? kill_litter_super+0xa0/0xa0 [ 1014.493087][T11867] ? proc_reconfigure+0x2d0/0x2d0 [ 1014.498084][T11867] vfs_get_super+0x6b/0x1b0 [ 1014.502558][T11867] proc_get_tree+0x89/0x90 [ 1014.506941][T11867] vfs_get_tree+0x8f/0x380 [ 1014.511330][T11867] ? __kasan_check_write+0x14/0x20 [ 1014.516408][T11867] fc_mount+0x1b/0xa0 [ 1014.520366][T11867] pid_ns_prepare_proc+0x208/0x280 [ 1014.525441][T11867] alloc_pid+0x714/0x880 [ 1014.529649][T11867] copy_process+0x29f5/0x5ac0 [ 1014.534287][T11867] ? __kasan_check_write+0x14/0x20 [ 1014.539383][T11867] ? refcount_sub_and_test_checked+0x179/0x230 [ 1014.545525][T11867] _do_fork+0x13f/0x5b0 [ 1014.549653][T11867] ? debug_smp_processor_id+0x1c/0x20 [ 1014.555009][T11867] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1014.561042][T11867] __x64_sys_clone+0x1ec/0x230 [ 1014.565801][T11867] do_syscall_64+0xfe/0x140 [ 1014.570286][T11867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.576146][T11867] RIP: 0033:0x459829 [ 1014.580017][T11867] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.599596][T11867] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1014.607973][T11867] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1014.615913][T11867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1014.623851][T11867] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1014.631787][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1014.639725][T11867] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:18 executing program 5 (fault-call:7 fault-nth:96): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:46:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x59a0) 03:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x100000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1014.805434][T11900] FAULT_INJECTION: forcing a failure. [ 1014.805434][T11900] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.852809][T11900] CPU: 1 PID: 11900 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1014.860800][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.870835][T11900] Call Trace: [ 1014.874111][T11900] dump_stack+0x1d8/0x2f8 [ 1014.878419][T11900] should_fail+0x555/0x770 [ 1014.882805][T11900] __should_failslab+0x11a/0x160 [ 1014.887711][T11900] should_failslab+0x9/0x20 [ 1014.892181][T11900] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1014.897429][T11900] ? __list_lru_init+0x3e3/0x900 [ 1014.902345][T11900] __list_lru_init+0x3e3/0x900 [ 1014.907095][T11900] alloc_super+0x664/0x740 [ 1014.911484][T11900] ? test_single_super+0x10/0x10 [ 1014.916393][T11900] sget_fc+0x1ea/0x640 [ 1014.920423][T11900] ? kill_litter_super+0xa0/0xa0 [ 1014.925325][T11900] ? proc_reconfigure+0x2d0/0x2d0 [ 1014.930315][T11900] vfs_get_super+0x6b/0x1b0 [ 1014.934784][T11900] proc_get_tree+0x89/0x90 [ 1014.939162][T11900] vfs_get_tree+0x8f/0x380 [ 1014.943541][T11900] ? __kasan_check_write+0x14/0x20 [ 1014.948618][T11900] fc_mount+0x1b/0xa0 [ 1014.952562][T11900] pid_ns_prepare_proc+0x208/0x280 [ 1014.957634][T11900] alloc_pid+0x714/0x880 [ 1014.961840][T11900] copy_process+0x29f5/0x5ac0 [ 1014.966489][T11900] ? __kasan_check_write+0x14/0x20 [ 1014.971573][T11900] ? refcount_sub_and_test_checked+0x179/0x230 [ 1014.977712][T11900] _do_fork+0x13f/0x5b0 [ 1014.981842][T11900] ? debug_smp_processor_id+0x1c/0x20 [ 1014.987181][T11900] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1014.993218][T11900] __x64_sys_clone+0x1ec/0x230 [ 1014.997955][T11900] do_syscall_64+0xfe/0x140 [ 1015.002424][T11900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.008279][T11900] RIP: 0033:0x459829 [ 1015.012145][T11900] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.031711][T11900] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.040086][T11900] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:46:18 executing program 5 (fault-call:7 fault-nth:97): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) [ 1015.048029][T11900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1015.055964][T11900] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.063914][T11900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1015.071855][T11900] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x59b8) 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1015.172949][T11930] FAULT_INJECTION: forcing a failure. [ 1015.172949][T11930] name failslab, interval 1, probability 0, space 0, times 0 03:46:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 03:46:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x200000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:18 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1015.223421][T11930] CPU: 1 PID: 11930 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1015.231397][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.241432][T11930] Call Trace: [ 1015.244706][T11930] dump_stack+0x1d8/0x2f8 [ 1015.249032][T11930] should_fail+0x555/0x770 [ 1015.253430][T11930] __should_failslab+0x11a/0x160 [ 1015.258339][T11930] should_failslab+0x9/0x20 [ 1015.262818][T11930] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1015.268064][T11930] ? __list_lru_init+0x3e3/0x900 [ 1015.272965][T11930] __list_lru_init+0x3e3/0x900 [ 1015.277692][T11930] alloc_super+0x664/0x740 [ 1015.282072][T11930] ? test_single_super+0x10/0x10 [ 1015.286972][T11930] sget_fc+0x1ea/0x640 [ 1015.291005][T11930] ? kill_litter_super+0xa0/0xa0 [ 1015.295916][T11930] ? proc_reconfigure+0x2d0/0x2d0 [ 1015.300908][T11930] vfs_get_super+0x6b/0x1b0 [ 1015.305373][T11930] proc_get_tree+0x89/0x90 [ 1015.309755][T11930] vfs_get_tree+0x8f/0x380 [ 1015.314137][T11930] ? __kasan_check_write+0x14/0x20 [ 1015.319218][T11930] fc_mount+0x1b/0xa0 [ 1015.323162][T11930] pid_ns_prepare_proc+0x208/0x280 [ 1015.328237][T11930] alloc_pid+0x714/0x880 [ 1015.332442][T11930] copy_process+0x29f5/0x5ac0 [ 1015.337091][T11930] ? __kasan_check_write+0x14/0x20 [ 1015.342174][T11930] ? refcount_sub_and_test_checked+0x179/0x230 [ 1015.348305][T11930] _do_fork+0x13f/0x5b0 [ 1015.352422][T11930] ? debug_smp_processor_id+0x1c/0x20 [ 1015.357756][T11930] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1015.363787][T11930] __x64_sys_clone+0x1ec/0x230 [ 1015.368520][T11930] do_syscall_64+0xfe/0x140 [ 1015.372988][T11930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.378846][T11930] RIP: 0033:0x459829 [ 1015.382713][T11930] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.402290][T11930] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.410661][T11930] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 03:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) [ 1015.418600][T11930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1015.426533][T11930] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.434487][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1015.442423][T11930] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:19 executing program 5 (fault-call:7 fault-nth:98): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:19 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:46:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x59d0) 03:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:46:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x300000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:19 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 1015.709848][T11970] FAULT_INJECTION: forcing a failure. [ 1015.709848][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.742188][T11970] CPU: 0 PID: 11970 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1015.750159][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) [ 1015.760183][T11970] Call Trace: [ 1015.760197][T11970] dump_stack+0x1d8/0x2f8 [ 1015.760209][T11970] should_fail+0x555/0x770 [ 1015.760222][T11970] __should_failslab+0x11a/0x160 [ 1015.777088][T11970] should_failslab+0x9/0x20 [ 1015.781566][T11970] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1015.786832][T11970] ? __list_lru_init+0x3e3/0x900 [ 1015.791754][T11970] __list_lru_init+0x3e3/0x900 [ 1015.796500][T11970] alloc_super+0x664/0x740 [ 1015.800932][T11970] ? test_single_super+0x10/0x10 [ 1015.805849][T11970] sget_fc+0x1ea/0x640 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) [ 1015.809900][T11970] ? kill_litter_super+0xa0/0xa0 [ 1015.814847][T11970] ? proc_reconfigure+0x2d0/0x2d0 [ 1015.819857][T11970] vfs_get_super+0x6b/0x1b0 [ 1015.824350][T11970] proc_get_tree+0x89/0x90 [ 1015.828744][T11970] vfs_get_tree+0x8f/0x380 [ 1015.833137][T11970] ? __kasan_check_write+0x14/0x20 [ 1015.838249][T11970] fc_mount+0x1b/0xa0 [ 1015.842216][T11970] pid_ns_prepare_proc+0x208/0x280 [ 1015.847306][T11970] alloc_pid+0x714/0x880 [ 1015.851523][T11970] copy_process+0x29f5/0x5ac0 [ 1015.856191][T11970] ? __kasan_check_write+0x14/0x20 [ 1015.861270][T11970] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1015.866692][T11970] ? refcount_sub_and_test_checked+0x179/0x230 [ 1015.872812][T11970] ? trace_hardirqs_on_caller+0x74/0x80 [ 1015.878324][T11970] _do_fork+0x13f/0x5b0 [ 1015.882444][T11970] ? debug_smp_processor_id+0x1c/0x20 [ 1015.887777][T11970] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1015.893808][T11970] __x64_sys_clone+0x1ec/0x230 [ 1015.898536][T11970] do_syscall_64+0xfe/0x140 [ 1015.903004][T11970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.908867][T11970] RIP: 0033:0x459829 [ 1015.912729][T11970] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.932299][T11970] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.940673][T11970] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1015.948611][T11970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1015.956546][T11970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.964483][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1015.972424][T11970] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:19 executing program 5 (fault-call:7 fault-nth:99): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 03:46:19 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x59e8) 03:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x400000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 03:46:19 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 1016.178838][T12016] FAULT_INJECTION: forcing a failure. [ 1016.178838][T12016] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.195608][T12016] CPU: 0 PID: 12016 Comm: syz-executor.5 Not tainted 5.3.0-rc5+ #86 [ 1016.203584][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.213619][T12016] Call Trace: [ 1016.213634][T12016] dump_stack+0x1d8/0x2f8 [ 1016.213648][T12016] should_fail+0x555/0x770 [ 1016.225604][T12016] __should_failslab+0x11a/0x160 [ 1016.230527][T12016] should_failslab+0x9/0x20 [ 1016.230538][T12016] kmem_cache_alloc_trace+0x5d/0x2f0 [ 1016.230546][T12016] ? __list_lru_init+0x3e3/0x900 [ 1016.230556][T12016] __list_lru_init+0x3e3/0x900 [ 1016.230568][T12016] alloc_super+0x664/0x740 [ 1016.230578][T12016] ? test_single_super+0x10/0x10 [ 1016.230583][T12016] sget_fc+0x1ea/0x640 [ 1016.230594][T12016] ? kill_litter_super+0xa0/0xa0 [ 1016.240407][T12016] ? proc_reconfigure+0x2d0/0x2d0 [ 1016.240415][T12016] vfs_get_super+0x6b/0x1b0 03:46:19 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a00) [ 1016.240424][T12016] proc_get_tree+0x89/0x90 [ 1016.240431][T12016] vfs_get_tree+0x8f/0x380 [ 1016.240438][T12016] ? __kasan_check_write+0x14/0x20 [ 1016.240448][T12016] fc_mount+0x1b/0xa0 [ 1016.240456][T12016] pid_ns_prepare_proc+0x208/0x280 [ 1016.240465][T12016] alloc_pid+0x714/0x880 [ 1016.240476][T12016] copy_process+0x29f5/0x5ac0 [ 1016.250111][T12016] ? __kasan_check_write+0x14/0x20 [ 1016.250122][T12016] ? refcount_sub_and_test_checked+0x179/0x230 [ 1016.250141][T12016] _do_fork+0x13f/0x5b0 [ 1016.250150][T12016] ? debug_smp_processor_id+0x1c/0x20 [ 1016.250160][T12016] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1016.250170][T12016] __x64_sys_clone+0x1ec/0x230 [ 1016.250184][T12016] do_syscall_64+0xfe/0x140 [ 1016.250196][T12016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.250203][T12016] RIP: 0033:0x459829 [ 1016.250212][T12016] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) [ 1016.250217][T12016] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1016.250224][T12016] RAX: ffffffffffffffda RBX: 00007fd819f45c90 RCX: 0000000000459829 [ 1016.250232][T12016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 1016.259515][T12016] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1016.259520][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1016.259525][T12016] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 0000000000000008 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x500000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a18) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 03:46:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a016006a, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x600000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a30) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x700000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160102, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 03:46:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a48) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000007428cbee3000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x800000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:46:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160103, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a60) 03:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x900000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:20 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160105, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:46:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a78) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xa00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:46:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160106, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xb00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5a90) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:46:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a016010c, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160110, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5aa8) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160111, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000000088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5ac0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 03:46:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160114, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 03:46:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5ad8) 03:46:22 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:22 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 03:46:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 03:46:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160126, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:24 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000fffffff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5af0) 03:46:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 03:46:24 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:46:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000755ea04ef200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:24 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 03:46:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a016016a, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffff, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b08) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000007fffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1000000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0166a00, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b20) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1100000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b38) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) move_pages(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1200000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b50) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000100)={0x6, 0x2b7, 0x3}) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x20, 0x2, 0x3, 0x91a, 0x1}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x100000010101, 0x20) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1300000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b68) 03:46:25 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 03:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1900000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 03:46:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b80) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x0, 0xde7}}) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/51, &(0x7f00000000c0)=0x33) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r2, &(0x7f0000000300)='gid_map\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1f00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5b98) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='gid_map\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5bb0) 03:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2000000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/51, &(0x7f0000000080)=0x33) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5bc8) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2400000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x18000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r3 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r3, 0x0, 0x10106) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2500000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5be0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000760c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5bf8) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2f00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x24042, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c10) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3a00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 03:46:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000200)={0x5, 0x0, [{0xffffffffffffffe6, 0x4, 0x0, 0x0, @msi={0x1, 0x1, 0x4}}, {0xc22c, 0x3, 0x0, 0x0, @sint={0x401, 0xaba7}}, {0x9, 0x1, 0x0, 0x0, @irqchip={0xc15, 0x100}}, {0x6, 0x0, 0x0, 0x0, @adapter={0x5, 0x7, 0x4eceb0cd, 0x3f, 0x9}}, {0x1, 0x2, 0x0, 0x0, @adapter={0x10000, 0x9, 0x7, 0xffffffffffffffc1, 0x7}}]}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x3d, "6fa3711ed76847a124e774aeb6a05a03dda2c6fcdb27007de6936c00269f3f85b031d3f18cb9fb442e2107247f66fedc0b8100"/61}, &(0x7f0000000440)=0x45) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x800}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={r2, 0x3}, &(0x7f0000000380)=0x8) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000810800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3f00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c28) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 5: prctl$PR_SET_TSC(0x1a, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x6, 0x1, 0x5, 0x1909, &(0x7f0000000100)=[{}]}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x101202, 0x0) 03:46:27 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) 03:46:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4000000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c40) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x1, 0x8, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @random="1b3f21a5de49", @broadcast, @dev={[], 0x10}, @local, @remote]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x410f000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c58) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 03:46:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4800000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c70) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4a00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5c88) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4c00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 03:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5ca0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') fcntl$setlease(r1, 0x400, 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x4000, 0x0) ftruncate(r3, 0x20) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000240)={{0x893c, 0x100000000}, {0x100000001, 0x1}, 0xffffffff, 0x6, 0x80000000}) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000002c0)={0x2e56, 0x3}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fstatfs(r1, &(0x7f00000000c0)=""/78) wait4(0x0, 0x0, 0x4, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000200)={0x7be0, 0x8001}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x11ff, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) fadvise64(r0, 0x0, 0xc5b2, 0x5) ioctl$SIOCRSACCEPT(r2, 0x89e3) 03:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5602000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5cb8) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:46:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0xf621, 0x1, 0x0, 0x0, 0x0, 0x7}}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000088100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6000000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000080fe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5cd0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000400300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 03:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6558000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000200)={0xa2f3fe1cc5265537, @output={0x1000, 0x1, {0x4, 0x6}, 0x5, 0x2}}) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000034000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5ce8) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:46:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0xabd8, 0xdc0a39f4716d2c77) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1, 0x4a) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) getsockname(r4, &(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000600)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', r5}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mISDNtimer\x00', 0x2000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="04002cbd7000fc010000000000000000010008000600736800000800090057000000080004004e20000008000500040000000800010002000000080004004e2300000800010002000000080008ef030000004c00030008000500e00000011400060000000000000000f0ff00ffff7f0000011400020062617461647630000000000000000000080001001fbd88370800030002000000080007004e240000080006000180000030000300140002006e7230000000000000000000000000000800010002000000080007004e2300000800010002000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 03:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6800000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d00) 03:46:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) 03:46:29 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000001200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, &(0x7f0000001800)=[{&(0x7f0000001500)=""/87, 0x57}, {&(0x7f0000001580)=""/75, 0x4b}, {&(0x7f0000001600)=""/169, 0xa9}, {&(0x7f00000016c0)=""/199, 0xc7}, {&(0x7f00000017c0)=""/12, 0xc}], 0x5, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a33e4501, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) fstatfs(r1, &(0x7f0000001880)=""/251) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6c00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d18) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) getpid() preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x6, 0x39) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000200)={0x41, 0x1, 0x5, 0x8, 0x6, 0x81}) getpgid(0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000100)='selinux/\x00', 0xffffffffffffffff}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r4) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r2, 0x401, 0x100000000, r2}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7400000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000003f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 03:46:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d30) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7a00000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000919f765400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8000000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @multicast1}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@rand_addr="1ec58f69951dbcd8c9754025f8d926eb", 0x4d, r2}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d48) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e00000020000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8100000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000200)=""/239) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000c7600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d60) 03:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8847000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:31 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000054769f9100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='gid_map\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7b8d25bd7000fbdb89250e000000080005000200000008000400ff09000000000000002100000800060005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x440d1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) 03:46:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 03:46:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000ffffff9e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 03:46:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 0: socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e0000002000000ffffffef00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007880)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000168100d4500", @ANYRES32=0x0, @ANYBLOB="0400020008000100", @ANYRES64, @ANYBLOB="3c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004"], 0x9}}, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x5d78) 03:46:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:46:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8848000000000000, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800140000000000"], 0x3c}}, 0x0) 03:46:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016001703000000000000000000000000000000000000000000000001e000000200000000001100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b908369954769f910000000000000000000000000000000000000000080000000c00150000000000af000000"], 0x104}}, 0x0) 03:46:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 1188.975847][ T1048] INFO: task syz-executor.5:13416 blocked for more than 143 seconds. [ 1188.983932][ T1048] Not tainted 5.3.0-rc5+ #86 [ 1188.990333][ T1048] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1188.999175][ T1048] syz-executor.5 D28392 13416 8851 0x00004006 [ 1189.005482][ T1048] Call Trace: [ 1189.009916][ T1048] __schedule+0x877/0xc50 [ 1189.014219][ T1048] schedule+0x131/0x1e0 [ 1189.018382][ T1048] perf_event_free_task+0x54a/0x630 [ 1189.023566][ T1048] ? init_wait_var_entry+0x150/0x150 [ 1189.029658][ T1048] copy_process+0x3ad6/0x5ac0 [ 1189.034454][ T1048] ? __fd_install+0x280/0x4f0 [ 1189.039222][ T1048] _do_fork+0x13f/0x5b0 [ 1189.043409][ T1048] ? debug_smp_processor_id+0x1c/0x20 [ 1189.048841][ T1048] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1189.054909][ T1048] __x64_sys_clone+0x1ec/0x230 [ 1189.059730][ T1048] do_syscall_64+0xfe/0x140 [ 1189.064236][ T1048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.070145][ T1048] RIP: 0033:0x459829 [ 1189.074249][ T1048] Code: Bad RIP value. [ 1189.078386][ T1048] RSP: 002b:00007fd819f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1189.086820][ T1048] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 [ 1189.094799][ T1048] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000002102001ffe [ 1189.102814][ T1048] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1189.110797][ T1048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd819f466d4 [ 1189.118796][ T1048] R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 00000000ffffffff [ 1189.126794][ T1048] INFO: lockdep is turned off. [ 1189.131546][ T1048] NMI backtrace for cpu 1 [ 1189.135906][ T1048] CPU: 1 PID: 1048 Comm: khungtaskd Not tainted 5.3.0-rc5+ #86 [ 1189.143408][ T1048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.153423][ T1048] Call Trace: [ 1189.156804][ T1048] dump_stack+0x1d8/0x2f8 [ 1189.161106][ T1048] nmi_cpu_backtrace+0xaf/0x1a0 [ 1189.165917][ T1048] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 1189.172032][ T1048] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1189.178057][ T1048] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 1189.183998][ T1048] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1189.189851][ T1048] trigger_all_cpu_backtrace+0x17/0x20 [ 1189.195267][ T1048] watchdog+0xbb9/0xbd0 [ 1189.199385][ T1048] kthread+0x332/0x350 [ 1189.203681][ T1048] ? hungtask_pm_notify+0x50/0x50 [ 1189.208670][ T1048] ? kthread_blkcg+0xe0/0xe0 [ 1189.213221][ T1048] ret_from_fork+0x24/0x30 [ 1189.217680][ T1048] Sending NMI from CPU 1 to CPUs 0: [ 1189.222892][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 1189.223918][ T1048] Kernel panic - not syncing: hung_task: blocked tasks [ 1189.237934][ T1048] CPU: 1 PID: 1048 Comm: khungtaskd Not tainted 5.3.0-rc5+ #86 [ 1189.245433][ T1048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.255448][ T1048] Call Trace: [ 1189.258697][ T1048] dump_stack+0x1d8/0x2f8 [ 1189.263001][ T1048] panic+0x25c/0x799 [ 1189.266862][ T1048] ? nmi_trigger_cpumask_backtrace+0x21a/0x290 [ 1189.272986][ T1048] watchdog+0xbcc/0xbd0 [ 1189.277116][ T1048] kthread+0x332/0x350 [ 1189.281151][ T1048] ? hungtask_pm_notify+0x50/0x50 [ 1189.286194][ T1048] ? kthread_blkcg+0xe0/0xe0 [ 1189.290863][ T1048] ret_from_fork+0x24/0x30 [ 1189.296435][ T1048] Kernel Offset: disabled [ 1189.300742][ T1048] Rebooting in 86400 seconds..